Last updated: 24 September 2026
This policy covers the Doya iPhone app (“the app”), made by Yeap Digital Ltd. It explains what information leaves your iPhone, why, who receives it, how long it is kept and what your rights are.
Summary
- No account. We never ask for your name, email address or phone number.
- Your food log, photos, weight, goals and personal details stay on your iPhone. We never receive them.
- To identify food, a meal photo is analysed in the cloud: on some iPhones by Apple, otherwise by OpenAI through our server. We don’t store it.
- No ads, no tracking, no analytics. We don’t sell or share your information.
Who we are
Yeap Digital Ltd, United Kingdom, is the data controller. Contact: yeap@yeapdigital.co.uk
What stays on your iPhone
Your meals and their photos, weight entries, goals, targets, answers to the hunger check, and any personal details you choose to enter (sex, age, height and activity level) are stored only on your iPhone. We never receive them.
What leaves your iPhone
Meal photos. When you scan a meal, the photo is analysed to identify the food. Location and other hidden data are removed from the photo first, and none of your other information is sent with it.
- On some iPhones, Apple’s own services analyse the photo, under Apple’s privacy terms. We don’t receive it.
- Otherwise, the photo goes to our server (Google Cloud, London), which sends it to OpenAI to identify the food. We don’t store the photo. OpenAI receives nothing that identifies you, does not use the photo to train its models, and may keep it for up to 30 days to detect abuse.
Scan identifier. The first time a scan goes to our server, the app creates a random identifier with Google Firebase. It is not linked to your name, email address or Apple Account. We use it to confirm requests come from the genuine app and to apply a daily and monthly scan limit. The only other thing we keep with it is a count of your scans and their dates. Both are deleted automatically within six weeks of your last scan sent to our server.
Technical records. Google Cloud keeps records of requests to our server, including IP address and basic device information, for 30 days to keep the service secure. The Firebase software in the app may also send Google basic technical information, such as its version and your iOS version.
Subscriptions. Payments are handled by Apple, and we never see your payment details. RevenueCat receives an app user ID, your purchase history and basic device information so the app can check your subscription.
Emails. If you email us, we use your email address, your message and any device details it includes to reply.
What we don’t do
We don’t show ads, track you across other apps or websites, use analytics or crash reporting services, collect your location or contacts, or sell or share your personal information.
Why we use your information
- Analysing meal photos and checking your subscription: to provide the service you asked for (contract).
- The scan identifier, scan counts and technical records: our legitimate interest in keeping the service secure and applying fair use limits.
- Emails: our legitimate interest in answering you.
Who receives it
| Recipient | What |
|---|---|
| Apple | meal photos, on iPhones that analyse them with Apple’s services; purchases |
| Google (Firebase and Google Cloud) | meal photos while they are processed, the scan identifier and counts, technical records |
| OpenAI | meal photos, when Apple’s services don’t analyse them |
| RevenueCat | subscription information |
We may also disclose information when the law requires it.
OpenAI and RevenueCat may process information in the United States. For these transfers we rely on safeguards recognised by UK law, such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework.
How long we keep it
| Information | Kept |
|---|---|
| Meal photos on our server | not stored |
| Meal photos at OpenAI | up to 30 days |
| Scan identifier and counts | until six weeks after your last scan sent to our server |
| Technical records | 30 days |
| Emails | as long as needed to reply |
Your choices and rights
- Delete your data. In the app, Settings > Delete everything removes your meals, photos and details from your iPhone. Copies may remain in iCloud or computer backups until they are replaced.
- The scan identifier is not removed this way, and may stay on your iPhone after the app is deleted, because removing it would reset scan limits. It is deleted automatically as described above.
- Your rights. You can ask to access, correct or delete your personal information, to restrict or object to its use, or to receive a copy. Because we don’t know who you are, we usually can’t find a record about you, but contact us and we will help.
- Complaints. You can complain to the UK Information Commissioner’s Office (ico.org.uk) or your local data protection authority.
Children
The app is not intended for children under 13.
Changes
When this policy changes we will update the date above, and we will let you know about significant changes before they take effect.
Contact
Yeap Digital Ltd, yeap@yeapdigital.co.uk