What personal information does Avodo collect?

Avodo collects the information you provide during sign-up (name, email, phone), your health profile (age, weight, height, dietary preferences, food allergies), your in-app activity (meal logs, water intake, steps, weight history), and food scan photos. We also collect limited technical data such as crash reports to fix bugs.

Does Avodo sell my personal data?

No. Avodo does not sell, rent, or trade your personal data to third parties. We do not use your health data for advertising. Your information is only shared with essential service providers (Firebase, OpenAI, AWS) that help us operate the platform, under strict data processing agreements.

How is my health data protected?

Sensitive fields such as your email, phone number, date of birth, weight, and height are encrypted using AWS KMS envelope encryption at rest. All data in transit is protected by TLS. Food scan images are stored in a private AWS S3 bucket accessible only via signed URLs.

How can I delete my Avodo account and data?

You can delete your account directly from within the Avodo app under Settings → Account → Delete Account. Your Firebase authentication is removed immediately. Identifiable records are permanently purged from our servers after a short retention window as required by applicable law.

Does Avodo share my data with OpenAI?

When you use the food scanner or chat with our AI buddy Avo, relevant data (your food photo or chat message with health context) is sent to OpenAI's API to generate a response. OpenAI's API policy states that data submitted via their API is not used to train their models by default. No personally identifying fields such as your name, email, or phone number are attached to these requests.

What are my rights under GDPR or the DPDP Act?

Under GDPR, UK GDPR, CCPA, and India's DPDP Act 2023 you have the right to access, correct, delete, and port your data, to withdraw consent, and to object to or restrict certain processing. To exercise any right, email privacy@avodo.ai. We will respond within the timelines required by applicable law.

Transparency First

Privacy Policy

Your privacy matters. This policy explains what we collect, why we collect it, how we protect it, and the rights you have over your data.

Last Updated: November 4, 2026 | Effective: November 4, 2026

1. Introduction

Welcome to Avodo. Avodo is an AI-powered meal planning and health tracking service operated by MOONDIVE ("we," "us," "our"). This Privacy Policy explains how we collect, use, disclose, and protect your personal and health-related information when you use the Avodo mobile application, website, and related services (collectively, the "Service").

Avodo helps you plan meals, track calories and macros, log water and steps, monitor weight, and chat with our AI buddy "Ava". Because the Service processes information about your diet, body, and activity, we take your privacy and data protection seriously.

By using Avodo, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

Account Information

Full name
Email address
Phone number (for OTP sign-in)
Date of birth (18+ verification required)
Authentication via Firebase (phone OTP, email OTP, Google, Apple)

Profile & Goals

Gender(optional), height, weight
Activity level, diet type, cuisine preferences
Dietary restrictions & allergies
Health symptoms disclosed in onboarding
Target weight, water and steps goals

Health & Activity Data

Food logs (meals, calories, macros)
Water intake logs
Weight history
Steps - manual entry, or synced from Apple Health (iOS) or Google Fit / Health Connect (Android) if you choose to connect them.
Sleep - bedtime, wake time, and sleep duration, either set manually or logged automatically based on your in-app sleep schedule settings.
Food scan photos and detected nutrition

Communications

Chat messages with Ava (AI buddy)
Support inquiries
Feedback & reports you submit
Push notification preferences

2.2 Automatically Collected Information

Device & Technical Data: Limited device and request metadata (such as your app version and the IP address used to reach our servers) may be processed when you use the Service.
Crash Reports: If the app crashes, Firebase Crashlytics collects a crash report so we can fix the bug.
Your Logs: The meals, water, weight, steps, and food scans you record are stored in your account so we can show your history and progress.

2.3 Third-Party Sign-In

If you sign in with Google or Apple, we receive your email, name, and (optionally) profile photo. For Apple Sign-In, you may choose to hide your email and Apple will forward messages through a relay address.

3. How We Use Your Information

Generate Personalized Meal Plans

Build 7-day meal plans tailored to your goals, activity, diet type, cuisine, and restrictions; adapt weekly based on your logs.

Scan Food & Detect Nutrition

Analyze photos you capture to estimate calories and macros, using OpenAI vision models.

Power Your AI Buddy "Ava"

Provide contextual coaching, log meals from text, and answer questions about your progress.

Track Progress & Streaks

Show correlations between calories, weight, water, and steps; maintain streaks for meal, water, and steps tracking.

Keep You Secure & Compliant

Prevent fraud, enforce our Terms, and comply with applicable laws.

Send In-App Notifications

Send meal, water, weight, motivational, and tip notifications according to your preferences.

4. AI & Automated Processing

Avodo uses AI to help you eat better, log faster, and understand your progress.

Here's exactly where AI is used and what it processes.

Food Scanner (Vision AI)

When you take a photo of a meal, the image is sent to OpenAI's vision models to detect the food items and estimate calories and macronutrients.

What is sent:

The food photo
No personally identifying fields (name, email, phone) are attached to the vision call

Provider: OpenAI. Images are also stored in our private AWS S3 bucket for your history.

AI Buddy "Ava"

When you chat with Ava, relevant health context (goals, recent logs, targets, dietary preferences) is sent to OpenAI so that replies are personalized.

Provider: OpenAI. OpenAI's API policy states that data submitted via their API is not used to train their models by default. Their data handling is governed by their own privacy policy.

Personalized Meal Plans

Avodo generates and adapts meal plans using your profile, goals, dietary preferences, restrictions, cuisine choices, and recent meal/water/weight/steps logs. This meal planning is performed by Avodo’s recommendation system using our food database and your app data.

No solely automated decisions with legal effect.

Avodo's AI features are informational. They do not make decisions that produce legal or similarly significant effects on you. You remain in control of what you eat, log, and share.

5. Legal Bases for Processing (GDPR / UK GDPR)

Contract: To create your account and deliver the Service you requested.
Consent: For sensitive health data, optional AI features, and optional Apple Health, Google Fit, or Health Connect connections.
Legitimate Interest: Product improvement, fraud prevention, and security — balanced against your rights.
Legal Obligation: Responding to lawful requests and complying with regulations.

You can withdraw consent at any time by disabling the relevant feature or by contacting us at privacy@avodo.ai.

7. Third-Party Services

Firebase (Google)

Authentication (phone / email OTP, Google, Apple) and push notification delivery.

OpenAI

Food photo analysis (vision) and AI buddy Ava.

AWS KMS & S3

KMS envelope encryption of sensitive fields; private S3 bucket for scan images.

MongoDB Atlas & Redis

Primary database (Atlas) and caching layer (Redis).

Nodemailer / Gmail

Transactional email for OTPs and account notifications.

Apple Health (HealthKit)

Optional - only if you connect it from in-app Settings. We read your daily step count to sync with your tracking.

Google Fit / Health Connect (Android)

Optional - only if you connect it from in-app Settings. We read your daily steps, calories burned, and distance via Google Fit or Health Connect to sync with your tracking.

8. Health Data & Sensitive Categories

Avodo processes information about your diet, weight, activity, and symptoms. Under laws such as GDPR Article 9 and India's DPDP Act, this may qualify as sensitive personal data.

We process health-related data only with your explicit consent, collected during onboarding.
Health data is never shared with advertisers or data brokers.
You can stop providing health data at any time by pausing or deleting your account.

Washington My Health My Data Act (MHMDA)

If you are a Washington resident, Avodo may collect "consumer health data" as defined by the Washington My Health My Data Act, including information such as your weight, dietary and health symptoms, sleep, and activity logs.

We obtain your consent before collecting consumer health data beyond what is strictly necessary to provide the Service you requested, and separate consent before sharing it with any third party for another purpose.
We do not sell consumer health data.
We do not use geofencing around healthcare facilities to collect data about, identify, or target Washington consumers.
You may withdraw consent to the collection or sharing of your consumer health data at any time by emailing privacy@avodo.ai.

Medical Disclaimer: Avodo is not a medical device, nor a substitute for professional medical advice, diagnosis, or treatment. Always consult a qualified healthcare provider before making significant changes to your diet or exercise routine.

9. Data Storage & Security

Encryption in transit: Traffic to our servers uses industry-standard TLS.
Encryption at rest: Sensitive fields (such as email, phone, date of birth, weight, and height) are encrypted using AWS KMS envelope encryption.
Image storage: Food scan images are stored in a private AWS S3 bucket with signed-URL access.
Access controls: Role-based access limits who can view production data.
Authentication: Firebase OTP, Google Sign-In, and Apple Sign-In. We do not store your passwords.

Note: No system is 100% secure. Protect your account by keeping your device secure and by not sharing OTPs.

10. Data Retention & Deletion

Active accounts: Data is retained while your account is active.
Deletion request: When you request account deletion, your account is archived immediately and your Firebase authentication record is removed.
Retention period: Archived records are kept for a short retention window, after which our automated purge job permanently removes identifiable records.
Legal holds: We may retain limited data where required by law.

11. Your Rights

Access

Request a copy of the data we hold about you.

Correction

Update inaccurate profile, goals, or logs in the app anytime.

Deletion

Delete your account from in-app Settings. Identifiable records are purged after a short retention window.

Portability

Request a machine-readable copy of your logs and profile.

Withdraw Consent

Turn off notifications or stop using AI features at any time.

Object / Restrict

Ask us to limit processing in specific circumstances.

To exercise any right, email privacy@avodo.ai. We will respond within the timelines required under applicable law (typically within 30–45 days).

12. Children's Privacy

Avodo is strictly for users 18 years of age and older.

We do NOT knowingly collect information from anyone under 18. Our backend enforces this at signup. If we discover an underage account, it will be deleted immediately. Parents: contact safety@avodo.ai if you believe your child has an account.

13. International Data Transfers

Your data may be processed in the United States, India, and other regions where our service providers operate. We rely on appropriate safeguards:

Standard Contractual Clauses with providers where applicable.
Providers that are certified for major privacy frameworks.
Encryption in transit and at rest.

14. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have rights to know, access, delete, correct, and limit use of sensitive personal information. Avodo does not sell or share your personal information for cross-context behavioral advertising.

To submit a request, email privacy@avodo.ai. We will not discriminate against you for exercising your rights.

15. India — DPDP Act 2023

If you are in India, you have rights under the Digital Personal Data Protection Act 2023, including access, correction, erasure, grievance redressal, and nomination.

Grievance Officer

Email: grievance@avodo.ai. We will acknowledge and address grievances within the timelines required under the DPDP Act 2023.

16. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. For material changes, we will notify you in-app or by email. Your continued use of Avodo after changes means you accept the updated policy.

17. Contact Us

MOONDIVE

United States

Questions & Answers

Everything you need to know

Find quick answers about your account, meal plans, food tracking, and the features that make Avodo easier to use

Still have questions? Reach out to us