Mintful Privacy Policy

Mintful ("we", "us") is operated by ProTech Software Labs FZ-LLC, a free-zone company registered in Ras Al Khaimah, United Arab Emirates (F0B50597 Compass Building, Al Shohada Road, Al Hamra Industrial Zone, Ras Al Khaimah, UAE). This policy explains what data the Mintful apps for iOS and Android handle, why, and the choices you have. Where the two apps differ, we say so. We built Mintful around a simple principle: your data is yours — we don't sell it, we don't show ads, and everything we can compute on your device stays on your device.

What we collect and why

Account data. When you sign up we store your email address and a unique account identifier, managed through Amazon Cognito. If you use Sign in with Apple, Apple shares your name and email (or a private relay address) with us; we never receive your Apple ID password. If you use Sign in with Google (Android), Google shares your name and email address with us; we never receive your Google password. If you sign in with Google or Apple using the same verified email address as an existing Mintful account, we link the two so you keep a single account.

Profile details. Your sex, age, height, weight, activity level and diet preference — provided by you during onboarding or in My Details, or read (with your permission) from Apple Health or Health Connect. We use these to personalize calorie and nutrient targets. They are stored on your device and in your profile in our database so your account works across reinstalls and devices.

Meal photos and descriptions. When you scan a meal, the photo is uploaded to our cloud storage and analyzed by an AI model to estimate nutrition. When you describe a meal in text or answer clarifying questions, that text is processed the same way. Photos and their thumbnails are stored so your meal history and photo diary work. The resulting nutrition estimates (calories, macros, micronutrients) are stored with your account.

Apple Health data (iOS). With your explicit permission, we read: weight, height, date of birth, biological sex, active and basal energy, step count, and exercise minutes. This data is used on your device to compute your daily energy budget. We do not use Health data for advertising or marketing, do not sell it, and do not share it with third parties, in line with Apple's HealthKit rules. Apart from weight and height saved to your profile as described above, and an estimate of your daily energy use saved with it when you set up your account, Health data is not uploaded to our servers.

Health Connect data (Android). With your explicit permission, Mintful reads the following from Health Connect: weight, height, active calories burned, total calories burned, basal metabolic rate, steps and exercise. We use it only to calculate your daily calorie and macro targets in the app. Steps, active energy and exercise are processed on your device and are not uploaded. If your profile is missing your weight or height, we fill them in from Health Connect and store them with your account profile, together with an estimate of your daily energy use, so your targets are the same on all your devices. Mintful never writes to Health Connect. We do not sell Health Connect data, use it for advertising, or share it with third parties. You can withdraw access at any time in Settings → Health Connect, or from Profile → Health in the app.

Mintful's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

Subscriptions. Mintful Pro is purchased through Apple's App Store or Google Play; we never receive your payment details. We receive your subscription status, and so that Pro follows your Mintful account across your devices, we store a purchase identifier with your account and verify it with Apple or Google.

What we deliberately keep on your device. Nutrient coverage analysis, focus challenges and which challenges you joined, daily check-ins, feelings-related insights, your quick-add list, your nickname, and app preferences are computed and stored locally. They are never transmitted to us. On Android, Mintful's data is excluded from Google's device backups and phone-to-phone transfers.

Location. If you open the activities finder (iOS, where available), we ask for your location so we can show what's nearby. Your location is used on your device only — it is never uploaded, stored, or shared, and we never access it in the background. The Android app does not use your location.

On-device photo processing (Android). Before upload, the Android app uses Google ML Kit on your device to find the plate in the photo and crop it. Your photos are not sent to Google; Google may receive limited technical diagnostics from ML Kit (such as device and app information and performance data), as described in Google's ML Kit data disclosure.

What we don't collect. No advertising identifiers, no contacts, no background tracking of any kind. Notifications are generated locally on your device.

AI processing

Meal analysis and estimate refinement are performed by AI models via OpenAI, acting as our processor. Only what's needed for the estimate is sent: the meal photo or your meal description and clarifying answers. Your name, email, and Health or Health Connect data are not included in AI requests. AI outputs are estimates and can be inaccurate — see our Terms of Use regarding their informational nature.

Where your data lives and how it's protected

Our infrastructure runs on Amazon Web Services in the EU (Frankfurt) region (eu-central-1). Data is encrypted in transit. Access to your data from the app uses short-lived, per-user credentials issued only after you authenticate; authentication tokens are stored in the iOS Keychain or, on Android, encrypted with a key held in the Android Keystore. Our team accesses production data only when necessary to operate the service.

Sharing

We share data only with the processors needed to run Mintful: Amazon Web Services (hosting, storage, authentication), OpenAI (AI nutrition estimation), Apple (sign-in and subscriptions on iOS) and Google (sign-in, Google Play subscriptions, and ML Kit diagnostics on Android). We do not sell or rent personal data, and we do not share it with advertisers or data brokers. We may disclose data if required by law.

International transfers

Mintful is available worldwide. Your data is primarily stored in the EU (Frankfurt). Some processing involves transfers to other countries — notably to OpenAI in the United States for AI meal analysis — protected by appropriate safeguards such as the EU Standard Contractual Clauses included in our processors' data-processing agreements. Wherever you are, this policy and the rights below apply to you.

Region-specific notes

EU/EEA & UK: we process health-related data (your nutrition and body metrics) on the basis of your explicit consent, given when you create an account and grant Apple Health or Health Connect access; you can withdraw it by revoking that access or deleting your account. California: we do not "sell" or "share" personal information as defined by the CCPA/CPRA, and we honor access and deletion requests as described below. Other regions: where local law grants similar rights, we honor them through the same channels.

Retention and deletion

Your data is retained while your account is active. You can delete your account and associated data (profile, meals, photos) in the app (Profile → Delete account), on our account deletion page, or by emailing us at hello@mintful.app from your account's email address; deletion is completed within 30 days. Backups purge on their own cycle within a further 35 days.

Your rights

You can export everything we hold about your nutrition (meals, estimates, profile) directly in the app: Profile → Your data → Export my data. You may request access, correction, deletion, or portability of your personal data at any time via hello@mintful.app. Depending on where you live, these rights are backed by the UAE Personal Data Protection Law (PDPL), the EU/EEA GDPR, or similar laws. If you believe we've fallen short, you may also complain to your local data protection authority.

Children

Mintful is not directed at children under 16, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

Not medical advice

Nutrition values are AI estimates from photos and text. Insights about nutrients and how they relate to everyday feelings reflect general nutrition knowledge, not an assessment of you. Mintful is not a medical device and does not provide medical advice, diagnosis, or treatment. Everything Mintful offers is for educational and informational purposes only — for advice on your specific goals, consult a registered dietitian, nutritionist, or doctor.

Changes

We'll post any changes here and update the date above. For material changes we'll notify you in the app before they take effect.

Contact

ProTech Software Labs FZ-LLC F0B50597 Compass Building, Al Shohada Road, Al Hamra Industrial Zone, Ras Al Khaimah, UAE hello@mintful.app