Privacy policy

Last updated 30 October 2026

Who is responsible

Victor Jimenez, of Jalisco, Mexico, runs NoshChat and is responsible for your personal data ("NoshChat", "we", "us" and "our" in this policy). You can reach us at [email protected]. This policy covers the NoshChat app at noshchat.runat.app, its sign-in pages, this website, and stats.noshchat.com.

What we collect

Your account

• Your email address, which you sign up and sign in with.
• Your password, which our sign-in service stores so it can check it is you.

What you tell the app

• Your chat messages and the app's replies.
• Your food log: each food, its serving, the meal and day, and its calories, protein, carbs, fat and fiber.
• What your daily target is worked out from, if you enter it: age, gender, weight, height, activity level and goal, plus any targets you set yourself.
• Training and rest days, and the targets each day was measured against.
• Your cupboard (the food you have in), your remembered foods, and your settings, such as which meals you show and the food preferences you choose to save.
• Agent keys, if you create one to connect an AI assistant to your food log.

What the service records as it runs

• How many chat credits you have used each month, and on which days.
• Technical logs of requests, errors and timings, which can include your account's internal identifier and your IP address.

We don't ask for your name, postal address or phone number. NoshChat takes no payments today; when it does, the payment provider will handle card details, and we will update this policy first.

Health data and your consent

Your weight, height, goal and what you eat can reveal information about your health, which the law may treat as sensitive personal data. Entering it is optional; the food log works without a profile. By entering it, you expressly consent to us processing it, and to the transfers described below, for the purposes in this policy. If you don't consent, don't enter it. You can withdraw your consent at any time by deleting the data in the app or by emailing us. Please don't enter medical records, diagnoses, or other people's personal data.

Why we use it

We use your data only for what NoshChat needs to work, which is:

• running NoshChat: keeping your food log, working out your daily target, answering your messages, and showing your day, your week and your statistics;
• keeping to the monthly allowance of chat credits on your plan;
• keeping the service secure, preventing abuse, and fixing it when it breaks;
• emailing you about your account, and about changes to this policy or the terms;
• meeting legal obligations, and establishing or defending legal claims.

We have no secondary purposes: we don't sell your personal data, use it for advertising, or share it with anyone for their own marketing. We may use statistics that cannot identify you, such as how many messages are sent in a day, to understand and improve NoshChat. Where a law such as the EU's GDPR applies, we rely on our contract with you, your consent for health data, our legitimate interest in keeping NoshChat secure, and our legal obligations.

Who else handles it

NoshChat uses these companies to provide its service. They handle your data on our behalf, under their agreements with us and their own privacy policies.

• Anthropic provides the AI that reads your messages. It receives your message, the recent chat, and what it needs to answer, such as the day's food log, your targets, your cupboard and your saved preferences.
• TypeSafe provides the AI that decides what kind of message you sent. It receives your message and the recent chat.
• Amazon Web Services hosts the app and stores your data, in its US East (N. Virginia) region, and sends our emails.
• Google reCAPTCHA checks that a person, not a bot, is signing up or signing in. It runs only on the sign-in pages, and Google's privacy policy and terms apply to it.
• Cloudflare serves this website and stats.noshchat.com.

We may change these providers and will update this list when we do. We may also disclose your data when the law or a competent authority requires it; to protect the rights, property or safety of NoshChat, its users or others; or to someone who takes over NoshChat, who must then keep to this policy. Under Mexico's personal data protection law, these disclosures don't need your consent.

Cookies and trackers

The app sets one cookie of its own, to keep you signed in. Google reCAPTCHA, on the sign-in pages, sets Google's cookies. At the date of this policy, this website sets no cookies, and NoshChat uses no analytics or advertising trackers. If that changes, we will update this policy first.

How long we keep it

• Chat messages are deleted automatically 30 days after they are sent.
• Everything else is kept while you have an account.
• When your account is deleted, we delete your data from the service. Copies can remain for a limited time in backups and logs, which we keep only to restore the service and protect it, and we may keep what the law requires or what we need to establish or defend a legal claim.

Your rights

• Under Mexico's personal data protection law, you have the rights to access your data, rectify it, cancel it and oppose its use (the ARCO rights), and to withdraw your consent. Depending on where you live, you may have others, such as to get a portable copy, to restrict how we use your data, or to complain to your data protection authority.
• Much of this you can do in the app, where you can see, edit and delete your food log, profile, cupboard, foods and settings.
• For anything else, including a copy of your data or deleting your account, email [email protected] from the address you signed up with. Say which right you want to use and what it is about. We may ask you to confirm your identity first, and we answer within the time the law sets.
• Some data is needed for NoshChat to work, so cancelling or opposing its use may mean we can no longer provide NoshChat to you.

Where it is stored

NoshChat is run from Mexico. Your data is stored in the United States, and the companies above may process it in other countries, whose data protection laws may differ from yours. By using NoshChat you consent to these transfers.

Security

We take reasonable administrative, technical and physical measures to protect your data. Everything travels over HTTPS, and each account's data is kept apart from every other account's. No system is perfectly secure, and we can't guarantee that your data will never be accessed, lost or changed without permission. Keep your password and agent keys safe. If a security breach significantly affects your rights, we will tell you as the law requires.

Children

NoshChat is only for people aged 18 or over, and we don't knowingly collect data from anyone younger. If you think someone under 18 has signed up, email us and we will delete the account.

Other websites

NoshChat links to websites we don't run, such as the video platforms on stats.noshchat.com. Their own privacy policies apply to them, and we are not responsible for them.

Changes to this policy

We may change this policy. When we do, we will post the new version here with a new date at the top, and if a change is significant, we will tell you by email or in the app before it takes effect.

Contact

Victor Jimenez, Jalisco, Mexico. Questions, requests or complaints: [email protected].