Privacy Policy

Effective October 20, 2026. How Pickyoka handles your data, in plain language.

Summary

In short: your meals, weigh-ins, recipes and conversations are stored on your iPhone. Meal photos and coach or recipe requests are sent for AI processing only to produce the result you ask for. We use a pseudonymous Sign in with Apple identifier to secure the AI service. We do not sell personal data, show advertising, use analytics or track you across other apps and websites.

This Privacy Policy explains how Stuvio Digital Private Limited ("Stuvio", "we", "us") handles personal data when you use the Pickyoka iPhone app (the "App") and this website (together, the "Services"). It applies worldwide, with additional information for specific regions near the end.

Who we are

Stuvio Digital Private Limited is the data controller responsible for your personal data.

Stuvio Digital Private Limited
P-2051–P-2052, P-Wing, Unit No. 2nd Floor
Navi Mumbai, Maharashtra 400703
India
Email: products@stuvio.co

Data we process

We collect as little as possible. The table below lists every category of personal data the Services process, where it is kept and why.

DataWhere it is keptPurpose
Profile: sex, date of birth, height, weight, activity level, goal, target weight and paceOn your deviceCalculating your calorie budget, macro targets and goal date
Food and activity logs: meals, nutrition values, photos you scan, workouts, weigh-ins, saved recipesOn your deviceShowing your diary, progress and history
Meal photos you choose to analyzeSent for processing when you scan; not stored by usEstimating the food, portion and nutrition in the photo
Coach and recipe requests: your question plus relevant context, such as your goal, targets and today's mealsConversations are stored on your device; requests are sent for processing and not stored by usAnswering your question or creating a recipe
Account identifier: the pseudonymous user identifier provided by Sign in with Apple, and a token that lets us revoke the sign-inOn our server (Cloudflare)Securing the AI service, applying fair-use limits, revoking Sign in with Apple when you delete your account
Name and email, only if you choose to share them through Sign in with Apple (you can use a private relay email)On your device onlyShowing your account in the App
Usage counters: the number of AI requests per account per dayOn our server, deleted automatically after two daysPreventing abuse of the AI service
Technical data: IP address and request metadata processed transiently when the App connects to our servers and partnersNot retained by us beyond what is needed to deliver the requestDelivering the Services securely
Subscription statusManaged by Apple; the App checks it on your deviceUnlocking Pickyoka Pro

We do not collect your precise location, contacts, advertising identifiers, browsing history or payment card details.

Apple Health and health data

Connecting Apple Health is optional. With your permission, the App writes dietary energy, protein, carbohydrates and fat for meals you log, active energy for workouts, and your body weight, and it reads your body weight.

  • Health data obtained through HealthKit is used only to provide the App's features. It is never used for advertising or marketing, never sold, and never shared with data brokers or other third parties, except as described in this policy to deliver features you request.
  • We do not store HealthKit data on our servers or in iCloud.
  • You can change or revoke access at any time in the Health app under Sharing › Apps › Pickyoka.

Nutrition, weight and fitness information can be considered sensitive or health-related data in some jurisdictions. Where the law requires it, we process it on the basis of your explicit consent, which you give when you enter it, scan a meal or connect Apple Health, and which you can withdraw at any time.

AI processing

Pickyoka uses artificial intelligence to analyze meal photos, answer coach questions and create recipes.

  • Apple Intelligence. On supported devices, coach and recipe requests are processed by Apple's on-device model and do not leave your iPhone.
  • Anthropic. Meal photo analysis, and coach and recipe requests on other devices, are processed by Anthropic PBC's Claude models through our secure server. Requests are sent only when you ask for a result. Under Anthropic's commercial terms, this data is not used to train its models and may be retained for a limited period for trust and safety purposes.

AI results are estimates. They are not reviewed by a person and should not be relied on for medical decisions or to manage allergies.

Service providers and sharing

We share personal data only with service providers that process it on our behalf, under contracts that require them to protect it, or with providers you connect to directly:

ProviderRole
Apple Inc.Sign in with Apple, App Store purchases and subscriptions, HealthKit, Apple Intelligence
Anthropic PBC (United States)AI processing of meal photos, coach questions and recipe requests
Cloudflare, Inc. (global network)Hosting our server and this website, security and fair-use limits
Open Food Facts (France)Product lookups when you scan a barcode or search for a product. Requests contain the barcode or search term only.
Wikimedia Commons and FlickrRecipe photos are loaded from these image hosts, which receive your IP address as part of the standard web request.

We may also disclose information if required by law, to protect the rights, safety and security of our users or the public, or as part of a merger or acquisition, in which case this policy will continue to apply to your data.

We do not sell or "share" personal data for cross-context behavioral advertising, as those terms are defined under California law, and we have not done so in the past 12 months.

How long we keep data

  • Data stored on your device stays there until you delete it, delete your account or delete the App.
  • Your Sign in with Apple identifier and revocation token are kept on our server while your account exists and are deleted when you delete your account.
  • Daily usage counters are deleted automatically after two days.
  • Meal photos and AI requests are not stored by us after the result is returned.

Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, to withdraw consent. You will not be discriminated against for exercising your rights.

Most of your data lives on your device, where you can view, edit and delete it in the App at any time. To delete everything, use Profile › Account › Delete account. See how account deletion works.

To exercise any right, email products@stuvio.co. We will respond within one month (or within the period required by applicable law) and may need to verify your request.

Children

The Services are not directed to children under 13 (or the minimum age required in your country, such as 16 in some EU countries), and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

Security

We use encryption in transit (HTTPS) for all connections, store account credentials in the iOS Keychain, issue short-lived signed sessions for our server, and limit access to what each provider needs. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of a personal data breach where the law requires.

Europe, the UK and Switzerland

If you are in the European Economic Area, the United Kingdom or Switzerland, we process personal data on these legal bases under the GDPR, the UK GDPR and the Swiss Federal Act on Data Protection:

  • Contract: to provide the App and the features you request, including AI analysis and your subscription.
  • Consent: for health-related data and Apple Health access. You can withdraw consent at any time.
  • Legitimate interests: to secure our Services and prevent abuse, such as fair-use limits on AI requests.
  • Legal obligation: where we must retain or disclose information by law.

You have the right to lodge a complaint with your local data protection authority.

International transfers

Our service providers may process data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or on the provider's certification under the EU-U.S. Data Privacy Framework.

United States

Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other US states with consumer privacy laws have the right to know what personal data we collect, to access, correct and delete it, and to opt out of its sale, sharing for targeted advertising, and profiling. We do not sell personal data, share it for targeted advertising, or use it for profiling that produces legal or similarly significant effects. We do not use or disclose sensitive personal information for purposes other than providing the Services.

The categories of personal data we collect, their sources, purposes and recipients are described in the sections above. To exercise your rights, email products@stuvio.co; you may use an authorized agent. If we decline your request, you can appeal by replying to our decision, and we will respond within 45 days.

Washington and Nevada residents: see our Consumer Health Data Privacy Policy.

India

Under the Digital Personal Data Protection Act, 2023, you may also nominate another person to exercise your rights in the event of death or incapacity. Our Grievance Officer under the Information Technology Act, 2000 is Rehan Temkar, reachable at products@stuvio.co. We acknowledge complaints within 24 hours and resolve them within 15 days. You may also approach the Data Protection Board of India.

Changes to this policy

We may update this policy as the Services change. We will post the new version on this page with a new effective date and, for material changes, notify you in the App before they take effect.

Contact

Questions or requests about privacy: products@stuvio.co, or write to Stuvio Digital Private Limited, P-2051–P-2052, P-Wing, Unit No. 2nd Floor, Navi Mumbai, Maharashtra 400703, India.