Skip to content
Fuuud

Guide

How Fuuud keeps your health memory private

Fuuud remembers your allergies and conditions so you never repeat them. Here is exactly what it writes, where it lives, who can read it, and how you take it back.

Last reviewed 7 October 2026

What it writes down

Only things you say about yourself that matter for food: a medical condition, an allergy or intolerance, an explicit “I have no allergies”, a religious or fasting rule, foods you dislike or like, a goal, who you cook for, practical limits such as budget and time, a meal you rejected, and a symptom after eating.

It does not store cravings, small talk, hypotheticals or its own suggestions. Most turns store nothing at all. If you say “don't save that”, nothing from that turn is written, and that rule is enforced in code before the write, not left to the model.

Each fact is one dated line, so a newer fact beats an older one:

2026-10-07 | allergy | groundnuts - hives

Where it is stored

The record lives on Walrus, a decentralised storage network, through Walrus Memory. Each fact is encrypted before it leaves, and the record belongs to a memory account on the Sui blockchain that your Google sign-in creates for you through zkLogin. The account address is yours, not ours.

Who can read it

You, and anything you give a delegate key. A delegate key is a separate key that lets one device or app read and write your record on your behalf, and that can be removed on its own at any time. The web app uses one key per browser, kept in an encrypted cookie in that browser rather than in our database.

When Fuuud answers, it reads the relevant facts and sends them with your message to the AI model that writes the reply. By default that is a model we run; if you add your own key in Settings, your key is used instead.

What our server does hold

  • Connected apps and Telegram. When you connect an AI app or the Telegram bot, it gets its own delegate key. Because those cannot act from your browser, the server keeps that key encrypted at rest so the connection can work. It is a different key from your browser's, and disconnecting it revokes it.
  • Reminders. If you turn on notifications, the server keeps your Telegram chat id or push subscription and the names and times of upcoming meals, in plain form, only until you disconnect.
  • Sign-in. A session cookie. The health record itself is not kept in our database.

Honest limit

Retracting a fact writes a record that outranks it, so nothing recalls it again. It is not deletion: the encrypted entry stays on Walrus until its storage period expires.

How to take it back

  1. Forget a fact. Retract it from Settings, or ask the agent. It will not be recalled again.
  2. Remove a device. In Settings, the delegate keys list shows each one. Removing a key is signed by your wallet and takes effect on the account.
  3. Disconnect an app. Settings lists connected apps and the Telegram chat. Disconnecting stops it at once and discards the key we held.
  4. Stop saving. Say “don't save that” at any time.

Using it from other apps

The same record can be used from Claude, ChatGPT, Cursor and other apps through a connector you approve once. See how to connect Fuuud to your AI app.

Fuuud gives food guidance and is not medical advice. See the privacy policy for the full list of services involved.

Keep reading