Your privacy choices

Effective date: 30 October 2026 · Last updated: 31 October 2026

CarnAIvore's AI service isn't open yet. This page describes how it will work when it opens. If anything changes, we'll update this page first.

This page describes the choices in CarnAIvore's Mac and iPhone app. The website waitlist has a separate privacy notice.

Choose what leaves your device

What the App Store privacy details mean: Your records stay on your iPhone or Mac. Nothing is sent to an AI until you allow it, and then only your question and the records you pick (none are picked at first). In this version, photos aren't sent to CarnAIvore or to any AI. If we add photo features that use AI, you'll choose with a separate permission first. To write each answer, CarnAIvore's server passes your question to OpenAI. Our server keeps none of it. OpenAI may keep a copy for up to 30 days to check for misuse (longer only if the law requires) and doesn't use it to train its models. That temporary copy is why our App Store privacy details list health data as collected. The other items there keep your plan working without an account: a coded ID from Apple (no name or email), a check that requests come from a genuine copy of the app, and a record of your plan and its use. No ads, no tracking, and your data is never sold.

CarnAIvore's AI is optional. The app asks separately about sending a request to CarnAIvore's server and passing it to OpenAI, which runs the AI model. Chat record categories start unselected. Curate context lets you choose categories and dates for a question. An unselected category is excluded from newly assembled saved-record context, but your question, earlier messages and summary may already contain the same details. Meal, trial and pattern helpers send their separately disclosed inputs regardless of chat-category choices. Turn the AI permission off in Settings › AI on each device; it stops new requests on that device. If we change our AI provider, the app asks again before sending anything to the new one. Withdrawing permission cannot recall what was already sent, which OpenAI may keep for up to 30 days to check for abuse, subject to exceptions. Fixed on-device app help does not need AI permission.

See, save or delete data

Settings › AI › See what CarnAIvore's server holds shows and saves the coded plan and use record. Delete my CarnAIvore data offers “delete my history, keep my plan” or “delete everything.” Limited current-period, purchase, referral, anti-abuse and terms records can remain as described in the App Privacy Policy. Neither choice cancels an Apple subscription. About you › Your data, on this device › Forget all app data on this device deletes local app data on that device; it does not delete exports, backups or another device's copy. Don't rely on an export as a guaranteed backup or a way to move to a new device.

Advertising and tracking choices

CarnAIvore does not sell app data, use it for targeted advertising or profile you for legally significant decisions. A browser's Global Privacy Control signal will be treated as an opt-out request for those activities. The live website has separate Website Privacy, Waitlist Privacy and Waitlist Consumer Health Data notices.

Ask us and appeal

Email support@carnaivore.ai with “Privacy request” for access, correction, deletion, recipients or questions. The server does not tie your name or email to its coded record, so we may ask you to use the in-app proof; email alone cannot authorize a change to that record. We answer within 45 days, giving notice of any permitted extension. Reply “Appeal” if dissatisfied; we answer in writing within 45 days. You may also contact your Washington, Nevada or Connecticut Attorney General, or your own state's office. Requests are free.

Read the separate Consumer Health Data Privacy Policy for health-data categories, sharing and rights.