Privacy & data

Updated November 4, 2026

This page explains how HOTTER AI handles information when you use your nutrition journal and its optional AI features. For privacy questions, access requests or account deletion requests, email gethot@hotterapp.com.

Your account

We use your name, email address and account identifier to sign you in, keep your journal associated with your account, and send confirmation, recovery and other account emails. Supabase Auth manages authentication and password verification. HOTTER AI does not store your password in the nutrition database. Account emails are delivered through Resend.

Signing in with Google

If you choose Google sign-in, Google provides basic identity information such as your name, email address, Google identifier and profile image. Supabase uses this information to authenticate and manage your HOTTER AI account. HOTTER AI requests only basic identity permissions: openid, email and profile. We do not request access to your Gmail, contacts, calendar or Google Drive.

Google identity information is used for account access and identification. We do not sell it, use it for advertising, or use it to train AI models. You can remove HOTTER AI’s Google access in your Google Account settings. Removing that access does not by itself delete the journal or account information already stored by HOTTER AI.

Your journal and photos

When you save them, we store the meals, nutrition values, goals, favorites, meal plans, water, steps and weight entries you provide. Meal photos are saved privately when you save the associated meal. Journal data and meal photos use Cloudflare D1 database and private R2 object storage. Access to your journal and meal photos requires your authenticated account.

Branded nutrition apps and HOTTER Studio

Businesses can provide the HOTTER calorie tracker under their own name, logo and color. Studio stores the business identity, AI coaching prompt, membership and invitation records, and retained workout plans. Published branding appears on the business’s public app page. Custom AI prompts control coaching style and are sent to OpenAI with relevant chat context; HOTTER’s nutrition calculations and safety rules still apply.

Joining an app shares your display name and membership with that business. Nutrition sharing is a separate, optional choice, off by default. If enabled, the business owner can view your latest 28 days of food names and portions, calories and macros, nutrition targets, weigh-ins, water and steps. Meal photos, AI conversations, AI memories and medical planning details are not included in business reports. Your journal remains attached to your personal account and can be used with sharing on or off.

Manage sharing at the top of your branded calorie tracker. Turning it off immediately stops new business-report access. Leaving an app or being removed also revokes access without deleting your journal. Previously viewed information cannot be recalled. Published apps can accept new customers through their public app page; invitation links expire after seven days, can be revoked, and are stored as hashes. Deleting an owner account removes its workspace; customer accounts remain independent.

Legacy workout instructions and demonstrations retain source and license credits. Some exercise images load from wger without a referring page or personal account information.

Optional AI features

When you tap Analyze food, your selected meal photo and notes are sent to OpenAI to estimate the foods and nutrition. Opening the camera alone does not send a photo for analysis. When you use the HOTTER coach, your messages, relevant journal context, plan information and enabled memories are sent to OpenAI to generate responses. Voice notes are sent to OpenAI for transcription before being used as chat messages. If you choose the Glow-up preview, your uploaded photo and relevant plan details are sent to OpenAI to generate an AI visualization; your photo and generated frames are stored privately and can be deleted from the preview. Information you enter in these features may include body measurements, preferences or health-related details. Only share information you want processed for those features.

Fix issue sends the current food, ingredient snapshot, prior notes and your correction to OpenAI for a reviewed replacement estimate. Analyze my progress sends the selected period’s recorded nutrition and weight aggregates to OpenAI to explain patterns; chart values are calculated by HOTTER from the recorded data. These OpenAI API requests use store=false. HOTTER AI does not use your Google sign-in identity information for model training. Provider handling and retention remain subject to the provider’s terms and policies. Optional coach memories and planning information have controls in the coach’s Your info area; clearing them does not delete your separate nutrition journal or account.

Product lookups

Barcode lookup sends the product barcode to Open Food Facts to retrieve package nutrition information. Worldwide product search sends the food or brand search terms and optional country filter to Open Food Facts. It does not require sending your account email or meal photo to Open Food Facts.

Cookies and service providers

We use essential session cookies to keep you signed in and protect authentication flows. Session cookies are HTTP-only, and use secure transport on the live site. Cloudflare provides application hosting and journal/photo storage; Supabase provides account authentication; Resend delivers account emails; Google provides optional Google sign-in; OpenAI processes the optional AI requests described above. Information may be processed in the countries where these providers operate. Their privacy policies also apply to their respective services.

Retention and your choices

Account and journal information is retained to provide your account and history until it is removed through available product controls or an account/data deletion request is completed. Deleting a meal can preserve its photo for Undo and saved-meal references; it does not guarantee immediate removal of the underlying photo. Signing out does not delete saved information. Private application backups are kept for seven days. AI allowance records normally expire after ninety days; records still needed to enforce an active longer billing period remain until that period ends. Plan entitlement records, when paid plans become available, record the plan and collected payment amount used to calculate the allowance; HOTTER does not store payment card details. Deletion removes sign-in and journal data immediately; remaining private image cleanup is retried in the background. A minimal deletion record is kept for up to thirty days to protect cleanup and retries. Provider operational records may have their own retention periods.

You can edit journal entries and targets, use available coach information/memory controls, download a full ZIP export including all journal dates, chat, memories, private images, owned studio data and joined training spaces, and delete your account from the app menu’s Data & privacy controls. For a full data access, correction or deletion request, contact gethot@hotterapp.com. We may need to verify that you own the account before fulfilling a request.

Product reliability

We record daily aggregate counts of app opens, saved or failed meal entries, feature use, network failures and client errors to improve reliability. These counts do not include meal names, chat text, photos, audio, or error stack contents. Aggregate event and AI allowance records expire after ninety days and are removed with account deletion. Unfinished text and nutrition entries may be kept in browser session storage for your account until you discard them, complete the save, sign out, or close the browser session; photos remain in memory.

Changes

We will update this page when our handling of information changes. If a new feature needs additional Google permissions, it must ask for those permissions separately.

Supabase privacy · Resend privacy · Google privacy · OpenAI privacy