Privacy Policy
Who we are
Don’t Spill the Calories is operated by 1THIRTYFIVE INC., Calgary, Alberta, Canada. Contact info@1thirtyfive.com for privacy questions or requests. Effective October 23, 2026.
Information you provide
We collect your email for passwordless sign-in; profile details such as age, sex, height, timezone and nutrition goals; food, exercise and weight records; saved foods; and chat text and photos you choose to submit. These records may contain sensitive health information. Do not submit information about someone else without permission.
How we use information
We use your information to provide tracking, calculate totals and trends, estimate nutrition and exercise, sync your account, send sign-in emails, support you, and prevent abuse. We keep request/token counters and technical logs to operate the service and control costs. We do not sell your personal information or use it for advertising.
AI processing
AI estimates send your submitted text or selected photo, relevant matching foods and recent corrections, and a limited set of profile/tracking facts to OpenAI. Exercise estimates use your activity, duration and latest weight. We request store:false for API responses; this does not guarantee zero provider retention. OpenAI’s processing and security retention are governed by its API data policies. Estimates are optional: manual food and weight logging remain available. Paid web search is disabled.
Service providers and transfers
Cloudflare provides hosting, database and generated context-file storage. OpenAI processes AI requests. Resend delivers sign-in emails. Providers may process data outside Canada under their own service terms and safeguards. We may disclose information when required by law or to protect the security and rights of users and the company.
Photos, permissions and local storage
Android uses the system photo picker for photos you select; it does not request access to your whole photo library. Submitted photos are processed for estimation and are not retained as photo files in our tracking database. Chat may record that a photo was attached. Android stores a session and a limited offline snapshot encrypted using a device-keystore protected key; signing out clears that local data. The website uses a sign-in cookie and browser storage needed for the app.
Retention and security
Tracking records and generated context files remain until you remove them or delete your account. Chat messages expire after seven days. Sign-in codes expire after ten minutes and are cleared by routine cleanup; sessions last up to 180 days unless revoked. Security/operational logs and provider backup copies may persist under provider retention schedules. Aggregate cost counters may remain after account deletion without your health records or email. We use HTTPS, account isolation and access controls; no storage or transmission is completely secure.
Your choices and deletion
You can edit records, copy your information from Brain → Profile, clear chats, sign out, or delete your account from Brain → Profile → Delete my account. Deletion removes your account, active tracking records, saved foods, messages, settings, sign-in sessions and generated context files. Uninstalling alone does not delete the server account. You can also request deletion at info@1thirtyfive.com from your account email; we may verify ownership before acting. See the account deletion page for instructions.
Children, rights and changes
This service is intended for people aged 16 and over. Depending on your location, you may have rights to access, correct, export, delete or restrict processing of your information; contact info@1thirtyfive.com. We will update this policy when practices change and provide notice of material changes through the service.
info@1thirtyfive.com