Privacy policy

Last updated 14 September 2026

Setpoint is operated by Kyne Myers in Australia. This policy explains what the app collects, why, where it goes, how long it is kept, and how to get it back or delete it.

Setpoint provides general nutrition and training information. It is not medical advice, it does not diagnose, treat or prevent any condition, and it is not a substitute for a doctor or an accredited dietitian.

Health information and your consent

Most of what Setpoint holds is health information, which Australian law treats as sensitive and protects more strictly than ordinary personal information.

We collect it only with your consent, and only what the app needs to work. Providing your weight, height, age and sex is how the calorie and macro targets are calculated — without them the app cannot produce a target at all. Everything beyond that, including connecting a wearable or logging food by photo, is optional and off until you turn it on.

You can withdraw consent at any time by disconnecting Health Connect, or by deleting your account.

What we collect

AccountYour email address, and a name if you choose to give one. Passwords are stored only as a salted hash by our authentication provider and are never visible to us.
Body measurementsDate of birth, sex, height, weight history, goal weight, activity level, and optionally body fat percentage. These are the inputs to the calorie and macro formulas.
Food and drink logWhat you record eating and drinking, including quantities, macros, meal times, and — for alcoholic drinks — standard drinks.
Dietary requirementsAny dietary pattern you select (for example vegetarian, halal, gluten free) and any allergies or dislikes you type in, so meal plans can work around them.
TrainingPrograms generated for you and the sessions you mark complete.
Coach messagesQuestions you ask the in-app coach and the replies, stored so the conversation has history. You can clear it at any time.
Wearable data (optional)If you connect Health Connect, Setpoint reads steps, distance, floors climbed, active and total calories burned, exercise sessions, sleep including its stages, heart rate, resting heart rate, heart rate variability, blood oxygen, and respiratory rate. See the Health Connect section below.
Meal photos (optional)If you log a meal by photograph, the image is resized on your device and sent to our AI provider to identify the food. Resizing re-encodes the picture, which strips embedded metadata including any GPS location your camera recorded. That image is not kept — only the food items you confirm are saved. Our AI provider deletes it from its systems within 30 days and does not use it to train models.
Photos you attach to a meal (optional)Separately, you can attach a photograph to an entry in your diary to keep with it. Unlike the image used to identify food, this one is stored, because its whole purpose is to still be there tomorrow. It is private to you, and removing the photo or deleting the entry deletes it.
Photos you send in a group chat (optional)A photograph sent in a group chat is resized on your device and stored so the other members of that group can see it. It is visible to them and to nobody else. Deleting the message deletes the photograph, and so does deleting the group or your account.
Voice notes you send in a group chat (optional)You can record a voice note in a group chat, up to two minutes long. Nothing is recorded until you press the microphone button, and nothing is sent until you press send — a recording you cancel never leaves your phone. What you do send is stored so the other members of that group can hear it. It is visible to them and to nobody else, it is never transcribed, and it is never used to train anything. Deleting the message deletes the recording, and so does deleting the group or your account.
MicrophoneUsed to record a voice note in a group chat, and to log a meal by saying what you ate. Speech you use to log a meal is turned into text on your device and the recording is not stored; a voice note is stored, because its whole purpose is for somebody else to hear it.
Group chat notifications (optional)If you turn notifications on, we store a delivery address for each phone you sign in on, so a message sent to your group can reach it. The notification itself contains the group name, the sender's first name, and the first part of what they wrote — or simply [photo] or [voice note], which carry no words at all. It is delivered by Expo and then by Google or Apple, so it passes through them on its way to your phone. You are never notified about your own messages, or about anyone you have blocked. You can mute one group from inside its chat, or turn all of it off in Settings, and turning it off removes the delivery address. So does signing out, so a phone you have signed out of stops hearing from your groups — which matters on a shared or handed-on device.
CameraUsed to scan barcodes and to take meal photos. Barcode frames are processed on your device and never leave it.
Support messagesIf you contact support from inside the app, we store your message, your email address, and basic diagnostics — your platform, operating system version, app version and update version — so the problem can be reproduced. No location, contacts, or food log data is attached.
Website: iPhone waiting list (optional)If you ask to be told when the iPhone version is released, we store the email address you enter and nothing else. It is used for exactly one message, on release, and is never used for marketing, never sold and never shared. The list cannot be read through our public interface at all. Ask us and we will remove you immediately.
Website: reviews (optional)If you submit a review, we store the first name you enter, the text you write and the star rating. This is published on the website if it is approved, so treat it as public and do not include anything you would not want shown. Nothing appears until it is checked. Ask us and we will take yours down.

There is no advertising, no third-party analytics, no tracking across other apps or websites, and no profile built about you for any purpose other than running the app.

How it is collected and held

Almost everything is collected directly from you, as you enter it. Wearable data is collected from Health Connect on your device, only when you tap sync, and only after you grant permission. Food and barcode information is retrieved from public food databases.

Data is held in a managed Postgres database hosted in Sydney, Australia. Access is enforced by row-level security, which means the database itself rejects any attempt to read another person's data — the protection does not depend on the app behaving correctly.

Why we collect it

To calculate your calorie and macro targets; to record and total what you eat; to generate diet, meal and training plans; to answer your questions in the coach; to show your weight trend and wearable data over time; and to reply to support requests.

We do not use your information for any secondary purpose. It is not used to build advertising profiles, and it is not used to train AI models — our AI provider does not train on data submitted through its API, and deletes API inputs and outputs within 30 days.

Who it is disclosed to, and where they are

Setpoint uses the following service providers. Some are located outside Australia, which means your information is disclosed overseas.

Supabase — AustraliaDatabase, authentication and server functions. Your data is stored in Sydney.
Anthropic — United StatesPowers the AI features. When you use the coach, generate a diet, meal or training plan, or log a meal by photograph, the relevant information is sent to Anthropic to produce a response. For the coach this includes your targets and recent messages; for meal plans your targets and dietary requirements; for photo logging the image itself. Your name, email address and account identifier are never sent.
Open Food Facts — FranceReceives your food search terms and scanned barcodes so results can be returned. No account information is sent. It also receives packaged products you have entered yourself, in the circumstances described under “Foods you enter yourself” below.
USDA FoodData Central — United StatesReceives your food search terms. No account information is sent.
Resend — United States and JapanSends account emails, password resets and support notifications. Receives your email address and the content of support messages you send.
Cloudflare — United StatesProvides the domain and forwards email sent to our support address.
Expo — United StatesHosts the web version, delivers app updates, and delivers group chat notifications. A notification passes through Expo and then Google or Apple, and contains the group name, the sender’s first name and the first part of the message.
RevenueCat — United StatesManages subscriptions. Receives your account identifier and the details of any purchase, trial or renewal, so the app knows what you have paid for. It never receives your name, email address, food log, weight or health data.
Google Play — United StatesTakes the payment. Setpoint never sees your card details at any point; the card, the charge and the refund are all Google's, and a subscription is cancelled from your Google Play account rather than from the app.

Your information is never sold, rented, or traded. It is never disclosed to advertising platforms, data brokers or information resellers, never used to serve advertising, and never used to assess credit-worthiness or for lending. Data read from Health Connect is never transferred to any third party other than as described above.

Foods you enter yourself

When a barcode finds nothing, you can enter the product yourself. What happens to that entry depends on one thing: whether it has a barcode.

Foods without a barcodeStay yours. A food with no barcode is a recipe or a home-made meal, and it is never shown to another person, never sent anywhere, and never leaves your account.
Packaged products with a barcodeMay be shared, but never on your word alone. The figures you enter are held privately until a second person independently enters figures that agree with yours. Only then does the product become visible to other Setpoint users, and only then may it be sent to Open Food Facts so that it exists for everybody. What is sent is the barcode, the product name, the brand and the nutrition figures. Nothing identifies you: no name, no account, and no record of who scanned what.

Barcodes that find nothing are recorded so the gaps in the food database can be filled. That record is the barcode and a count, with no account attached to it, so it can say which products are missing and cannot say who was shopping.

Where the food data comes from

Two of these are named above because your searches are sent to them. The third is not: the Australian Food Composition Database is held inside Setpoint, so nothing about you is sent anywhere when it is used. It is credited here because its licence requires it, and because you are entitled to know whose numbers you are eating by.

Australian Food Composition DatabaseRelease 3, published by Food Standards Australia New Zealand under CC BY 4.0. The source of the generic Australian foods in search, and of every micronutrient the app shows. Nothing is sent to FSANZ.
Open Food FactsBranded and packaged products, made available under the Open Database Licence (ODbL).
USDA FoodData CentralGeneric and branded American foods. Public domain.

Health Connect

Setpoint reads from Health Connect only. It never writes to it, and never modifies or deletes anything another app has recorded.

The data is used to show your activity, sleep and vitals alongside what you eat. It is deliberately not used to change your calorie target — wearables overestimate calorie burn substantially, and your target already accounts for your activity level.

You can revoke access at any time in Health Connect, on your phone, without opening Setpoint. If you do, the app keeps working and falls back to manual entry. Wearable data already synced stays in your account until you delete it or delete your account.

Health Connect data is never used for advertising, never sold or transferred to data brokers, and never used for lending or credit decisions.

Who can see your information

Setpoint is operated by Kyne Myers, working alone. There are no employees and no contractors, so one person administers the database and can therefore access the records it holds, including your food and drink log, your weight history, your plans and your coach conversations.

That access is used only where there is a reason to: investigating a problem you have reported, fixing a fault, or maintaining the service. Your information is not read out of curiosity, is not browsed, is not used to build a profile of you, and is never sold or given to anyone for marketing.

No other user can see your information unless you have joined a group and chosen to share, and then only the figures listed under Groups below. Everything else stays blocked at the database itself by row-level security, not by the app being careful — so a bug in the app cannot expose one person's records to another.

Groups

A group is a small number of people — at most twenty — who join using a code one of them shares. Groups are private. They are never listed, never searchable and never suggested to anyone, and there is no public leaderboard.

If you join one, the other members of that group can see: your first name only, how many sessions you trained, the total weight you moved, how many days you logged food, and how many trophies you have earned. Your surname and your email address are not shown, and your first name is separated from the rest of your name on the server so the rest of it is never sent.

Your step count is shown only if you switch it on, separately, in each group you belong to. It is off until you do. Steps are read from Apple Health or Health Connect and are health information, so sharing them is never assumed from anything else you have agreed to.

Your weight, your body fat, your measurements, what you ate or drank, your calorie and macro targets, how close you came to them, and your coach conversations are never shown to another member, in any group, and there is no setting that would. Trophies earned for calorie, protein or fibre targets, and for weighing in, are also never shown.

Groups have a chat. Messages, photographs and voice notes you send are visible to the other members of that group and are stored until you or the group owner delete them, or the group is deleted. Do not put anything in a group chat that you would not want the other members to keep.

You can block any member from a message. Blocking is immediate, works in both directions and applies to every group you share — neither of you sees the other again — and you can undo it in Settings. You can also report a message to the group owner, and to us as well if the owner cannot help or is the person you are reporting. A report keeps a copy of the message, so that deleting it does not erase the evidence. For a photograph or a voice note the report keeps the file itself, because there are no words to quote and an owner cannot act on a description.

Leaving a group removes your figures from it immediately. Deleting your account removes you from every group you were in.

How long it is kept

Your information is retained while your account exists, so that your history and trends remain available to you. Deleting your account removes your profile, weight history, food and drink log, wearable data, training and meal plans, coach messages and support tickets permanently and immediately.

Encrypted database backups may retain a copy for up to 30 days before being overwritten on their normal rotation. Photographs you attached to a meal, and photographs and voice notes you sent in a group chat, are deleted with the thing they belong to — the entry, the message, the group, or the account.

The iPhone waiting list and website reviews are collected from the website rather than from an account, so deleting an account does not reach them — there is nothing linking the two. Email us and we will delete either, or both, immediately.

Accessing, correcting and deleting your information

Most of your information can be viewed and corrected directly in the app at any time — your measurements in Settings, your food log on the Food tab, your plans on the Diet tab.

To delete everything: Settings → Privacy → Delete my account. It is immediate and cannot be undone. You do not need to ask anyone.

To request a copy of everything held about you, or a correction you cannot make yourself, email [email protected]. We will respond within 30 days. There is no charge.

Complaints

If you believe your privacy has been mishandled, email [email protected] with the details. We will acknowledge within 5 business days, investigate, and respond in writing within 30 days explaining what we found and what we will do about it.

If you are not satisfied with that response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, or by phone on 1300 363 992. You do not need our permission to do so.

Security and data breaches

Connections are encrypted in transit using HTTPS. Data is encrypted at rest by our hosting provider. Access to your records is enforced at the database level by row-level security. Server-side credentials are never included in the app.

No system is perfectly secure. If a breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

Children

Setpoint is intended for adults. It is not designed for or directed at children, and accounts cannot be created with a date of birth indicating an age under 16. Calorie tracking is not appropriate for children and adolescents without professional supervision. If you believe a child has created an account, email [email protected] and it will be deleted.

Alcohol logging is unavailable to anyone under 18, based on the date of birth given when the account was created.

Changes to this policy

If this policy changes materially you will be told in the app before the change takes effect. The date at the top always reflects the current version.

Contact

Kyne Myers

[email protected]

Australia