Privacy policy

What we collect

• Your sign-in. You sign in with Google. We receive the identifier needed to create your Sui address through zkLogin; we do not receive your Google password.
• What you tell the agent. Your messages are processed to answer you. Facts about your health and food (conditions, allergies, dislikes, goals) that you assert about yourself are saved to your memory record.
• Reminder details, only if you turn on notifications: your Telegram chat id or browser push subscription, and the names and times of upcoming meals.
• Technical data such as server logs with request times and errors, kept to run and fix the service.

Where your health record lives

Saved facts are encrypted and stored on Walrus through Walrus Memory, in a memory account owned by your Sui address. We do not keep a copy of the record in our own database. How this works, and how to revoke access, is explained in how Fuuud keeps your health memory private.

Who else processes data

• Voice. If you dictate a message or send the Telegram bot a voice note, the recording is sent to Groq to be turned into text. We do not store the audio. On the website the text goes into your message box for you to check before you send it; on Telegram the bot replies with what it heard first.
• Spoken replies. On the website, replies are read aloud with your browser's own voice on your device if you tap Listen or turn on read-aloud; we run nothing for that, although some browsers process their built-in voices in the cloud. On Telegram, if you send /voice on, the text of each reply is sent to Groq to turn it into a voice note, and the audio is not kept. It is off until you turn it on.
• An AI model provider receives your messages and the facts recalled for that turn to write a reply. By default this is a provider we configure; if you add your own key in Settings, that key and provider are used.
• Walrus and Sui store the encrypted record and the account and key registry. Blockchain data is public by design; the health facts themselves are encrypted.
• Enoki and Google provide sign-in and the wallet created for you.
• Upstash stores short-lived sign-in and connection state, connection keys sealed at rest, reminder details if you enable them, and, for the Telegram chat only, your last reply for 15 minutes so the next message has context.
• Telegram and browser push services deliver reminders and chat messages if you connect them.
• Our host runs the website and receives standard request logs.
• AI apps you connect (such as Claude or ChatGPT) receive what they recall, under their own terms.

Your choices

• Say “don't save that” and nothing from that turn is stored.
• Retract any fact from Settings. It is no longer recalled. The encrypted entry remains on Walrus until its storage period ends.
• Disconnect an app or Telegram, or remove a device key, in Settings. Disconnecting deletes the connection key we held and your queued reminders.
• Ask us to delete reminder data and logs we hold about you using the contact below.

Children and health advice

Fuuud is not directed at children. It gives food guidance, not medical advice, and is not a substitute for a clinician.

Changes

If this policy changes in a way that matters, we will update the date above and say so in the app.

Contact: open an issue at github.com/ezedike-evan/fuuud.