Privacy Policy

Effective date: July 26, 2026

Crisp ("the App") is a calorie and macro tracking application for iOS operated by Network Leads, LLC ("we", "us", "the Operator"). This policy explains what data the App handles, where it goes, and the choices you have. The short version: Crisp is local-first, requires no account to use, shows no ads, and we do not sell your data — ever.

1. Data you store in Crisp

Food logs, exercise entries, saved foods and meals, weight history, body metrics (age, height, weight, biological sex, activity level), goals, and preferences are stored locally on your device. Creating an account is not required to use the App.

Optional iCloud sync

If you choose Sign in with Apple in Settings, your data is additionally stored in your private iCloud database, managed by Apple and tied to your Apple ID. We never see this data — it flows directly between your devices and Apple's iCloud (CloudKit) service. Turning sync off stops the mirroring; data already in iCloud can be removed by deleting the App's iCloud data in iOS Settings.

Sign in with Apple provides us only a pseudonymous identifier and — the first time only, if you approve — your name. We do not receive your password or Apple ID credentials.

2. AI meal scanning (photos)

When you use "Scan meal", the photo you take or select is sent over an encrypted connection to our server, which forwards it to Anthropic (a third-party AI provider) to analyze the food in the image and estimate portions and nutrition. Specifically:

• Photos are processed to produce the nutritional breakdown and are not used by us for any other purpose. We do not build a server-side library of your photos; a copy of your scan (photo + result) is kept locally on your device so you can revisit it, and you can delete it in the App at any time.
• Anthropic processes API content to provide the service and, per its commercial API terms, does not use API inputs or outputs to train its models by default. See Anthropic's privacy documentation for details.
• Our server also processes your App Store subscription proof and a per-install identifier solely to verify eligibility and count scans against your monthly allowance. Scan counters contain no photo content and no health data.

AI estimates are approximations. Do not rely on them where accuracy is medically required (e.g., insulin dosing).

3. Apple Health

With your permission, Crisp can write your logged meals (calories and macros) to Apple Health and read your active energy so workouts tracked by your Apple Watch count toward your daily budget. Health data is handled per Apple's HealthKit rules: we never use Apple Health data for advertising or marketing, never sell it, and never share it with third parties. It stays on your device and in Apple Health. You can revoke access at any time in iOS Settings → Health.

4. Social features

Social is optional and off until you claim a handle. If you join:

• Your profile (handle, display name, and profile photo if set) is stored in a public iCloud (CloudKit) database and is visible to other Crisp users, who can find you by handle.
• If sharing is on, a daily summary — calories, goal, macros, exercise total, and the names of meals you logged that day — is published and visible to users who follow you. You can pause sharing in Settings at any time, which also removes the current day's summary.
• Follows and nudges create small records (who follows whom; who nudged whom and the sender's display name) used to power the feed and notifications.
• Deleting your social profile (Social page → Delete my social profile) permanently removes your profile, follows in both directions, all shared daily summaries, and nudges from the public database. Your local food data is unaffected.

5. Notifications

Daily log reminders are scheduled locally on your device. Social push notifications (new follower, nudges) are delivered by Apple's push service via iCloud subscriptions — we do not operate a push server and do not store device push tokens. All notifications require your permission and can be disabled in iOS Settings or in the App.

6. Subscriptions and payments

Crisp Pro is sold as an auto-renewing subscription through Apple's App Store. Payment is processed entirely by Apple; we never receive your payment details. Our server verifies a cryptographically signed transaction from Apple solely to unlock Pro features and meter AI scan usage.

7. What we don't do

• No advertising, and no advertising SDKs.
• No sale or rental of personal data.
• No third-party analytics or tracking SDKs.
• No collection of your precise location, contacts, or browsing history.

8. Permissions the App may request

• Camera — scanning food barcodes and photographing meals for AI analysis.
• Photo library — choosing a profile picture, a saved food photo, or a meal photo. Photos you pick stay on device unless used for an AI scan as described above.
• Microphone & speech recognition — voice logging. Transcription happens on-device via Apple's speech APIs; the audio is not sent to us.
• Notifications — reminders and social notifications.
• Apple Health — as described in section 3.

9. Data retention and deletion

• Local data: delete individual entries in the App, or remove all local data by deleting the App.
• iCloud sync data: managed through your Apple ID / iOS Settings.
• Social data: use the in-App "Delete my social profile" action (section 4).
• Server-side scan counters are keyed to your subscription or install identifier and are retained only as long as needed to enforce allowances.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal data. Because Crisp keeps data on your device and in your own iCloud account, you can exercise most of these directly in the App and iOS. For anything else, contact us at the address below and we will respond within a reasonable time.

11. Children

Crisp is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal data from them.

12. Security

Data in transit is protected with TLS. Cloud data is stored in Apple's iCloud infrastructure under your Apple ID. Our server keeps its credentials in encrypted secret storage and holds no database of user photos or health information.

13. Changes to this policy

We may update this policy as the App evolves. Material changes will be reflected on this page with a new effective date, and where appropriate, noted in the App.

14. Contact

Niv Apo — niv@apo.co.il