1. Who we are
FoodLana ("FoodLana", "we", "us") is an independent iPhone app that suggests what to order at a restaurant based on the diet you follow. This policy explains what information the app handles, why, and what happens to it. If anything here is unclear, email hello@prawngroup.com and we'll answer plainly.
2. Information stored on your device
Everything you create in FoodLana is written to local storage on your iPhone. It is not uploaded to us, backed up to our servers, or associated with any identity.
| What | Includes |
|---|---|
| Diet profile | The diet you follow, an optional display name, optional calorie and carbohydrate goals, and any allergy or preference notes you enter. |
| History | Restaurants you've analyzed and the recommendations you received. |
| Favorites | Dishes you've saved, grouped by city. |
| Weight log | Weight entries you choose to record, with their dates. |
| Coach conversations | Your chat threads with the in-app diet coach. |
Some of this — allergy notes and weight entries in particular — is health-related information. We treat it as sensitive, which is precisely why it never leaves your device except in the limited, request-scoped way described in section 4.
3. Information we do not collect
- No name, email address, phone number, postal address or password.
- No account, user ID, device advertising identifier (IDFA) or persistent tracking identifier.
- No contacts, photos, calendar, microphone, camera or health-app (HealthKit) data.
- No analytics, crash-reporting or attribution SDKs are bundled in the app.
- No payment information — the app does not sell anything or process payments.
We do not track you across other apps or websites, and we do not build advertising profiles. FoodLana contains no third-party advertising.
4. What is sent to our server, and why
FoodLana needs live menu and map data, which comes from third-party services. Those services require secret API keys that cannot safely be embedded in an app, so the app routes those specific requests through our server at api-production-fc00.up.railway.app. The server's only job is to attach those keys and pass the request along. It does not maintain a user database and does not store the contents of your requests.
Depending on what you're doing, a request may contain:
- A restaurant name, a search term, a city or a ZIP code you typed — to find restaurants and to look up a menu.
- Approximate or precise location coordinates — only when you use "Near me" or "Suggest for me". See section 5.
- Diet context — the diet you follow and any dietary restrictions relevant to the request, so the recommendation actually matches your plan. This is sent as context for that one request; it is not stored.
- The message you type to the diet coach, and enough of that conversation for the reply to make sense.
Results stream back to your phone and are saved there. Please avoid typing information into the coach that you would not want processed by a third-party AI provider (section 6) — for example, detailed medical records or anyone else's personal information.
Server logs and abuse prevention
Like essentially all internet services, our hosting provider processes standard connection information — including your IP address — for the time needed to route and serve a request. We apply per-IP rate limits to keep the service available and to bound costs. IP addresses are used for that operational purpose only: they are not linked to a profile, not used to identify you, and not retained for analytics. The lawful basis, where the GDPR applies, is our legitimate interest in operating and securing the service.
5. Location
FoodLana requests location access only "while using the app", and only when you tap something that needs it — "Near me", "Suggest for me", or the nearby map. The permission prompt you see reads: "FoodLana uses your location to find restaurants near you."
- Your coordinates are used to search for nearby restaurants for that request and are then discarded.
- We do not track your location in the background, and we do not build a location history. Any record of which restaurants you looked up lives in the History tab on your phone.
- You can decline location access and still use everything else — search by city, cuisine or ZIP code instead. You can change or revoke this at any time in iOS Settings → Privacy & Security → Location Services → FoodLana.
6. Third-party services
To do its job, FoodLana passes request data to the following providers. They act as processors for that request; we do not give them any account or identity information, because we don't have any.
| Provider | What it receives and why |
|---|---|
| OpenAI Privacy policy | Your search context, diet information and coach messages, in order to find the menu and generate recommendations. We use the OpenAI API under terms that do not permit your content to be used to train their models. OpenAI may retain API content for a limited period for abuse monitoring, per their own policy. |
| Google Maps Platform Privacy policy | Search text and, when you use nearby features, location coordinates — to return restaurant results and render the map. Google's use of this data is governed by their own terms. |
| Railway Privacy policy | Hosts the API server described in section 4 and processes standard connection data in the course of serving requests. |
| Apple Privacy policy | Distributes the app via the App Store and TestFlight. Apple may provide us with aggregate, anonymised download and crash statistics. We receive no information that identifies you. |
We do not sell your personal information, and we do not "share" it for cross-context behavioural advertising as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA).
7. Retention and deletion
- On your device: data stays until you delete it in the app or delete the app itself. Deleting FoodLana from your iPhone removes all of it.
- On our server: nothing about you is stored, so there is nothing for us to retain or delete. Operational connection logs are short-lived and are not tied to an identity.
Because we hold no personal data about you, we generally cannot fulfil an access, correction, portability or deletion request in the usual way — there is no record to act on. You already have complete, direct control over the only copy that exists.
8. Your rights
Depending on where you live, you may have rights under laws such as the EU/UK GDPR or the CCPA/CPRA — including rights of access, correction, deletion, portability, and to object to certain processing, as well as the right not to be discriminated against for exercising them. As explained above, FoodLana does not hold identifiable personal data about you, so in practice these rights are satisfied by the fact that your data never leaves your control. If you believe we hold information about you, email hello@prawngroup.com and we will respond within 30 days. EU/UK residents also have the right to lodge a complaint with their local supervisory authority.
9. Children
FoodLana is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect information from them. Since the app collects no personal information at all, we have no means to identify a child user. If you believe a child has provided information through the app, contact us and we will help.
10. Security
All traffic between the app and our server uses HTTPS/TLS, and the app disallows insecure connections. Requests to the API require an application key and are rate-limited. Data stored on your iPhone is protected by iOS's own app sandbox and device encryption — keeping a passcode or Face ID enabled on your device is the single most effective way to protect it. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
11. International transfers
Our server and the third-party providers listed in section 6 operate in the United States and other countries. If you use FoodLana from outside those countries, the request data described in section 4 is processed there.
12. Not medical advice
FoodLana provides general dietary information and food suggestions generated in part by AI, which can be incomplete or wrong. It is not medical, nutritional or health advice, and it is not a substitute for a qualified healthcare professional. Menus, recipes and preparation vary by location and change without notice — always confirm ingredients and allergen handling directly with the restaurant, especially if you have a food allergy or intolerance. FoodLana deliberately does not display calorie or macronutrient figures for restaurant dishes, because accurate figures for proprietary restaurant recipes are not available and any number shown would be a guess.
13. Changes to this policy
If we change how FoodLana handles information, we'll update this page and revise the "last updated" date above. Material changes — for example, if accounts or server-side storage were ever introduced — will be announced in the app before they take effect.
14. Contact
Questions about privacy, or about anything on this page:
hello@prawngroup.com