The short version: whatevr is a food and health logging app. Your data powers your own tracking — we don't sell it, and you can export or permanently delete it from Settings in the app at any time.
When you describe what you ate, that text and any label photos are sent to Anthropic (the company behind Claude) to estimate calories and nutrients; names of restaurant items may also be sent to xAI (the company behind Grok) to look up published nutrition, and xAI or Google's Gemini stands in as a backup if our main provider is unavailable. For voice logging, Groq first transcribes your recording; the resulting text goes to Anthropic for the estimate. Nutrition estimates are also matched against food databases including USDA, Open Food Facts, and the FatSecret Platform API. If you connect Apple Health, the data you choose to share stays governed by Apple's rules — we never use it for advertising, and it's never stored in iCloud by us.
You must be 18 or older to use whatevr.
When you describe what you ate or did, Anthropic (the developer of the Claude models) processes the text and food/label photos to estimate calories, macros, and ingredient breakdowns; xAI (the developer of the Grok models) looks up published nutrition for restaurant items you name and serves as a backup, with Google's Gemini as a further backup. For voice logging, we send your recording to Groq for speech-to-text transcription, then send the resulting text to Anthropic. We keep the resulting text, not the voice recording. Provider retention is governed separately as described in Section 6. We do not use your logs to train AI models.
The iOS app asks for your permission before sending content to these AI providers. You can decline, or withdraw that permission in Settings → About & Legal → AI processing. Declining prevents those AI logging requests; it does not enable transcription or estimates from another provider instead.
These are AI-generated estimates. They can be wrong — portion sizes are guessed, photos can be misread, and real food varies from any estimate. Don't rely on them for medical or health-critical decisions (see "not medical advice" below).
To improve accuracy, your descriptions are matched against food databases including the USDA FoodData Central, Open Food Facts, and the FatSecret Platform API (used under license — nutrition data provided by FatSecret). Branded and restaurant nutrition figures come from these sources, not from you.
If you use the iOS app and turn on Apple Health sync, whatevr can read and write the following, only with your explicit permission:
Health data read from Apple Health is used only to power your in-app charts and budget — it is never sold, never used for advertising or "data mining," and never stored in iCloud by us. Data you choose to log in whatevr and sync to Apple Health leaves our systems only to the extent needed to write it to your own Health app; it isn't extracted from Health and sent elsewhere. You can turn Health sync off at any time in the app.
We do not sell your personal data, and we do not share it with advertisers. To run the service, we rely on a small set of providers, each of which receives only what it needs to do its job:
| Provider | What it does | What it receives |
|---|---|---|
| Anthropic (Claude) | AI parsing into nutrition data | Food/exercise text, including voice transcripts, and photos submitted for logging |
| xAI | Web lookups of restaurant nutrition, and backup AI parsing | Names of restaurant items you log; during a backup, the same food/exercise text, voice transcripts, and photos |
| Groq | Speech-to-text transcription | Voice recordings submitted for logging |
| Google (Gemini), via OpenRouter | A further backup for AI parsing that we switch to by hand, only if both Anthropic and xAI are unavailable | The same food/exercise text, voice transcripts, and photos Anthropic would receive, only during such an outage |
| Convex | Database and backend hosting — where your account and logs are stored and processed | Your account info and everything you log |
| Vercel | Hosting for the web app | Standard web request data needed to serve the app |
| Resend | Sends transactional email, including your one-time sign-in codes | Your email address and message content (e.g. your sign-in code) |
| Sentry | Crash and error monitoring, so we can find and fix bugs | Error/diagnostic data, which may include limited technical context |
| Apple | Sign-in, subscriptions/billing (App Store); delivering push notifications to the iOS app (Apple Push Notification service); and — only if you enable it — Health sync | What's needed to process your subscription, a device push token and notification content (e.g. "you got cheered") for iOS push, and, if enabled, the Health data described in Section 4 |
| Web push services (browser vendors) | Deliver push notifications (buddy cheers, reminders) when enabled | A push subscription token and the notification content |
Each of these providers is contractually limited to using your data only to provide its service to us — not for its own independent purposes.
Friends: buddies you connect with see your cheers and daily progress score — never your weight, body measurements, or raw numbers.
We may also disclose data if required by law, to enforce our Terms of Service, or to protect the rights, safety, and security of our users or whatevr — and in connection with a merger, acquisition, or sale of assets (in which case this policy continues to apply to your data).
Your data is kept while your account is active. Deleting your account (in the app: Settings → Account → Delete Account) immediately and permanently erases your profile, logs, connections, and tokens from our active systems — this is a real deletion, not a soft "hide it" flag. The single exception: we keep a keyed one-way cryptographic code derived from your email address (an HMAC computed with a secret key we store separately — it cannot be turned back into your address, and without that key it cannot be matched against guessed addresses either) on a suppression list, solely so a deleted account — for example, one closed by our under-13 protections — cannot immediately re-register itself. This code is kept only to serve that purpose, carries no other information, and no other account data is retained. Convex, our database provider, may retain deleted rows in short-lived, encrypted operational backups for a limited period after that as part of its own disaster-recovery process; those backups are not used to serve the app and are not something we can selectively restore your data from once you've deleted it.
Sub-processors that receive your content to do their job, including Anthropic for estimates, xAI for restaurant lookups and Groq for voice transcription, handle and retain that input under their own terms and applicable agreements, separately from our deletion practices. Groq documents that inference inputs are not retained by default, but may be temporarily retained for reliability or abuse investigations. We do not promise zero provider retention; see Groq's data-handling documentation.
You can export a full copy of your data as JSON at any time from Settings, before or instead of deleting your account.
whatevr is built so you can exercise most of these rights yourself, in the app:
For anything not self-service, email support@trywhatevr.app.
You have the right to know what personal information we collect and how it's used, to access and delete it, to correct it, and to limit use of sensitive personal information. We do not "sell" or "share" your personal information as those terms are defined under the CCPA/CPRA — we don't exchange it for money or use it for cross-context behavioral advertising. We won't discriminate against you for exercising these rights.
We're a US company and process data primarily in the United States. If a law where you live gives you additional rights over your data (for example, the EU/UK GDPR), we'll honor those rights for your data on request at support@trywhatevr.app, to the extent that law applies to us.
We use passwordless sign-in — a one-time email code, not a password — so there's no password for an attacker to steal. Keep your email account secure, since access to your inbox can mean access to your whatevr account. We use reasonable technical and organizational measures to protect your data in transit and at rest, and we limit access to what's needed to run the service. No system is perfectly secure; if we become aware of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.
whatevr provides estimates for general wellness tracking. It is not a medical device and does not provide medical, nutritional, or clinical advice. Nothing in the app — including AI-generated estimates, scores, or targets — is a diagnosis or treatment recommendation, and none of it is a substitute for advice from a qualified physician or registered dietitian. Talk to a doctor before making significant changes to your diet or exercise, especially if you have a medical condition, are pregnant or nursing, or have a history of disordered eating.
whatevr is for adults. You must be 18 or older to create an account. We never knowingly collect data from children under 13 — if an account indicates an age under 13 during setup, everything entered is deleted immediately. If you believe someone under 18 is using whatevr, contact support@trywhatevr.app.
If this policy changes materially, we'll note it in the app and update the "last updated" date above. Continuing to use whatevr after a change takes effect means you accept the update.
Toasty Cabin LLC
North Carolina, USA
Questions or requests (including data export or deletion): support@trywhatevr.app