Privacy policy
We collect as little as we can, keep your meals on your iPhone, and never sell your data or show you ads.
Who we are
Portion is made by TripleFour. TripleFour isn’t a registered company yet — until it is, Portion is run by an individual developer based in the United Arab Emirates. Under the UAE’s Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) that person is the controller of your personal data: the one who decides what is collected and why, and the one answerable for it. You can reach us through the support form in Help & support.
What we collect, why, and on what basis
Your account
When you sign in with Apple or Google, we receive an account ID and an email address. With Apple you can hide your email, and then we only ever see a relay address. If you choose to share it, we also receive your name. We use these to know it’s you, to run Portion Free, and to reply when you write to us. Sign-in is handled by Google Firebase Authentication. Why we may: we need it to provide the service you asked for.
Your plan, which is health data
The name you gave, if any, your age, sex, height, weight, activity level, goal and pace, and the calorie and nutrient targets worked out from them. We save these to your account so that signing in on a new iPhone brings your plan back.
Age, sex, weight and what we derive from them say something about your health, and UAE law treats health data as sensitive personal data. We use it only to work out your targets and save it to your account so your plan can return on a new iPhone. We never use it for advertising, never sell it, and never send it to Google Gemini. Why we may: your explicit consent, given when you set up your plan, which you can withdraw by deleting your account.
Your meals
The photos and descriptions you log, their estimates, and when you logged them. These stay on your iPhone and Apple Watch — not on our servers. If your iPhone backs up to iCloud, Apple keeps a copy under its own terms. A backup file you make in Profile is yours: it goes only where you save or send it, and we never see it.
Pregnancy and breastfeeding
If you tell Portion you're pregnant or breastfeeding, it keeps your due date or your baby's birthday — and your weight before pregnancy — on your iPhone only. It is used to work out your targets and is never sent to our servers, to Google or to Gemini, and never included in a CSV export; it goes into a backup file only if you make one. The targets it produces are saved with your plan like any other target, but the reason for them is not. You can change or remove it any time in Profile.
What goes to Google Gemini
Each time you ask for an estimate, the photo you took or the words you typed are sent to Google Gemini, Google’s AI service. Portion does not add your name, email, weight, targets or health profile to the request; anything you choose to show in the photo or write in the description is part of what Google receives. Nothing is sent until you agree on the “Before your first scan” screen, and you can stop at any time in Profile → Your data → AI & your data. Why we may: your consent, and only for as long as it stands.
- For estimates, requests go through Google’s Agent Platform (formerly Vertex AI) on our Google Cloud account, which we pay for. Google says it does not use this content to train or fine-tune its models without our permission, and we have not given it. Google may temporarily cache content and may log prompts and responses to detect abuse under its Google Cloud terms.
Apple Health
If you allow it, Portion reads your weight from Apple Health to follow your trend. Portion only ever reads: it asks Apple for read access and for nothing else, so it cannot add to or change anything in Health. That data stays on your iPhone, is never sent to Gemini, and is never used for advertising or sold. Why we may: the permission you grant in Apple’s own prompt. If you import your history from Apple Health, Portion also reads the daily calories, protein, carbs and fat other apps saved there, once, and keeps them as meals on your iPhone.
History you import
If you import a file exported from another app, such as MacroFactor or Cronometer, Portion reads it on your iPhone and keeps its meals and weigh-ins there, like anything you log. The file is never sent to our servers, to Google or to Gemini.
Feedback, the Pro waitlist, and leaving
- Feedback and support: your message, any screenshot you attach and — unless you switch it off — your app version, iPhone model and language. Feedback sent in the app is linked to your account so we can reply. The web support form instead asks for your email and optionally your name. Please do not put health information, meal photos or passwords in the web form.
- Portion Pro waitlist: that you joined, your account email so we can tell you when Pro is ready, and the monthly price you said felt fair, if you answered.
- Deleting your account: the reason you picked, if any, kept without anything that identifies you.
Keeping Portion Free fair
To protect Portion Free from abuse, we use Firebase App Check with Apple’s App Attest, which confirms that requests come from the real Portion app on a real device. Your daily count of free estimates is kept on your iPhone.
How far people get through setup
We count how far people get through setup — the screen reached, the plan chosen, and how setup ended — using Google Analytics for Firebase. It carries no meals, no name, no email and none of your measurements, it is not used for advertising, and it is not joined to an advertising identifier. Alongside it, Google’s SDK collects standard app information: the app version, device model, language, country, and a random identifier for this installation.
You can turn this off. Profile → Your data → AI & your data → Usage analytics stops the collection on your iPhone, not just the sending, and it stays off until you turn it back on. Nothing else in Portion changes.
What we don’t do
- We don’t sell your data.
- We don’t show ads, and we don’t share data with advertisers or data brokers.
- We don’t track you across other companies’ apps or websites.
- We don’t use your health information for marketing.
- We don’t make any decision about you automatically that has a legal or similarly significant effect.
Who we share it with
Only the services that run Portion, and only for that purpose:
- Google — Firebase Authentication, Cloud Firestore, Firebase AI Logic, App Check, Google Analytics for Firebase, and Gemini.
- Apple — Sign in with Apple, App Attest, and Apple Health, which stays on your device.
- Resend — delivery of messages submitted through the web support form.
We may also disclose information if the law requires it.
Where it’s stored, and when it leaves the UAE
- Account sign-in data is processed by Firebase Authentication in the United States.
- Your saved plan, in-app feedback and Pro waitlist entry are stored in Google Cloud’s Dammam, Saudi Arabia region — the closest region our provider offers, as Google Cloud has no region inside the UAE.
- Portion Free estimates use Google’s global Agent Platform location, so the photo or words in a request may be processed outside the UAE. Google Analytics and App Check also use global infrastructure.
- Web support messages are delivered by Resend, a United States provider whose subprocessors are mainly in the United States.
- Your saved meals, photos and weigh-ins stay on your device. Only the photo or words you submit for an estimate leave it, as explained above.
These services involve transfers outside the UAE. UAE law sets conditions for overseas transfers, and separate rules can apply to health information. We use the providers’ contractual data-protection terms and ask for consent where consent is the basis for processing. This policy does not ask you to give up any legal right. If you do not want your data processed outside the UAE, do not create an account, request an estimate or use the web support form.
How long we keep it
- Account and plan: until you delete your account.
- Feedback and support messages: up to 24 months, or until you delete your account where the message is linked to it.
- Waitlist: until Portion Pro launches, or until you delete your account.
- What’s sent to Gemini: Google may cache it in memory for up to 24 hours by default and may retain logs for abuse monitoring under its terms.
- Analytics and service-security data: under Google’s published retention periods and the controls set for our project.
When you delete your account, we request deletion of the active account and its linked database records straight away. The app also removes its local data and asks the watch to clear its copy. Google says deleted Firebase Authentication data is removed from live and backup systems within 180 days; other deleted Google Cloud customer data may also take up to 180 days to disappear from backup systems. Those residual copies are not available to us for ordinary use or recovery.
Your rights
UAE law gives you these, and using them costs nothing:
- See what we hold — a copy of your personal data, and how it is being processed.
- Correct it — have anything wrong put right.
- Delete it — Profile → Account → Delete account does this in one go, or write to us.
- Take it with you — your data in a structured, machine-readable form.
- Restrict or object — ask us to stop or limit a particular use, including withdrawing your consent to AI estimates at any time in Profile → Your data → AI & your data.
- Complain — to us first, and to the UAE Data Office if we don’t put it right.
In the app: Profile → Your data → Export as CSV gives you your log, and Profile → Account → Delete account deletes the personal data linked to your account from active systems. For anything else, use the support form in Help & support and we will answer within 30 days. Depending on where you live — for example under the EU or UK GDPR — you may have further rights, including complaining to your local data protection authority.
Children
Portion is for adults aged 18 and over, which is where its age field starts. Calorie tracking isn’t right for everyone: if you have or have had an eating disorder, talk to a doctor before using Portion.
Keeping it safe
Everything between the app and our services travels encrypted, and Google encrypts the data it stores. Rules on the server stop one account from reading another’s, and access to the database is limited to the accounts that need it. If a breach happens, we will notify the UAE Data Office as required and notify you where the breach could prejudice the privacy, confidentiality or security of your data.
Changes
When this policy changes we’ll update the date at the top, and tell you in the app before any change that matters takes effect.
Contact
Questions, requests or complaints about your data: use the support form at triplefour.ae/portion/support.