Version: v2.2
Last updated: September 22, 2026
Publisher / Data Controller: IDE TECHNOLOGIES (SASU) — Lyon Trade and Companies Register (RCS) No. 949 574 370 — Share capital: €500
Registered office: 43 avenue Rockefeller, 69003 Lyon, France
Contact (GDPR & support): contact@dietmate.fr
Supervisory authority: CNIL — https://www.cnil.fr
Welcome to Diet Mate, a calorie-tracking and health data management application developed and operated by IDE Technologies (“we”, “us”, “our”).
The security and confidentiality of your personal data are of the utmost importance to us. This Privacy Policy explains how we collect, use, protect, and share your information when you use our application.
This Privacy Policy describes how DietMate collects, uses, stores, shares, and protects your personal data when you use the DietMate mobile and/or web application (the “Application”).
It applies to all users aged 15 and over.
We do not sell your personal data, and we do not use your health data for advertising purposes or marketing profiling.
This policy also covers the optional connection of your Diet Mate account to ChatGPT or another assistant compatible with our MCP connector. The third-party service has its own privacy policy for the data it receives.
Identification data: email address; password (stored in hashed form).
Content: written or voice descriptions of meals; meal photos; notes.
Preferences: units, goals, and privacy settings.
Technical & usage data: device technical identifiers, application logs, usage events, crash reports, and app version.
Health data (optional) via Apple Health (HealthKit) and/or Google Fit: weight, steps, calories burned (resting/activity), and/or other categories only if you explicitly authorize them.
AI-generated nutritional estimates (e.g. calories and macronutrients of a meal) derived from your descriptions and/or photos.
When you authorize a connection, Diet Mate processes the technical information needed to operate it: the Diet Mate account concerned, the authorized application, granted permissions and authorization tokens. Depending on the data in your account and the permissions granted, the connector can retrieve your recorded meals and context, nutritional estimates, goals, weekly reports, recipes, favorites, ingredients and preparation instructions. It can also retrieve authorized health and activity entries, including weight, steps and estimated energy. These entries may originate from your input or health services you have connected to Diet Mate.
Performance of the contract: creation and management of the Account, delivery of the core features (meal entry and estimation, synchronizations, history).
Explicit consent (GDPR Art. 9) — withdrawable at any time: processing of health data for wellness tracking purposes.
Legitimate interest: security, prevention of fraud or abuse, internal audience measurement, and product improvement.
Legal obligation: billing and legal compliance, responding to requests from public authorities.
Important (health data): some of the data you enter or synchronize (weight, intake data, meal photos and/or descriptions) qualify as health data. We process such data only with your explicit consent, which you may withdraw at any time (see Sections 10 and 12).
Connecting a third-party assistant is optional. It enables that assistant to respond to your requests using information from your Diet Mate account. Access depends on your authorization during connection; sharing health data relies on your explicit consent. You can stop using this connection without deleting your Diet Mate account.
Activation is optional and granular: you choose which categories you authorize.
Health/Fit data are neither sold nor used for advertising or marketing profiling.
Health/Fit data are used for the features you enable and shared with the technical processors required to operate them. If you separately authorize a third-party assistant to retrieve health and activity data through Diet Mate, the corresponding entries can also be sent to that assistant within the granted permissions. The assistant connection and Apple Health or Google Fit permissions are managed separately.
You can revoke permissions at any time in your operating system settings (Apple Health / Google Fit).
We use an AI service provider (e.g., OpenAI), acting as a data processor, to estimate nutritional composition from your inputs (text, voice, photos):Data minimization: we only transmit the information strictly necessary for the estimation (no direct identifiers when not required).No training: data transmitted via the API are not used to train the models.Technical logs: the processor may retain technical logs for up to 30 days for service delivery and abuse prevention (Zero Data Retention mode is used when available).Data location: whenever possible, we prioritize processing within the EU/EEA.
The provisions above concerning our use of an AI API do not describe the processing performed by a third-party assistant that you personally connect to Diet Mate.
You authenticate with Diet Mate and authorize the application concerned to access the requested data categories. Tokens then allow that application to perform authorized reads without receiving your Diet Mate password. A connection can remain active between conversations until it is disconnected or its authorization is no longer valid.
The connector provides read-only access to the connected account: it cannot create, modify or delete your meals, goals, recipes or other nutrition records. Data returned to the assistant provide context for its answers. Connecting does not guarantee that your entire history is consulted for every request or that all your data are copied into the assistant’s permanent memory.
Data sent to ChatGPT are processed by OpenAI under its own policy, your plan and your account or workspace settings. Retention, potential use for model improvement, and memory or personalization features follow the third-party service’s rules. Commitments concerning our API use therefore do not provide a general no-training guarantee for your ChatGPT conversations.
Before connecting your account, review OpenAI’s privacy policy and the data controls available in ChatGPT. For another compatible assistant, review the relevant provider’s information.
Google Cloud / Firebase (EU regions): Firestore (data), Cloud Storage (photos), Authentication, Crashlytics.
Google Ireland Ltd. — hosting and Firebase services.
AI service provider (e.g., OpenAI) — nutritional estimation.
Auxiliary tools (if used): email delivery/support, monitoring and alerting, internal analytics.
All our processors are bound by data processing agreements (DPAs) and, where applicable, Standard Contractual Clauses (SCCs) for transfers outside the EU/EEA. An up-to-date list can be provided upon request.
We may share data only with:Our technical processors (hosting, AI, email delivery, monitoring) strictly for the purpose of providing the service;Competent authorities where required by law;Platform providers (Apple / Google) acting as independent controllers for the management of purchases and subscriptions (we do not transmit your health data to them).
We do not allow the use of your health data for advertising purposes or data brokerage.
Third-party assistant providers you choose to connect, including OpenAI for ChatGPT, receive the data returned by authorized tools. This optional sharing is separate from Diet Mate’s use of technical processors for nutritional estimation. The use and retention of data received by those providers are also governed by their own terms and policies.
Certain processing activities (e.g., AI API calls) may involve transfers to countries outside the EU/EEA (such as the United States). These transfers are governed by the European Commission’s Standard Contractual Clauses (SCCs) and supplemented by additional safeguards (encryption, data minimization, access controls).
Connecting a third-party assistant may involve processing outside the European Union or European Economic Area, depending on the provider, your plan and the applicable settings. Diet Mate’s EU hosting does not guarantee the same location for data sent to that assistant. Review the provider’s information about processing locations and applicable safeguards.
Account & functional data: for as long as the Account remains active; deleted upon your request or 12 months after prolonged inactivity.
Meal descriptions (text/voice): 12 months.
Meal photos: 12 months.
Synchronized health data: until consent is withdrawn or the Account is deleted.
Technical / security logs: 12 months (unless a legal obligation requires longer retention).
AI logs (service provider): up to 30 days.
Billing data (if applicable): 10 years (accounting and tax obligations).
Backups and archives may result in a technical delay before final deletion.
The retention periods above concern Diet Mate’s processing. Copies kept in a third-party assistant’s conversations, files or memory features follow that provider’s retention periods and controls. Disconnecting Diet Mate does not automatically erase information the assistant has already received.
Under the GDPR, you may exercise the following rights:Access to your data;Rectification;Erasure;Restriction of processing and objection to processing based on legitimate interest;Data portability (for data you have provided to us);Withdrawal of consent (in particular for health data) at any time, without retroactive effect;Post-mortem directives (France) regarding the handling of your data.
How to exercise your rights:By email: contact@dietmate.fr
To stop ChatGPT’s future access to your account, open its settings, then Apps or Plugins depending on the available interface, select Diet Mate and disconnect the account concerned. See OpenAI’s connection and disconnection instructions.
Disconnecting does not delete your Diet Mate account or the conversations and memories already retained by ChatGPT. Manage those separately through ChatGPT’s conversation, memory and data settings. To exercise your rights concerning data held by Diet Mate or get help with an authorization, contact contact@dietmate.fr.
