Privacy

Effective: 2026-10-19
Version: 1.5

This page explains what Remembite collects, why, who receives it and how you control it. For the Washington My Health My Data Act disclosures, see our Consumer Health Data Privacy Policy. The rules for using Remembite are in the Terms.

In short

Remembite stores the meals and water your AI assistant logs for you, the body weight readings you or your assistant log, the photos you attach to your meals, your nutrition goals and your email address, so you can see them again and keep them.
Meals, water, body weight readings, meal photos and goals can reveal information about your health. We store them only after you give explicit consent on a separate screen.
We do not sell your data. We run no advertising and no remarketing.
We do not run an AI model on our servers and we do not send your data to an AI provider. Your AI assistant sends us meal items. We never receive your conversation.
You can export everything or delete your account yourself in the app.

Who we are

The controller of your personal data is Remembite, the service at remembite.com. In this page “Remembite”, “we” and “us” mean Remembite. Contact for everything on this page: hello@remembite.com.

We have not appointed an EU or UK representative.

Data we collect

Category	What it includes	Where it comes from
Account	Your email address, an account ID and the date you created the account. Each sign-in session stores the IP address and browser user agent it was created from. Sign-in links are stored hashed and expire after 10 minutes. Signed-in browsers hold a session cookie.	You, when you sign in
Campaign source	If you accepted cookies before you signed up: the `utm_source`, `utm_medium` and `utm_campaign` tags of the link you came from, and the hostname of the website that referred you. Nothing else.	Your browser, through the `rb_src` cookie, when you create an account
Meal logs (health data)	Each food you log: its name, the words you used, quantity, weight, calories, protein, carbs, fat, fiber, sugar, saturated fat and sodium. Also the meal type, date and time, your time zone and which connected app logged it. For each food, a low and high range, a confidence level, the assumptions behind the estimate and the USDA reference food it was compared with.	Your AI assistant, when you ask it to log food. You, when you edit a meal in the app.
Water log (health data)	Each drink of plain water you log: the amount in ml, the amount and unit you gave (ml, l, fl oz or cup), the date and time, your time zone and which connected app logged it. Drinks with calories, such as milk or juice, should be logged as meals, not as water.	Your AI assistant, when you ask it to log water
Weight log (health data)	Each body weight reading you log: the weight (stored in whole grams, between 20 and 500 kg), the date and time, and your time zone. You choose whether it is shown in kg or lb, and we keep that choice. Remembite also calculates a 7-day average from your readings.	You, in the app, or your AI assistant, when you ask it to log your weight
Meal photos (health data)	Up to 4 photos per meal that you attach: the photo (longest side at most 1280 px), a small preview and the meal it belongs to. Location and other camera data are removed before the photo is stored. A photo is a record only: Remembite does not read it or estimate calories from it. Photos are kept as files on our own server in Frankfurt, up to 250 MB per account, and uploads pause when the server is full. Links to your photos are signed, private and expire after 15 minutes.	You, in the app, or with the add-photo button in the Remembite card in Claude. The AI is not offered the tool that adds photos.
Saved foods and templates (health data)	Phrases you save, such as “my oats”, with the food and usual portion, and meal templates with their items.	You, through your AI assistant
Nutrition goals (health data)	Daily targets for calories, protein, carbs and fat, an optional daily water target in ml and an optional goal weight, with the date each target starts.	You, through your AI assistant or the app. The goal weight is set in the app.
Time zone	The time zone used to place meals and water on the right day.	You or your AI assistant
Consent records	For each consent you give, withdraw or decline: the text version, a fingerprint (SHA‑256) of the text, the date and time, where it happened and which app was connected.	You
Connected apps	Which AI apps you connected, when, and the permissions you granted.	You and the AI app
Usage events	For each action your AI assistant takes on your account: the tool used, the connected app, how long it took, how many items and questions were involved and the outcome, plus a reference to the meal it touched. No meal content.	Generated when you use Remembite
Server logs	Our application log records event names, counts, timings, a request ID and a hashed account ID. It excludes meal contents and email addresses. Our web server also writes an access log with the request address, your IP address and your browser’s user agent. Sign-in tokens and codes are removed from logged addresses.	Generated when you visit or use Remembite
Messages to us	The email you send to our contact address and our replies.	You
Earlier waitlist sign-ups	If you joined our waitlist before we opened sign-ups: your email address, the AI app you use, whether you track macros, and when you signed up. The JSON export of your data includes this entry.	You

We do not collect your conversations with Claude or ChatGPT, your chat history or memory, your files, your precise location, your contacts, advertising identifiers or payment card numbers. Remembite has no dedicated fields for medical records, diagnoses, medications or body measurements other than the weight readings you log. Photos you attach have their location and camera data removed before they are stored. Free-text names that you or your assistant give to foods, saved foods and meal templates are stored as given, so anything written in them is stored too. Please keep them to food.

Children

Remembite is for people aged 13 and over. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and think your child under 13 has an account, email privacy@remembite.com. If we learn that we hold data from a child under 13, we delete the account and its data.

How Claude and ChatGPT fit in

Claude (Anthropic) and ChatGPT (OpenAI) are independent services. You choose to connect them. ChatGPT works the same way as Claude when you connect Remembite to it.

What the assistant sends us. When you ask it to log food, it sends the foods and the nutrition values it worked out, the meal time and your time zone. When you ask it to log water, it sends the amount, the unit and the time. When you ask it to log your weight, it sends the weight, its unit (kg or lb) and the time. It also sends your goals, including a water goal, and your saved foods when you ask it to set or save them. It sends an access token that tells us which account and which app is calling. Photos do not come from the assistant: you add them yourself, and the AI is not offered the tool that adds them.
What we do not receive. We do not receive the rest of your conversation, your other messages, your chat history or memory, files you shared, or your account details at Anthropic or OpenAI. Our tools do not accept those fields.
What flows back. When you ask your assistant to show your day or history, Remembite sends it the matching records. From then on, that content is part of your conversation and is handled under Anthropic’s or OpenAI’s terms and privacy policy. When you open a meal or day in the Remembite card inside Claude or ChatGPT, the card also shows small previews of that meal’s photos. Those previews travel with the card data, so Claude or ChatGPT may process them under their own terms. This page does not cover what they do with it. Check their settings, including any setting that lets them use conversations to train models.
On our side. We do not run an AI model on our servers. We do not send your data to an AI provider. We do not use your data to train AI models.
Disconnecting. Open Account, then Connected apps in the Remembite app and choose Disconnect. That app can keep access for up to 15 minutes. Disconnecting does not delete your data. Delete your account for that.

Why we use your data

We use your data to run the account you asked for: to sign you in, save your meals, show them back to you, apply your goals and keep the service secure. We do not use it for advertising, marketing profiles, or decisions that have legal or similar effects on you. Remembite has no automated decision-making about you. A number that looks far off triggers a question to you, not an outcome against you.

If you are in the European Economic Area or the United Kingdom, these are our legal bases:

Purpose	Data	Legal basis
Provide your account: sign you in, store, calculate and show your meals, water, weight and meal photos, apply your goals	Account, meals, water, weight readings, meal photos, saved foods, goals, connected apps	Contract (GDPR Article 6(1)(b)). For health data, also your explicit consent (Article 9(2)(a))
Keep sign-in and the service secure, prevent abuse, find errors	Account, usage events, server logs	Legitimate interests (Article 6(1)(f)): protecting the service and its users
Keep proof of what you agreed to	Consent records	Legitimate interests and legal obligation (Article 6(1)(f), (c))
Count visits to our marketing pages	Page views and load timing (Cloudflare); with your consent, Google Analytics data	Legitimate interests for Cloudflare Web Analytics. Consent for Google Analytics (Article 6(1)(a))
Learn which channels bring people to Remembite	Campaign source	Consent (Article 6(1)(a)), given through the cookie banner
Answer your messages and requests	Messages to us, account data	Contract, legitimate interests and legal obligation

Health data and your consent

Meal logs, water entries, weight readings, meal photos, saved foods and goals can reveal information about your health. In the EU and UK this is special category data. In Washington State and some other US states it is consumer health data.

The first time you connect an AI assistant, Remembite shows a consent screen before it stores anything. It has two checkboxes. The first covers collecting and storing your meals, water, weight readings, meal photos, saved foods and goals. The second covers sending those records to the assistant you connect when you ask it to read them. We record each choice. If we update this notice, as we did to add water, body weight and meal photos, you accept the new version in the app before the new part works. Before your first weight reading is saved, you must accept the part of the notice that covers weight. Before your first photo is uploaded, you must accept the part that covers photos. Everything you already use keeps working.
You can withdraw consent at any time under Account, Health data consent. Remembite then stops showing and recording your meals, water, weight readings, meal photos, goals and saved foods, disconnects your AI apps and signs you out on every device. Your data stays until you delete it. Withdrawal does not affect what we did before. To give consent again, sign in and reconnect your AI assistant.
Without the first consent we cannot store your meals, because storing them is the service. If you decline and have never consented before, we delete your sign-in details.

Analytics and cookies

These tools run on our marketing pages only: the home page, the demo tour, features, how to connect, support, methodology, blog, use cases, food calories, privacy, terms and the consumer health data policy. They do not run in the Remembite app (/app), the sample dashboard (/demo/dashboard), the sign-in pages or the AI connection.

Cloudflare Web Analytics

It counts page views and page load timing, so we can see which pages people read and how fast they load.
It sets no cookies and does not use localStorage or other client-side state in your browser.
Cloudflare states that it does not track individual end users across its customers’ websites.
It runs whether or not you use the cookie banner, since it stores nothing in your browser.

Google Analytics 4

It stays off until you click Accept on the cookie banner. If you click Decline, or make no choice, your browser sends nothing to Google from this site.
After you accept, it sets two first-party cookies: _ga (tells visitors apart) and _ga_<container-id> (keeps session state). Google documents both as lasting 2 years.
It records page views, basic usage such as sessions, and clicks on our sign-up buttons.
Google processes this data under its own privacy policy.
You can change your choice at any time with Cookie settings in the footer. If you switch from Accept to Decline, we stop sending data and delete the _ga cookies from this site. Your choice is saved in your browser’s localStorage, so clearing site data asks you again.

Campaign source cookie

It stays off until you click Accept on the cookie banner. This is the same choice that controls Google Analytics. If you click Decline, or make no choice, we store nothing.
After you accept, it sets one first-party cookie: rb_src. It is HttpOnly and lasts up to 30 days.
It stores the campaign tags of the link you came from (utm_source, utm_medium and utm_campaign) and the hostname of the website that referred you. It stores nothing else. It does not store your IP address or browser details.
If you create an account, we store these values with your account. We use them to learn which channels bring people to Remembite.
The values are included in your JSON account export (not the CSV, which lists meals only) and are deleted when you delete your account. We do not sell them, and we do not share them with advertisers or analytics tools.
If you switch from Accept to Decline with Cookie settings in the footer, we delete the cookie.

Cookies and storage Remembite needs

A session cookie keeps you signed in.
The Remembite app installs a service worker that keeps copies of the app’s own pages and scripts so it loads quickly. It does not store your meals, goals or any other data from your account.

What we do not do

We run no advertising and no remarketing, and we do not use Google signals.
We do not sell your data.
We do not use these analytics tools in the Remembite app or on your AI connection.

Subprocessors

These companies process data on our behalf to run Remembite. We use no others today.

Akamai Cloud (Linode), Frankfurt, Germany. Hosts our server and database. Everything we store lives here, including account email addresses, the meals, water and weight readings you log, the photos you attach to meals and earlier waitlist email addresses.
Cloudflare. DNS, proxy and TLS for remembite.com, so all traffic to this site passes through it, including IP addresses. Cloudflare Web Analytics measures page views on our marketing pages without cookies. Cloudflare Email Routing also receives mail sent to our contact addresses and forwards it to our team mailbox. Runs on Cloudflare’s global network.
Cloudflare Email Sending. Delivers your sign-in link, so it receives your email address.
Google (Google Workspace). Hosts our team mailbox, so it stores mail you send to our contact addresses.
Google (Google Analytics 4). Receives page view data from your browser only if you accept analytics cookies.
Cloudflare R2, EU jurisdiction. Stores encrypted copies of our nightly database backups and photo backups; another copy stays on our server in Frankfurt. Each backup is encrypted with age on our server, and the decryption key is not kept on the server. Copies in R2 are deleted within 31 days.
GitHub (GitHub Container Registry). Holds the application image and source code we deploy. It receives no user data.

Anthropic and OpenAI are not our subprocessors. They are independent services that you connect, as described above. We do not sell personal data, rent it or share it for advertising. We may disclose data if the law requires it, to protect rights, safety or security, or in a merger or sale of the business. In that case we will tell you before your data is handled under a different privacy policy.

International transfers

Our server and database are in Frankfurt, Germany. Cloudflare, Google and GitHub process data in other countries too, including the United States. In short, your data is processed in the US and the EU by the subprocessors listed above.

How long we keep data

Data	How long
Account, meals, water entries, weight readings, meal photos, saved foods, templates, goals, time zone, usage events, consent records, connected apps	Until you delete your account. Deleting it removes all of these at once, including the IP address and user agent stored with your sign-in sessions. You can also delete single meals, water entries, weight readings, saved foods and templates, and withdraw consent without deleting the account. A weight reading is kept until you delete it or delete your account. Deleting a meal deletes its photos, and you can delete a single photo in the app. A deleted photo stays in encrypted backups until they are deleted, within 31 days.
Sign-in links	Valid for 10 minutes and one use. Unused links for your email are removed when you delete your account.
Campaign source	The cookie lasts up to 30 days in your browser. If you create an account, the values are kept with it until you delete your account.
App access tokens	15 minutes each. They are renewed while an app stays connected, and revoked when you disconnect, withdraw consent or delete your account.
Backups	We take an encrypted backup of the database every night. Backup copies are deleted automatically within 31 days. A deleted account or photo can remain in a backup until then. Photos are backed up too, also encrypted.
Server logs	We keep the web server access log and the application log for up to 30 days, to operate and secure Remembite.
Messages to us	As long as needed to answer you and handle your request, then deleted on request. Email hello@remembite.com.
Earlier waitlist sign-ups	Until you ask us to delete them. Email hello@remembite.com. Deleting your Remembite account also deletes the waitlist entry for the same email address.

Your rights and how to use them

Depending on where you live, you can ask us to give you access to your data and a copy, correct it, delete it, restrict or object to some uses, and withdraw consent. You can also complain to a data protection authority. We do not sell your data and we do not make automated decisions with legal effects.

Most of this you can do yourself. In the Remembite app, open the Account page:

Access and a copy. Under Export your data, choose Download JSON or Download CSV. The JSON file holds everything Remembite stores about you except photos, including your water entries, your water goal, your weight readings, your goal weight, your campaign source, your consent history and the apps connected to your account. The CSV file has one row per food you logged and does not include water or weight. Photos come in a separate ZIP: choose Download photos (ZIP). You can export 5 times every 10 minutes.
Correct. Edit or delete any meal in the app. Your assistant can also edit or delete meals, delete water entries and edit or delete weight readings when you ask. You can also edit or delete a weight reading in the app. You can change your goals in the app.
Withdraw consent. Under Health data consent, choose Withdraw consent.
Disconnect an app. Under Connected apps, choose Disconnect.
Delete. Under Delete account, type your account email and choose Delete my account. It cannot be undone.

For anything else, or if you cannot use the app, email hello@remembite.com from the address on your account. We may ask you to confirm it is you. Requests are free. We respond to access, correction and deletion requests within 30 days. For Washington consumer health data requests we respond within 45 days, as set out in our Consumer Health Data Privacy Policy.

Appeal. If we refuse a request, email hello@remembite.com with the subject “Appeal”. We will answer in writing, with our reasons. If we deny your appeal, you can contact your state attorney general or your data protection authority. For Washington residents, the Attorney General's office takes consumer complaints at atg.wa.gov.

Authorized agents. In the US you may use an authorized agent. We will ask for proof that you authorized them.

Complaints in the EEA and UK. You can complain to the data protection authority where you live or work, or where you think a violation happened. The European Data Protection Board lists EU authorities at edpb.europa.eu. In the UK, contact the Information Commissioner’s Office.

Wherever you live. We use your health information only to provide Remembite and to keep it secure. We do not sell personal information and we run no advertising. You can use the rights above wherever you live.

Security

Traffic to remembite.com is encrypted with TLS.
Each account’s data is kept apart from other accounts by row-level security in the database.
Backups are encrypted with age before they leave our server, and the decryption key is not kept on the server.
Sign-in links and codes are stored hashed. Ordinary accounts have no password to store.
Our application log excludes meal contents and email addresses.
AI apps get access tokens that last 15 minutes, and you can disconnect any app.

No system is perfectly secure. If a breach affects you, we will tell you as the law requires. To report a security problem, email hello@remembite.com.

Changes to this page

We will post changes here and update the effective date and version at the top. If we plan to collect a new category of health data, use data for a new purpose or share it with a new kind of recipient, we will ask for your consent first where the law requires it. For example, when we added water logs, body weight and meal photos, new users were asked once and existing users are asked to accept the updated notice in the app at app.remembite.com the first time they log water or weight or add a photo. You do not need to accept it to keep using the rest of Remembite.

Version 1.5, 2026-10-19: added meal photos. You can attach up to 4 photos to a meal. They are kept on our server in Frankfurt, shown through private links that expire after 15 minutes, deleted with the meal or the account, and included in a separate ZIP export. Backup copies, which can still hold a deleted photo, are deleted within 31 days. Adding a photo needs your acceptance of the updated notice. Meals, water and weight work without it.

Contact

Questions or requests about your data: hello@remembite.com.