Your privacy
Alta pilot (working name) · Version 1 · 5 November 2026
The short version. We use what you log to work out your meals and your plan. Meals you send for reading go to our AI provider only after you tap “Agree and send”. Your Apple Health data stays on your phone. We don’t sell your data or use it for ads. You can export or delete everything from Settings at any time.
Who we are
Alta is a pilot app run by Alta Health Limited. We decide how your data is used. Questions or requests: privacy@useaxum.com. We reply within 2 working days.
Who it’s for
You must be 18 or older. Alta is not a medical service and doesn’t diagnose or treat anything. If you have a health condition, are pregnant, or have a history of disordered eating, talk to a doctor before changing how you eat or train.
What we collect and why
| What | Why |
|---|---|
| Your answers in setup: goal, age, sex, height, weight, activity, pace, and whether to hide calories | To set your targets and plan |
| Meals you type or photograph, and your edits to them | To read the food and work out calories and nutrients |
| Saved foods and the habits the app learns (e.g. how you usually take coffee) | So logging gets faster |
| Workouts, sets, personal bests and session summaries | Your training log, and a backup so a new phone gets it back |
| Sign in with Apple or Google: an account ID from them, and the email they give us (with Apple this can be a private relay address) | To save your account and restore it on a new phone. We never post anything or read your contacts |
| A random account number and a recovery code (stored only as scrambled hashes) | So the app works before you sign in |
| Basic technical data: app version, errors, and the cost and timing of each AI read (no meal text) | To keep the app working and its costs in check |
| If you say yes: how you use the app (screens opened, buttons tapped) | To see what helps and what confuses |
Apple Health: if you allow it, the app reads steps, activity, sleep and weight on your phone to show insights. These values stay on your phone. They are not sent to our server, to the AI, or to analytics, and are never used for marketing.
We don’t collect your location, contacts or ad identifier, and we don’t track you across other apps.
Where it goes
| Who | What they get | Where |
|---|---|---|
| Our hosting provider (server and database) | Your account, meals, saved foods, workouts and settings | Singapore. Requests may pass through other data centres of the same provider, such as Hong Kong, on the way |
| Our AI provider (the third-party AI that reads meals) | Only the meal text or photo you send, the time, and your recent meals for context. No name, email or account number | United States |
| Our analytics provider (usage analytics, only if you say yes) | Screens and taps with a random install number. Never food text, numbers about your body, or Health data | European Union |
| Apple / Google (only if you sign in with them) | That you signed in to Alta | Their own services |
These companies process data for us under their own terms and may not use it for their own purposes. Our AI provider does not train its models on the data we send it. Sending data to Singapore, the US and the EU means it leaves Vietnam; we ask your consent for that in the app.
We don’t sell or rent your data, and we never share it with advertisers or data brokers.
How long we keep it
- Your account data: while you use Alta. If you don’t open the app for 12 months, we delete the account.
- Meal photos: not stored by us. A photo is passed to the AI and then dropped.
- At our AI provider: deleted within 30 days. Anything their safety systems flag can be kept longer (up to 2 years) for safety review.
- Training backups: the last 30 days.
- Server logs: a few days, with no meal text.
Delete or export your data
- Delete: Settings → Delete my account. Everything we hold is deleted from our database at once. Copies in backups and at our AI provider are gone within 30 days. Apple Health data on your phone is untouched. If you used Sign in with Apple, we also cut the link with Apple. We keep only an unlinked line per AI read (time, size and cost, no content), so the app's spending limit can't be reset.
- Export: Settings → Export my data gives you a file of your meals, foods, workouts and settings (JSON and CSV) to save or share.
- You can also email us to see, correct, delete or export your data, or to object to any use. We reply within 2 working days and finish within 20 days.
Your choices (and changing your mind)
We ask separately for each of these. Nothing is switched on unless you say yes, and you can change each one any time in Settings → Privacy.
- AI meal reading. Needed to read meals for you. Without it you can still log saved foods and training.
- Research log. See below.
- Usage analytics. Screens and taps, as above.
- Notifications. Meal and training reminders.
Turning a choice off stops it from then on. Turning off the research log also deletes your part of it at once. For the others, delete your account to remove what was already sent.
The research log
If you say yes, we keep a separate daily record to learn what helps people reach their goals. Each day’s record holds: days since you joined and the weekday (no dates), your age band (e.g. 30–39), sex, goal, country, BMI range, activity level and calorie settings (whether you chose a deficit or hid calories), rounded food totals, number of meals and the hours of your first and last meal, the foods you logged as food-database codes with amounts, and your training (exercises, sets, reps and weight lifted). It has no name, email, account number, meal text, photos, exact dates, pain or injury notes, or Apple Health data.
While the pilot is small, a record like this could still be linked back to a person, so we treat it as personal data: it’s protected the same way, and switching the research log off or deleting your account deletes your part of it. We will only call results anonymous once they are counts and averages across many people. If we ever publish findings, they will be those totals only.
Security
Data travels encrypted (HTTPS) and is stored encrypted by our hosting provider. Your account token and recovery code are only kept as hashes. Access is limited to the people running the pilot. If a breach puts your data at risk, we will tell you and the authorities as the law requires.
Where you live
We follow Vietnam’s Personal Data Protection Law. If you live in the UK or EU, you also have rights under the GDPR, including to complain to your data protection authority (for example the UK ICO). The pilot is not aimed at California or other US states’ residents, but you can make the same requests by email.
Changes
If we change this page in a way that matters, we’ll tell you in the app before it applies and ask again where the law needs your consent.
Pilot version, not yet reviewed by a lawyer.