Vercue is built on collecting as little as possible. This page says exactly what we hold, why, who else touches it, and how to delete it.
If you live in Washington, additional rights apply to your health-related data, and they are set out in our separate Consumer Health Data Privacy Policy. If you live in Nevada, see the Nevada section near the end of this page.
Vercue is an iPhone app operated by Pavel Movilean, an individual resident in the Republic of Moldova. Contact: support@vercue.app. Vercue is offered only in the United States and in the Republic of Moldova.
Vercue is not a healthcare provider, and it is not a covered entity or business associate under the U.S. Health Insurance Portability and Accountability Act (HIPAA). HIPAA does not govern the data you give Vercue; the consumer health data laws and the FTC rules described in this policy do.
You sign in with Apple. We receive a stable identifier for your Apple account and, if Apple provides it, an email address — which may be one of Apple’s private relay addresses. We also store an encrypted Apple token that exists for one purpose: so that deleting your account can also revoke Vercue’s access from your Apple ID.
The first name you choose to give, your goal (lose fat while keeping strength, build muscle, get leaner and stronger, hold steady and eat better, or get food off your mind) and, if you choose that path, how fast you want to go or what a calmer relationship with food means to you — which can include wanting to break a cycle of restricting and then overeating; age, gender, height and current weight; how often and how hard you train, which days you usually train, and how much you move day to day; your meal pattern and whether you eat late, your sleep quality, eating and stress patterns, and how in control of food you feel; whether you take creatine; any dietary preference you select — vegetarian, vegan, gluten-free, halal, kosher, or none; and, at the end, where you heard about Vercue (for example Instagram, TikTok, YouTube, a creator, ChatGPT or another AI assistant, a friend, the App Store or Google). From your answers the App derives one setting that changes how it talks to you — a language and progress-display preference, not a diagnosis, not a screening result, and not a medical assessment.
We do not ask for a goal weight, for medical conditions, for medications, or for pregnancy or reproductive status. A dietary preference such as halal or kosher may indicate a religious practice; we use it only to shape food suggestions, and we never share it or use it to target you.
Before the App asks anything about your body it shows you, in short, what it is about to collect, why, who else handles it, and how to delete it, and you tap “I agree” to go on. That consent is separate from accepting our Terms of Use. We keep a record that you accepted it and when that record reached our server, so that your agreement is a matter of record and not of memory. That record is deleted with your account.
Weights over time, meals, the dish names and nutrition estimates produced from your photos, any text you add as context or as a correction, and any feedback you send us.
A photo you take is sent to our server and forwarded to Google’s Gemini API, which returns a nutrition estimate. We do not keep your photographs. A photo exists in two places and only while it is being handled: on your iPhone, in app storage, until our server accepts the upload; and inside the processing job on our server, until that job finishes or its retries are used up. It is removed at that point, and only the resulting text estimate is saved to your log. There is no photo library, no storage bucket and no archive of images on our side. If the app is offline the photo waits on your device until it can be sent, and it is also removed when you delete your account. We do not scan, extract or derive facial geometry, biometric identifiers, or any information about people who may appear in a photo.
Subscription status and purchase events (through RevenueCat and Apple), your push-notification token if you enable reminders, in-app events such as which onboarding step you reached, and crash and error reports.
When the App connects to our server, our hosting provider receives your IP address and basic request information, such as the time and the address requested, and keeps it in service logs for a limited period to run and secure the service. Apple and RevenueCat also receive your IP address when the App connects to them. We do not use IP addresses to locate you, to build a profile, or for advertising. Because the fact that someone uses a nutrition app can itself say something about their health, we give this technical data the same care as the rest of your data.
We use a small number of service providers. The ones that handle your account and your logs act on our instructions, under their business terms, and are not allowed to use your data for their own purposes. Two of the entries below are different, and we say so in the table: Apple decides for itself how it handles sign-in and payment, and providers like our host and our email service also process technical information for their own security and service operation, as any infrastructure provider does.
| Provider | What it does | What it sees |
|---|---|---|
| Google LLC | Gemini API — turns a food photo into a nutrition estimate | The photo, transiently, and the text of the request. See the note below this table. |
| Railway Corp. | Runs our servers and our database, in the European Union | Your account, quiz answers, logs and subscription records |
| RevenueCat, Inc. | Manages Apple subscriptions and entitlements | A pseudonymous user ID and purchase and renewal events. No quiz answers, body data, meals or photos. |
| Functional Software, Inc. (Sentry) | Crash and error monitoring (EU region) | Technical error data; we filter out request bodies and credentials |
| Apple Inc. | Sign in with Apple, App Store purchases, push delivery | Apple acts as an independent controller for sign-in and payment under its own privacy policy |
| Cloudflare, Inc. | Hosts and protects this website, and stores backup copies of our database in the European Union | For the website, ordinary web request information — IP address, browser and the page asked for. For backups, a copy of the whole database, including your account, quiz answers, weights and food logs; each copy is deleted automatically after 30 days. |
| Google LLC (Google Fonts) | Serves the typeface on this website | Your browser fetches the font file from Google, which means Google sees the request. No account data is involved. |
| Zoho Corporation (Zoho Mail) | Runs the support@vercue.app mailbox | Whatever you write to us, including anything about your health you choose to put in the message, and your email address |
About the AI provider. Vercue calls Google’s Gemini API under Gemini API Paid Services. Under Google’s terms for the paid service, Google does not use the content of your requests or Gemini’s responses to improve its products, and that content is not reviewed for that purpose. Google may still keep it for a limited time to detect abuse, to meet a legal obligation, and to run the service itself — that is Google’s own retention, described in the Gemini API terms, and it is not something we control. If we ever change who reads the photos, or move to a service whose terms are different, we will change this page before the change takes effect — the App asks for your permission to send a photo to an outside AI service, and this page is where that service is named.
What Gemini receives is more than the picture. For a meal scan it can include the text you typed, your goal, any dietary preference, your eating pattern, whether you asked to see numbers, how many calories and how much protein are left for the day, your recent meals and the corrections you made. For the weekly read it can also include the days you usually train, your sleep and stress answers, and your response to earlier suggestions. We do not send your name, your email or your Apple identifier. The one thing we cannot filter is what you type yourself: a note you add to a meal is sent as you wrote it, so do not put anything in it you would not want read.
Error monitoring is deliberately blunt. On the server we strip request bodies, query strings and credentials before an error report leaves us; in the App we turn off personal data, network breadcrumbs, screenshots and view hierarchies, which are the channels through which a crash report could otherwise carry what was on a food or weight screen.
We may also disclose information if we are legally required to, or where necessary to protect our rights or someone’s safety. If Vercue is ever transferred to another operator, we will give notice in the App before your data moves.
| Data | Kept for |
|---|---|
| Food photographs | Not kept. Removed from your device once the upload is accepted, and from the processing job when that job finishes or its retries are used up. If the App is offline, the copy on your phone waits there until it can be sent. |
| Nutrition estimates held for speed | A short-lived cache entry expires 24 hours after it is written. It holds the estimate, never the photograph. |
| Account, quiz answers, weights, food logs | Until you delete your account, and then they are gone from the live database. We also keep daily copies of the whole database so the service can be restored after a failure. Those copies are private, are used for nothing else, and each one is deleted automatically 30 days after it is made — so after you delete your account, your data can remain in a backup for up to 30 days. |
| Record that a deletion happened | The value that could match the record to your account is erased by a daily job once it is at least 30 days old. What remains is a request number, timestamps and counts of what was deleted — no name, no email, no health or meal data. We keep that as evidence the deletion was carried out. |
| Purchase and subscription records | When you delete your account these lose their link to you: the account reference is removed and the store identifiers are replaced with one-way keyed values. What is left carries no meal, body or profile data, and we keep it for accounting and to stop a repeated payment message being counted twice. |
| Support emails | In our mailbox while we are dealing with your message and afterwards as a record of it. Ask us to delete your correspondence and we will. |
You can, at any time:
Depending on where you live in the United States, you may have rights to access, correct, delete, or obtain a portable copy of your personal information, and to appeal if we decline a request. To exercise any of them, use the in-app deletion tool or email us. If we decline, we will explain why, and you may appeal by replying to that message; if an appeal is denied you may contact your state Attorney General.
vercue.app is a plain set of pages. We set no cookies of our own, we run no advertising or analytics tracker, there is no Meta pixel and no tag manager, and the site asks you for nothing. Our host may set a strictly necessary cookie to keep the site up and to tell a browser from a bot; that is not tracking and it tells us nothing about you. The only third parties involved are the two in the table above: the host, and the font service your browser contacts to draw the text. Because we do not track visitors, a Do Not Track signal changes nothing about what we do here — there is nothing for it to switch off.
Traffic between the App and our servers is encrypted in transit (HTTPS). The database runs in the European Union and is access-controlled: only the operator can reach it, directly or through the backup and reporting tools the operator runs, and our hosting provider can of course reach the infrastructure it runs, as is true of any host. The Apple token used for revocation is stored encrypted with AES-256-GCM. No system is perfectly secure, and we do not claim otherwise.
We treat an unauthorised acquisition or disclosure of identifiable health information as a breach — not only a hack. If one occurs, we will notify each affected person without unreasonable delay and no later than 60 calendar days after we discover it, and we will notify the U.S. Federal Trade Commission, and any state authority or the media, where the law requires it and within the periods that law sets.
Because most accounts reach us through Sign in with Apple and we may hold no usable email address for you, notice may be given the way the rule allows in that situation: prominently in the App and on this website for at least 90 days, together with any other notice the rule requires. The notice will say what happened, what kinds of information were involved, what we are doing about it, what you can do, and how to reach us.
Vercue is for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, email us and we will delete it.
Our servers and database are run for us by Railway in the European Union, backup copies are kept by Cloudflare in the European Union, our operator is in the Republic of Moldova, and the other providers listed above process data in the United States and in other countries where they operate. By using Vercue you understand your information is processed in those places.
Vercue is run from the Republic of Moldova and is offered there, so Moldova’s data protection law (Law 195/2024) applies to what we do. Pavel Movilean is the controller of your personal data. It gives you rights of the same shape as the ones described above — access, correction, deletion, portability, withdrawal of consent, and the right to object to processing based on our legitimate interests — and the same email address is the way to use them.
Under that law we rely on these grounds: running the App you asked for (your account, your log, estimates and targets); your explicit consent, given on the screen before the App asks about your body, for your body and meal data, which is health data, and for each use of that data described on this page; our legitimate interests in keeping the service secure, fixing faults and understanding in aggregate how the App is used; and legal obligations, such as keeping purchase records. Some of the providers above process data outside Moldova, including in the United States, where the protection may not be the same as Moldova’s; for those transfers we rely on the data protection terms those providers offer, and your explicit consent to the processing of your body and meal data is in addition to those terms, not a substitute for them.
If you think we have handled your data badly and we have not put it right, you can complain to the Moldovan data protection authority (CNPDCP), and if you live in the United States, to your state Attorney General.
Under Nevada SB 370 (NRS 603A.400 to 603A.550), Nevada consumers have rights over consumer health data that are similar to those described in our Consumer Health Data Privacy Policy. The categories we collect, the sources, the purposes, who processes the data for us, and the fact that we do not sell consumer health data, are exactly as stated in that policy — it is published separately because Washington law requires a standalone document, not because Nevada is treated differently.
If you are a Nevada consumer you may confirm whether we collect, share or sell your consumer health data, access it, have it deleted, and withdraw your consent to its collection and sharing. Use Settings › Delete account in the App, or email support@vercue.app. We respond within 45 days, extendable once by 45 days where reasonably necessary, and you may appeal a refusal by replying to our decision. If an appeal is denied you may contact the Nevada Attorney General at ag.nv.gov.
Tracking by third parties. No third party collects consumer health data about you over time and across different websites or online services when you use the App or this website.
Reviewing and changing your data. You can review your profile, targets and log in the App, and adjust a meal’s numbers on the result screen before it is saved. To change or remove anything already saved, email support@vercue.app; we will make the change and confirm it to you.
If we change this policy materially, we will update the date at the top and give notice in the App before the change takes effect.
Pavel Movilean — Vercue
Email: support@vercue.app