This page gives an overview of how we handle the information used within Pondera, how you can control your data and how to request the deletion of your account. Review the types of data, their uses and the options available to exercise your privacy rights.
Last updated: 2026-10
At Pondera we value your privacy and aim to handle your information responsibly, transparently and securely.
This Privacy Policy explains what data Pondera Health collects, how we use it, who we share it with, where it is stored, what measures we apply to protect it and what options you have regarding your account and your data.
Account data: name, email address and sign-in method (email and password, Google or Apple).
Data of the profiles you create: name, birth date or age, sex, height, weight, activity level and profile picture.
Nutrition and progress data you record: calorie, macronutrient and nutrient goals, food diary entries, custom foods, weight and body composition entries and progress photos.
Meal photos you send for analysis and conversations with the Pondi assistant, when you use those features.
The profiles you share or link with other accounts and the accounts they are shared with.
Purchase and subscription information: plan, status and store of purchase. We do not receive your card or payment method details.
Your device's push notification token, if you allow notifications.
The bug reports you send us (description, contact email, screen and device details) and technical device information, such as app version, build, platform, device model and data related to errors or performance.
Pondera Health does not integrate with health platforms or external devices: health data comes only from what you record in the app.
The information is used to provide the core features of Pondera Health: food diary, barcode food lookup, nutrition goals and targets, progress tracking, multiple and shared profiles, diary PDF export, reminders and management of your subscription.
It may also be used to resolve technical issues, respond to support requests and improve the stability, performance and quality of the service.
We do not use your health and nutrition data for advertising and we do not sell it.
Meal-photo analysis: when you take or choose a photo to analyze, the photo and the necessary context are sent to the OpenAI API to estimate the foods and their nutrients. You can review and correct the result before saving it to the diary.
Pondi assistant: when it is available and you write to it, your messages and the profile and diary data needed to answer you are sent to the OpenAI API. The conversation is saved in your account to give the assistant continuity.
OpenAI processes this data to provide the feature under its API data terms. These features are only used when you start them; the rest of the app works without them.
We do not sell your personal information or share it arbitrarily.
Shared profiles: if you share or link a profile with another account, that account can view or record data on that profile according to the permissions you grant, and may be notified when data is recorded on it. You can stop sharing at any time from the app.
Beyond the profiles you share and the service providers in the next section, we only share information when there is an applicable legal obligation.
We work with the following providers, which process data on our behalf and only for the stated purpose:
• DigitalOcean: hosting of our servers, database and files (San Francisco data center, United States).
• OpenAI: meal-photo analysis and the Pondi assistant, only when you use those features. It receives the photo or your messages together with the profile and diary context needed to generate the answer, and processes them to provide the feature under its API data terms.
• RevenueCat: subscription management. It receives an identifier of your account and the status of your purchases; it does not receive health data or card details.
• Apple and Google: Sign in with Apple or Google, if you choose those methods, and billing of subscriptions through the App Store or Google Play. Payment details are handled directly by the store; we do not receive them.
• Google Firebase Cloud Messaging: delivery of push notifications. It receives your device’s notification token and the text of each notification.
• Resend: delivery of transactional email (welcome, account and security). It receives your email address, your name and the content of the message.
• Open Food Facts: food lookup by barcode. Only the scanned barcode is sent, from our servers; no account data is sent.
• Google Analytics: website usage statistics, only if you accept analytics cookies (see the cookies section). It is not used for your account data.
These providers may not use your information for their own purposes. Beyond them, we only share information when required by law or at your express direction.
Your data is stored on DigitalOcean servers located in the United States (San Francisco region). If you use Pondera from another country, your information is transferred to and processed in the United States.
Some of the listed service providers may process data in other countries to perform their function. In every case we limit the information they receive to what that function needs.
We apply reasonable measures to protect information against unauthorized access, alteration, loss or misuse, including encryption in transit and per-account access control.
However, no system is completely infallible, so absolute security cannot be guaranteed in every scenario.
If a security breach affects health data or other personal information, we will notify affected users and the relevant authorities on the terms and timelines required by applicable law, including the U.S. Federal Trade Commission's (FTC) Health Breach Notification Rule.
We keep information while your account exists, because your diary, goals and progress depend on the accumulated history. Data you delete within the app is deleted at that moment.
Deleting your account deletes its profiles, entries, photos, conversations and reports. Infrastructure backups are renewed periodically, so deleted data may remain in them for a limited time.
If you allow notifications, we store your device's notification token to send you reminders and alerts, such as activity on profiles shared with you. You can turn them off in the app's or the device's notification settings; the token is deleted when you delete your account.
We also send you transactional email related to your account, such as the welcome email. We do not send third-party advertising email.
You can view, update and correct your account and profile data from within the app, delete entries and photos, and stop sharing profiles at any time.
You can also email soporte [at] ponderahealth [dot] com to request a copy of your data or help with your information or privacy.
You can delete your account and the associated data directly from the app at any time.
To start the process, open the app and go to: Profile -> Privacy & Security -> Delete account.
As a security measure, you will need to confirm your identity before the deletion is completed.
If your account was created with email and password, you will be asked to enter your current password.
If you signed in with Google or Apple, you will be asked to sign in again with the same account to confirm your identity before continuing.
If you have trouble accessing your account or need help following the process in the app, you can find up-to-date instructions at:
https://ponderahealth.com/en/delete-account
You can also write to soporte [at] ponderahealth [dot] com for guidance, but the deletion must be confirmed and carried out by the user from within the app.
A Pondera Health account must belong to an adult. We do not knowingly allow children under 13 to create an account; if we detect one, we will delete it along with its data.
The account holder can create and manage profiles for other people, including underage family members (from 8 years old). Children's profiles can only be created by their parent or legal guardian from their own account, who, by creating them, gives consent for the processing of the child's information.
The parent or guardian can review, correct or delete the child's profile and data at any time from the app or by emailing soporte [at] ponderahealth [dot] com. Children's data is not used for advertising.
When you record data about another adult, you must have their authorization and you are responsible for the proper and lawful use of that information.
This Privacy Policy may be updated to reflect service improvements, regulatory changes or internal adjustments.
The version in force is the one published on this page and linked from the app.
If you have questions about this Privacy Policy or how your information is handled, you can write to soporte [at] ponderahealth [dot] com or use the Help & Support section in the app.
This website uses analytics cookies from an external provider (Google Analytics) to collect aggregated usage statistics, such as pages visited, time on site, device type, browser and approximate location. This data may be processed on servers outside your country.
These cookies are only set if you accept them in the cookie notice. If you decline, the site works the same and no analytics information is sent. We do not use advertising cookies.
This section covers the website only. The website does not collect your account, health or training data.
You can change your choice at any time; withdrawing consent deletes this site’s analytics cookies.
If you live in California or another U.S. state with consumer privacy laws (such as the CCPA/CPRA or the laws of Virginia, Colorado, Connecticut, Texas or Oregon), this section supplements the rest of this notice.
Categories of information we collect: identifiers (name, email address and sign-in method); profile data and the health and nutrition data you record (goals, food diary, weight, body composition and progress photos); meal photos you send for analysis; conversations with the Pondi assistant; the profiles you share and the accounts they are linked to; purchase and subscription information (plan, status and store, without card details); the push notification token; the bug reports you send us; technical device and error information; and, on the website, browsing data if you accept analytics cookies.
Sensitive personal information: health and nutrition data, progress and meal photos, and assistant conversations are considered sensitive information. We use it only to provide the service you request and for purposes permitted by law, such as account security; we do not use it to infer characteristics about you. Even so, you can ask us to limit its use by emailing soporte [at] ponderahealth [dot] com.
We use this information for the purposes described in this notice and only share it with the service providers listed in this notice, who may not use it for their own purposes.
Sale and advertising: we do not sell your personal information or share it for advertising based on your activity across other sites or services, and we do not use health data for advertising. There is therefore nothing you need to opt out of; if you still send us an opt-out request, we will record it.
Your rights: to know what information we hold about you, to access it and obtain a copy, to correct it, to delete it, to limit the use of sensitive information and not to be discriminated against for exercising these rights.
How to exercise them: from the app or by emailing soporte [at] ponderahealth [dot] com. We will verify your identity by checking that the request comes from your account’s email address or by asking you to confirm details of it. If you act through an authorized agent, we will ask the agent for a permission signed by you and may ask you to confirm your identity directly with us.
Timelines: we will respond within 45 days of receiving the request. When reasonably necessary we may extend that period as permitted by your state’s law, and we will let you know within the initial period.
Appeals: if you live in a state that recognizes this right (such as Virginia, Colorado, Connecticut, Texas or Oregon) and we deny your request in whole or in part, you can appeal by replying to our decision with the subject “Appeal”. We will respond in writing within the period set by your state’s law and, if we uphold the decision, we will tell you how to contact your state attorney general.
Retention by category: account, profile, health and activity data, photos, conversations, notification tokens and bug reports are kept while your account exists and are deleted when you delete it; data you delete within the app is deleted at that moment. Infrastructure backups are renewed periodically, so deleted data may remain in them for a limited time. Purchase records kept by the app stores and the subscription provider are governed by their own policies.
Browser privacy signals: if your browser sends Global Privacy Control (GPC), the website treats it as declining analytics cookies. The site does not respond to Do Not Track (DNT) signals because there is no common standard for interpreting them; in any case, we do not track you across third-party sites.
This section is our consumer health data privacy policy under Washington’s My Health My Data Act, Nevada’s SB 370 and the Connecticut Data Privacy Act. Consumer health data is personal information linked to you that identifies your past, present or future physical health status.
Health data we process in Pondera Health: each profile’s data (birth date or age, sex, height, weight and activity level), calorie, macronutrient and nutrient goals, food diary entries, progress entries (weight, body composition and measurements) and progress photos, meal photos you send for analysis and conversations with the Pondi assistant.
Sources: only what you or the person managing the profile records in the app, the photos uploaded and what is written to the assistant. Pondera Health does not import data from health platforms or external devices.
Purposes: showing your diary, progress and metrics, calculating goals, analyzing the meal photos you send, answering in the assistant, generating the PDFs you export, showing the profiles you share with other accounts and sending the reminders you turn on.
Who it is shared with: DigitalOcean (hosting); OpenAI, only the photo or the messages and the necessary context when you use photo analysis or the assistant; Google Firebase Cloud Messaging, the text of the notifications you turn on; and the accounts you choose to share or link a profile with.
Consent: we collect this data only when you use the features you choose (creating a profile, logging food or progress, sending a photo or writing to the assistant). You can withdraw it at any time by deleting entries, the profile or your account, or by stopping sharing a profile.
We do not sell consumer health data, we do not use it for advertising and we do not use it for purposes other than those stated without asking for your consent again.
Your rights: to confirm whether we process your health data and access it, to delete it, to withdraw your consent and to obtain the list of third parties and providers we share it with (the one in this section and the one in “Service providers”). We will not treat you differently for exercising them.
How to exercise them: delete data or your account from the app, or email soporte [at] ponderahealth [dot] com with the subject “Health data”. We will verify your identity and respond within 45 days, extendable by another 45 when reasonably necessary, in which case we will let you know. If we deny your request, you can appeal by replying to our decision with the subject “Appeal”; if you disagree after the appeal, you can contact your state attorney general.
