Privacy Policy

SayKeto ("the app") is made by McColl Aviation ("we", "us"), Australia. This policy explains what SayKeto collects, why, who it's shared with, and your choices. We handle personal information under the Australian Privacy Act 1988 and the Australian Privacy Principles.

The short version: the app has no accounts, no ads and no tracking. Your food log, weight history and settings live on your iPhone. To understand your voice, meals and photos, SayKeto sends them to our server and our AI providers, OpenAI and xAI. We never sell your data and never use your health data for advertising.

1. What stays on your iPhone

Your meals, usuals, macro targets, history, weigh-ins (including weights read from Apple Health), shopping list, display name and settings are stored on your device. Deleting the app deletes them. We don't run a cloud copy of your food log.

2. What is sent to our server, and why

SayKeto uses our server (hosted on Vercel, with an Upstash Redis database) to provide its smart features. No AI service key is ever kept on your phone.

• Voice. When you tap the microphone, the short recording is sent to our server and transcribed by OpenAI. In live conversation mode your voice streams to xAI's realtime voice service, using a short-lived access pass issued by our server. Spoken replies are generated by OpenAI or xAI. We don't store your recordings. If you're offline, Apple's speech recognition is used instead (see Apple's privacy policy).
• Meals and conversation. The words of your meal (for example "two eggs and bacon"), your usuals, and the last few turns of a conversation are sent so the AI can work out foods and macros and reply. Results of meal lookups may be cached for up to 30 days, keyed to the meal words and not to you, so the same phrase is faster next time.
• Context for the voice coach. So Foodie can answer questions like "how's my weight going?", voice requests include your daily targets, today's totals, a summary of the last 14 days of macros and frequent foods, your most recent meal, your display name, and your last 12 weigh-ins (date and weight). We use this only to answer that request and don't store it.
• Photos. Meal photos are shrunk on your phone and sent to OpenAI to identify foods. We don't keep the image. A text summary (dish, foods, estimated portions) is kept for 3 hours so you can correct it by voice, then deleted automatically.
• Food data. To look up products, food names (never your identity) may be sent to Open Food Facts, USDA FoodData Central and other public nutrition databases, and to OpenAI web search for branded labels and keto news.
• Identifiers. The app creates a random anonymous user ID and an install ID (kept in your iPhone's Keychain, so it survives a reinstall). They aren't linked to your name, email or Apple ID. We use them to keep track of your live-voice minutes and subscription, to apply fair-use limits, and to stop the free voice minutes being claimed again.
• Usage counts. We record how many AI requests and live-voice minutes each anonymous ID uses, and their cost, to enforce limits. Detailed usage logs are deleted after 48 hours. Minute balances are kept up to about a year after last use.
• Purchases. Purchases are handled by Apple. We receive Apple's signed transaction record (product, dates, transaction ID), never your card details, and keep it up to about 3 years to honour your subscription and top-ups.
• Approximate region. To choose the right food database and supermarkets, we use your device's region setting. If that is missing, we use the country your request comes from, only for that request.

Our server logs keep technical details such as timings and sizes. They don't keep the words you say, except during short debugging sessions that we switch on deliberately and that are deleted within days.

3. Our AI providers

• OpenAI (USA): transcription, meal parsing, photo recognition, spoken replies and web search.
• xAI (USA): live voice conversation.

These providers process data under their API terms. Under those terms, API data isn't used to train their models by default, and it may be kept for up to about 30 days for abuse monitoring before it is deleted. Your data may therefore be processed outside Australia, mainly in the United States. Before SayKeto first sends your voice, meals, photos or weight to these providers, it asks for your permission. You can use SayKeto by typing with only food lookups, but voice, photo and the AI coach need these services.

4. Apple Health

If you turn on Settings > Apple Health, SayKeto asks to read your body weight only. It never writes to Apple Health and doesn't read any other Health data. Imported weights are stored on your iPhone, and your recent weights are included with voice coach requests as described above. Health data is never used for advertising or marketing, never sold, never used to train AI models, and never stored by us in iCloud. You can turn this off in the app or in Health > Profile > Apps > SayKeto.

5. What we don't do

No advertising, no ad tracking (we don't use your advertising identifier), no sale of personal information, and no sharing with data brokers.

6. Children

SayKeto isn't directed at children under 13, and we don't knowingly collect their information. Ketogenic diets aren't suitable for children unless a doctor supervises them.

7. Your choices and rights

• Delete the app to remove everything stored on your phone. You can delete single meals or weigh-ins at any time.
• To have the server records linked to your anonymous ID deleted (minute balances, usage counters), or to ask about your information, open SayKeto > Settings > Copy support ID, tap it to copy your support ID, and include it in your email to hello@sayketo.com. We'll respond within 30 days.
• Manage or cancel subscriptions in your Apple ID settings.
• If you're unhappy with how we've handled a privacy complaint, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

8. Security

All traffic uses HTTPS (TLS). AI keys stay on our server. Access to our server's data is limited to the developer.

9. This website (sayketo.com)

If you join the early-access list on sayketo.com, we store your email address, the date, your approximate country (from your connection) and how you found us: the ad or link you arrived from (its "utm" campaign tags or Facebook/Instagram click ID), the referring website and the page you landed on. The site remembers that ad or link in your browser's local storage and a first-party cookie for 30 days, so a sign-up can be matched to it. The list is stored privately with our host, Vercel. We use it only to email you about SayKeto and to count which of our ads and links bring people to SayKeto. The website doesn't use third-party analytics or advertising trackers. To be removed from the list, email us or use the unsubscribe link in any email.

10. Changes

If this policy changes, we'll update the date above and, for significant changes, tell you in the app.

11. Contact

McColl Aviation, Brent McColl. Email: hello@sayketo.com