Last updated: 13 October 2026
This policy covers the Doya app for iPhone and Android (“the app”), made by Yeap Digital Ltd. It explains what information leaves your phone, why, who receives it, how long it is kept and what your rights are.
Summary
- No account. We never ask for your name, email address or phone number.
- Your food log, photos, weight, goals and personal details stay on your phone. We never receive them.
- To identify food, a meal photo or a meal you describe is analysed in the cloud: on some iPhones by Apple, otherwise by OpenAI through our server. We don’t store either.
- No ads, no tracking, no analytics. We don’t sell or share your information.
Who we are
Yeap Digital Ltd, United Kingdom, is the data controller. Contact: yeap@yeapdigital.co.uk
What stays on your phone
Your meals and their photos, weight entries, goals, targets, answers to the hunger check, and any personal details you choose to enter (sex, age, height and activity level) are stored only on your phone. We never receive them.
What leaves your phone
Meal photos. When you scan a meal, the photo is analysed to identify the food. Location and other hidden data are removed from the photo first, and none of your other information is sent with it.
- On some iPhones, Apple’s own services analyse the photo, under Apple’s privacy terms. We don’t receive it.
- Otherwise, and on every Android phone, the photo goes to our server (Google Cloud, London), which sends it to OpenAI to identify the food. We don’t store the photo. OpenAI receives nothing that identifies you, does not use the photo to train its models, and may keep it for up to 30 days to detect abuse.
Meals you describe. If you say or type what you ate, the words are analysed in the same way as a photo, by Apple or by OpenAI through our server, and we don’t store them. Your phone turns speech into text, or Apple’s or Google’s speech service does when your phone can’t. The app never sends your voice.
Scan identifier. The first time a scan goes to our server, the app creates a random identifier with Google Firebase. It is not linked to your name, email address, Apple Account or Google Account. We use it to confirm requests come from the genuine app and to apply a daily and monthly scan limit. The only other thing we keep with it is a count of your scans and their dates. Both are deleted automatically within six weeks of your last scan sent to our server.
Technical records. Google Cloud keeps records of requests to our server, including IP address and basic device information, for 30 days to keep the service secure. The Firebase software in the app may also send Google basic technical information, such as its version and your phone’s operating system version.
Subscriptions. Payments are handled by Apple on iPhone and by Google Play on Android, and we never see your payment details. RevenueCat receives an app user ID, your purchase history and basic device information so the app can check your subscription.
Emails. If you email us, we use your email address, your message and any device details it includes to reply.
What we don’t do
We don’t show ads, track you across other apps or websites, use analytics or crash reporting services, collect your location or contacts, or sell or share your personal information.
Why we use your information
- Analysing meal photos and descriptions, and checking your subscription: to provide the service you asked for (contract).
- The scan identifier, scan counts and technical records: our legitimate interest in keeping the service secure and applying fair use limits.
- Emails: our legitimate interest in answering you.
Who receives it
| Recipient | What |
|---|---|
| Apple | meal photos and descriptions, on iPhones that analyse them with Apple’s services; speech, when an iPhone can’t turn it into text itself; purchases on iPhone |
| Google (Firebase, Google Cloud and Google Play) | meal photos while they are processed, the scan identifier and counts, technical records; purchases on Android |
| OpenAI | meal photos and descriptions, when Apple’s services don’t analyse them |
| RevenueCat | subscription information |
We may also disclose information when the law requires it.
OpenAI and RevenueCat may process information in the United States. For these transfers we rely on safeguards recognised by UK law, such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework.
How long we keep it
| Information | Kept |
|---|---|
| Meal photos and descriptions on our server | not stored |
| Meal photos and descriptions at OpenAI | up to 30 days |
| Scan identifier and counts | until six weeks after your last scan sent to our server |
| Technical records | 30 days |
| Emails | as long as needed to reply |
Your choices and rights
- Delete your data. In the app, Settings > Delete everything removes your meals, photos and details from your phone. Copies may remain in your iCloud, Google or computer backups until they are replaced. On Android, the backup holds your log, weights, goals and hunger answers, never your photos.
- The scan identifier is not removed this way, because removing it would reset scan limits. On iPhone it may stay after the app is deleted. It is deleted automatically as described above.
- Your rights. You can ask to access, correct or delete your personal information, to restrict or object to its use, or to receive a copy. Because we don’t know who you are, we usually can’t find a record about you, but contact us and we will help.
- Complaints. You can complain to the UK Information Commissioner’s Office (ico.org.uk) or your local data protection authority.
Children
The app is not intended for children under 13.
Changes
When this policy changes we will update the date above, and we will let you know about significant changes before they take effect.
Contact
Yeap Digital Ltd, yeap@yeapdigital.co.uk