neato

Neato is a food, exercise and body log. Inside the app, your signed-in life is not tracked: no analytics scripts run once you're in. Nothing you log is sold or shared unless you explicitly turn on the clearly-labeled sharing choice described below — and some things are never shared at all, no matter what: anything read from Apple Health, and body photos.

Analytics on our public pages

Our landing page and the signed-out welcome screen use Google Analytics to measure visits, where they come from, and whether an ad led to someone trying Neato. That measurement ends at the door: the analytics script does not load for signed-in sessions, and nothing you log — meals, weights, photos, location — is ever sent to Google.

Advertising

Neato shows one ad card in the log for accounts that aren’t on Plus — on the web, and in the iPhone app from version 2.12. The ads come from Google. On the web, Google chooses what to show from its own signals — the page you’re on and your own Google ad settings; in the app the ads are never personalized. Either way Neato sends Google nothing about you or your log: no meals, weights, photos, health data or location, and nothing you record is ever used to target an ad. Neato Plus removes the ads everywhere.

Analytics on the web

Neato on the web uses Google Analytics to count visits and see which parts of the app get used. It never sees anything you log — no meals, weights, photos, health data or location. In the EEA, the UK and Switzerland it stays off until you say yes to the consent message. The iPhone app runs no analytics.

What we store

Member accounts are invite-only and hold your name — no password, and no email address unless you subscribe to Neato Plus (see Payments below). Free accounts hold no name at all. Sign-in uses passkeys or per-device keys, which our server stores only in hashed form.

We also keep a handful of account milestones — how a free account arrived (an ad click or a plain visit), whether the sharing choice was turned on or declined, first AI use, app install, and a last-active date. They exist so we can run and improve the service, never leave our server, and are deleted with the account.

The things you log — meals and their nutrition, exercise sessions, weigh-ins, body-fat and belly-size readings, goals, and coach summaries — are stored on our server so that all of your devices show the same log. Each account's data is isolated to that account, and every connection uses HTTPS.

Payments and Neato Plus

Neato Plus payments are processed by Stripe. Your card details go to Stripe directly and never touch our servers. We keep the email address you give Stripe at checkout — the only email Neato ever holds — so we can answer support questions about your subscription, reach you about billing, and send any legally required notices. It is never part of the AI sharing exchange, is never used for marketing without your consent, and is deleted with your account.

On the iOS app, Neato Plus can also be purchased through Apple's App Store. Apple processes those payments as the merchant of record: we receive no card details and no email address — Apple tells us only that the subscription exists, so we can unlock Plus on your account. Cancellation and refunds for App Store purchases are handled by Apple (Manage subscription in the app, or Settings → Subscriptions on your device).

Photos

Meal photos are part of your log: they are stored with it on our server, readable only by your account, so that all of your devices can show them. Body photos are different — they never leave your device. One is read over an encrypted connection to produce the body-fat estimate you asked for, is not stored by us, and is kept afterward only if you opt in — and even then, only on the device that took it.

AI and the sharing exchange

Neato's free tier is the full manual app — logging, budgets, dashboards and sync — sharing nothing. AI features are optional and funded differently: turning them on starts your Preview — a daily allowance of AI features — and you agree to share what you log — meal photos, food descriptions, portions, nutrition figures, and approximate location if you have Location on — in anonymized form, to improve Neato, its AI, and aggregate insights. This never includes your name, anything read from Apple Health, or your device identity — and body photos never leave your device. It applies to Preview and Neato Plus accounts alike — Plus removes usage limits, not the sharing choice. Turn sharing off in Settings at any time: AI features stop, sharing stops going forward, and everything you've logged keeps working manually. Invited member accounts are different: their AI is included and nothing is shared.

AI estimates and food data

Estimates are produced by leading third-party AI providers through our own relay; we choose the providers and may change them as needed to keep quality, speed, and reliability high. Packaged foods may also be looked up in the USDA's public FoodData Central database. Whichever provider answers, the terms are the same: requests carry the food description or photo — never your name or account identity — the response is used to produce your estimate and nothing more, and we only use providers that do not train their models on this data.

Apple Health (iOS app)

The iOS app can connect to Apple Health — the app offers the connection when you first set it up, and you can turn it on or off any time in Settings. Nothing is read or written until iOS asks for your permission, separately for each kind of data. When enabled, Neato:

reads your daily Active Energy total and workout summaries (type, duration, calories), which then appear in your log and sync across your devices like anything you typed;
reads body measurements — weight, body fat, waist and height — from the last 90 days, plus your biological sex and birth date, to fill your charts and personalize your calorie targets;
writes each logged meal's calories, protein, carbs and fat into Health, updates them if you edit the meal, and removes them if you delete it.

Health data is used only to show and improve your own numbers in the app. It is never used for advertising or marketing, and never shared with third parties. You can turn the connection off at any time in the app or in iOS Settings → Privacy & Security → Health.

Deleting your data

Deleting an entry removes it from our server and from your devices — a photo goes with its entry. Abandoned accounts don't linger: accounts that never logged anything are removed after 90 days of inactivity, and accounts with a diary — entries, photos and passkeys included — are removed after 12 months of inactivity. Active subscriptions and member accounts are never removed this way. To delete your whole account, use Settings → Delete account in the app — your account, diary, photos and sync data are removed from our systems immediately — or ask us by email. Nightly backup copies exist so that mistakes can be undone; they age out within 30 days.

Children

Neato is for people aged 18 and over, and is not directed at anyone younger. We don’t knowingly collect data from anyone under 18; if you believe someone under 18 has an account, email us and we’ll delete it.

Contact

Questions or deletion requests: privacy@neatohealth.com.

If this policy changes, the date below will change with it.

← Done