Privacy Policy

Effective 21 September 2026 · Applies to the Satoa iOS app

Summary

Satoa is designed so that your data stays on your iPhone. There are no accounts, no developer-operated servers, no analytics and no advertising. Your journal, photos, goals and coach conversations are stored only on your device and are never transmitted to us — because there is no "us" to transmit them to.

What is stored on your device

• Journal entries — logged foods, portions, photos, notes and weights.
• Goals and preferences — macro targets, staples, favourites, frequently logged foods.
• Coach conversations — AI coach chats, generated on-device with Apple Intelligence.
• Widget data — a small daily summary shared with the Satoa widget via the standard iOS App Group mechanism on the same device.

Deleting the app deletes all of this. There is no copy anywhere else.

Apple Health (HealthKit)

With your permission, Satoa reads dietary data from Apple Health to improve journal insights and writes energy and macronutrient values for logged foods. HealthKit data is governed by Apple's own protections and is never sent off the device by Satoa.

Open Food Facts (network)

When you scan a barcode, Satoa queries the community-run Open Food Facts database to fetch product information. The request contains the barcode only — no personal data, no identifiers, no location. Open Food Facts' own privacy policy applies to their service.

On-device food recognition

Food photo recognition runs by default on a machine-learning model bundled in the app. Photos used for recognition are processed entirely on your iPhone.

Your own AI server (optional)

If you configure a custom AI endpoint (any OpenAI-compatible vision or chat server), Satoa sends food photos and prompts directly to the server you configure, with the API key you provide. Satoa's developer has no access to that server, sees none of that traffic, and stores nothing. If you do not configure an endpoint, nothing is sent.

What we never do

• No accounts or sign-in.
• No analytics, crash reporting or telemetry.
• No advertising or trackers.
• No sale or sharing of personal data — there is none to share.

Children

Satoa does not knowingly collect any data from anyone, of any age, because it does not collect data at all.

Changes

If a future version of Satoa changes any of this, this page will be updated and the app will ask before enabling anything that sends new data anywhere.

Contact

Satoa is developed by Nicolò Campari (Finland). Questions or data requests: apple@fuo.fi