The short version: whatevr is a food and health logging app. Your data powers your own tracking — we don't sell it, and you can export or permanently delete it from Settings in the app at any time.
When you describe what you ate, that text is sent to xAI (the company behind Grok) to estimate calories and nutrients; label photos and voice notes are processed the same way. Nutrition estimates are also matched against food databases including USDA, Open Food Facts, and the FatSecret Platform API. If you connect Apple Health, the data you choose to share stays governed by Apple's rules — we never use it for advertising, and it's never stored in iCloud by us.
You must be 18 or older to use whatevr.
When you describe what you ate or did — by voice or text — that description is sent to xAI (the developer of the Grok models) to estimate calories, macros, and ingredient breakdowns. Food and label photos are read by xAI's vision models, and voice notes are transcribed to text by the same provider before being discarded. xAI processes this content to return a result to you; we do not use your logs to train AI models, and our agreement with xAI is intended to prevent them from doing so for their general models either.
These are AI-generated estimates. They can be wrong — portion sizes are guessed, photos can be misread, and real food varies from any estimate. Don't rely on them for medical or health-critical decisions (see "not medical advice" below).
To improve accuracy, your descriptions are matched against food databases including the USDA FoodData Central, Open Food Facts, and the FatSecret Platform API (used under license — nutrition data provided by FatSecret). Branded and restaurant nutrition figures come from these sources, not from you.
If you use the iOS app and turn on Apple Health sync, whatevr can read and write the following, only with your explicit permission:
Health data read from Apple Health is used only to power your in-app charts and budget — it is never sold, never used for advertising or "data mining," and never stored in iCloud by us. Data you choose to log in whatevr and sync to Apple Health leaves our systems only to the extent needed to write it to your own Health app; it isn't extracted from Health and sent elsewhere. You can turn Health sync off at any time in the app.
We do not sell your personal data, and we do not share it with advertisers. To run the service, we rely on a small set of providers, each of which receives only what it needs to do its job:
| Provider | What it does | What it receives |
|---|---|---|
| xAI | AI parsing of food/exercise text and photos into nutrition data; voice transcription | The food/exercise text, photos, and voice clips you submit for logging |
| Convex | Database and backend hosting — where your account and logs are stored and processed | Your account info and everything you log |
| Vercel | Hosting for the web app | Standard web request data needed to serve the app |
| Resend | Sends transactional email, including your one-time sign-in codes | Your email address and message content (e.g. your sign-in code) |
| Sentry | Crash and error monitoring, so we can find and fix bugs | Error/diagnostic data, which may include limited technical context |
| Apple | Sign-in, subscriptions/billing (App Store); delivering push notifications to the iOS app (Apple Push Notification service); and — only if you enable it — Health sync | What's needed to process your subscription, a device push token and notification content (e.g. "you got cheered") for iOS push, and, if enabled, the Health data described in Section 4 |
| Web push services (browser vendors) | Deliver push notifications (buddy cheers, reminders) when enabled | A push subscription token and the notification content |
Each of these providers is contractually limited to using your data only to provide its service to us — not for its own independent purposes.
Friends: buddies you connect with see your cheers and daily progress score — never your weight, body measurements, or raw numbers.
We may also disclose data if required by law, to enforce our Terms of Service, or to protect the rights, safety, and security of our users or whatevr — and in connection with a merger, acquisition, or sale of assets (in which case this policy continues to apply to your data).
Your data is kept while your account is active. Deleting your account (in the app: Settings → Account → Delete Account) immediately and permanently erases your profile, logs, connections, and tokens from our active systems — this is a real deletion, not a soft "hide it" flag. The single exception: we keep a keyed one-way cryptographic code derived from your email address (an HMAC computed with a secret key we store separately — it cannot be turned back into your address, and without that key it cannot be matched against guessed addresses either) on a suppression list, solely so a deleted account — for example, one closed by our under-13 protections — cannot immediately re-register itself. This code is kept only to serve that purpose, carries no other information, and no other account data is retained. Convex, our database provider, may retain deleted rows in short-lived, encrypted operational backups for a limited period after that as part of its own disaster-recovery process; those backups are not used to serve the app and are not something we can selectively restore your data from once you've deleted it.
Sub-processors that briefly receive your content to do their job — most notably xAI, for the input you submit to be parsed — handle and retain that input under their own terms and our agreement with them, in addition to our own deletion practices described above.
You can export a full copy of your data as JSON at any time from Settings, before or instead of deleting your account.
whatevr is built so you can exercise most of these rights yourself, in the app:
For anything not self-service, email support@trywhatevr.app.
You have the right to know what personal information we collect and how it's used, to access and delete it, to correct it, and to limit use of sensitive personal information. We do not "sell" or "share" your personal information as those terms are defined under the CCPA/CPRA — we don't exchange it for money or use it for cross-context behavioral advertising. We won't discriminate against you for exercising these rights.
We're a US company and process data primarily in the United States. If a law where you live gives you additional rights over your data (for example, the EU/UK GDPR), we'll honor those rights for your data on request at support@trywhatevr.app, to the extent that law applies to us.
We use passwordless sign-in — a one-time email code, not a password — so there's no password for an attacker to steal. Keep your email account secure, since access to your inbox can mean access to your whatevr account. We use reasonable technical and organizational measures to protect your data in transit and at rest, and we limit access to what's needed to run the service. No system is perfectly secure; if we become aware of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.
whatevr provides estimates for general wellness tracking. It is not a medical device and does not provide medical, nutritional, or clinical advice. Nothing in the app — including AI-generated estimates, scores, or targets — is a diagnosis or treatment recommendation, and none of it is a substitute for advice from a qualified physician or registered dietitian. Talk to a doctor before making significant changes to your diet or exercise, especially if you have a medical condition, are pregnant or nursing, or have a history of disordered eating.
whatevr is for adults. You must be 18 or older to create an account. We never knowingly collect data from children under 13 — if an account indicates an age under 13 during setup, everything entered is deleted immediately. If you believe someone under 18 is using whatevr, contact support@trywhatevr.app.
If this policy changes materially, we'll note it in the app and update the "last updated" date above. Continuing to use whatevr after a change takes effect means you accept the update.
Toasty Cabin LLC
North Carolina, USA
Questions or requests (including data export or deletion): support@trywhatevr.app