Privacy policy

Updated 6 November 2026.

Bitepixa is published by Urmia Works, operated by Urmia Holding AS in Norway. Contact [email protected] for privacy questions.

Photos and your diary

Bitepixa processes food photos and label images on your device. It does not upload your photos, food notes, diary, weight records or Health Connect records to an AI service or advertising service. Saved photo meals include a small thumbnail. Diary entries, drafts, recipes, settings and imported activity totals are stored on the device. The app does not require a Bitepixa account or operate a server-side diary.

Permissions and optional connections

The camera opens only when you choose a photo. The system file picker gives access to files you select. On-device dictation uses the phone's available recognition model. If you choose system speech input, your speech provider may send audio to its own servers under its terms and privacy policy; Bitepixa does not operate a transcription server. Microphone permission is requested for dictation. Notification permission is optional for reminders.

When you choose to import activity on supported Android versions, Health Connect supplies daily steps and exercise totals for the selected day. They are used for the local activity diary, not advertising or AI training. You can revoke access in Android's Health Connect settings.

Optional barcode lookup sends the barcode to Open Food Facts. Optional model downloads connect to Hugging Face and its delivery infrastructure. These providers receive connection information such as your IP address. Model downloads do not include meal photos or diary data.

Advertising and SDK diagnostics

The free app uses Google AdMob for banner and full-page native ads. Depending on your choices and region, Google's Mobile Ads SDK may collect and share IP-derived approximate location, app and ad interactions, diagnostic information, and device or account identifiers for advertising, analytics and fraud prevention. Bitepixa does not supply food photos, diary entries, weight records or Health Connect data as advertising targeting data. Ad-free subscribers do not receive app advertisements; Google's app and Play services may still process their own operational data.

Google ML Kit is used for on-device label text recognition. It can send device and application information, installation identifiers, API configuration, input/output sizes, performance and error information to Google for diagnostics and usage analytics. Photo contents and recognized text are processed on the device. See ML Kit's terms and privacy information, ML Kit's data disclosure, Mobile Ads data disclosure, and Google's privacy policy.

Use Ad privacy options in the app, where available, and Android's advertising controls to review or change advertising choices. Google consent messages are used where required. SDK data is transmitted over encrypted connections. Provider retention and rights processes are governed by the linked provider policies; deleting your local diary does not itself delete provider-held advertising records.

Purchases

Google Play handles subscription checkout and payment details. Bitepixa reads the purchase status and signed purchase record to verify ad-free access and acknowledges confirmed purchases through Google Play. It does not receive payment card details. A verified ad-free entitlement may be cached locally for up to seven days between successful online checks. Manage or cancel subscriptions in Google Play.

Storage, deletion and your choices

Delete individual meals in the diary, or clear app storage or uninstall to remove app-local records. Back up your diary before uninstalling if you want to keep it. Backups and CSV exports contain the information you choose to export, including thumbnails in diary backups, and remain in your selected storage until you delete them separately. Your file or gallery provider may have its own backup or cloud synchronization settings. Android automatic backup of app-private data is disabled by Bitepixa. Revoking a permission does not automatically delete previously imported local records.

Depending on applicable law, you may have rights to access, correct, delete or receive your personal information, object to or restrict processing, withdraw consent, and complain to your local data protection authority. Contact support about information held by Urmia Works. We do not have a server-side copy of your local diary. Advertising and other provider requests can also be made through those providers' privacy tools.

Support and this website

If you contact support, we receive the information you send and use it to respond and address your request. Do not send private meal photos or health information unless necessary. This website is hosted on Cloudflare Pages. It contains no site-authored advertising or analytics scripts. Hosting processes connection and request information to deliver and secure the pages; see Cloudflare's privacy policy.

Changes

Changes will be posted here with an updated date. Material changes to app data practices will also be reflected in app disclosures and privacy controls.