Privacy Policy
Effective date: October 18, 2026
This policy applies to the iOS app Mealshot: AI Calorie Counter (bundle ID com.wlmarketing.mealshot), published by WL Online Marketing LLC (“we”, “us”).
In short:
- Meal photos and descriptions go to our server only after you allow AI analysis, and only the ones you choose to analyze. We don't store the photos or use them to train AI.
- Your profile (age, sex, height, weight, goal), food log and weight history stay on your iPhone.
- Mealshot has no accounts and no ads and never sells your data. It asks once whether you allow tracking; TikTok's ad measurement runs only if you say yes.
Meal photos and descriptions
Before the first analysis, Mealshot asks whether it may send your meal photos and descriptions to our server for AI analysis (“Allow” or “Not now”). You can change this at any time in Settings › AI analysis. Without it, you can still log meals by searching your recent foods and entering numbers yourself.
When you analyze a meal, Mealshot sends our server at mealshot.appholdings.org, over an encrypted connection: the photo you took or picked (reduced to at most 1024 pixels), or the text you typed, and any note you add. An AI model on our own computers lists the foods, portions, calories and macronutrients. If our model can't answer within a few seconds, our server sends the same photo or text to OpenAI's API (OpenAI, L.L.C.) to do the same job. OpenAI processes it as our service provider; under its API terms it doesn't use this data to train its models, and it may keep it for up to 30 days to detect abuse before deleting it.
Our server keeps the photo only in memory while it's analyzed and never saves it to disk. It keeps the resulting food list and numbers (not the photo) in memory for up to 7 days, under a one-way fingerprint of the photo or text, so the same photo always gives the same answer. We don't use your photos, descriptions or results to train AI.
To keep the service fair we count analysis requests per day per device and per network address. The device count uses a one-way hash of an identifier the app creates for itself; counts are kept in memory and reset every day.
Your profile, log and progress
Your age, sex, height, weight, activity level, goal, daily targets, saved meals, meal photos you keep, and weight history are stored in Mealshot's storage on your iPhone, and your daily goal is calculated on your iPhone. They are included in your iPhone backups according to your own backup settings. Settings › Delete all data, or deleting the app, removes them from your device.
Camera, photos and notifications
Mealshot uses the camera only while you take a meal photo, and the system photo picker only for the photo you choose; it doesn't read the rest of your library. It asks to send notifications only for the meal and trial reminders you turn on.
Purchases
Mealshot Pro is sold and billed by Apple; we never see your payment details. Apple gives the app signed transaction information (product, purchase and expiry dates, transaction IDs), which we use to unlock Pro and to measure sales, and sends us App Store Server Notifications about renewals, cancellations and refunds. If you start a free trial and allow notifications, Mealshot reminds you before the trial ends with a local notification.
Analytics and advertising measurement
Mealshot uses ACAnalytics, our own analytics service, to understand how the app is used and which of our ads lead to installs and subscriptions. It collects:
- an app-scoped device identifier (identifier for vendor) and an install identifier;
- app version, iOS version, device model, and the language, region and currency settings of your device;
- the IP address your device connects from, and the approximate location (country, region, city and postal code) that our hosting provider, Cloudflare, derives from it;
- in-app events, such as finishing setup, analyzing or saving a meal, or viewing the subscription screen, with categories and counts only (never your photos, foods, weight or other health details);
- App Store transaction and product IDs of your purchases, and Apple's App Store receipt;
- an Apple Search Ads attribution token, which tells us which Search Ads campaign, if any, led to the install.
Mealshot asks once, with Apple's "Allow tracking" prompt, whether it may measure our ads with TikTok. Only if you allow it, and only while we advertise Mealshot on TikTok, the app uses TikTok's App Events SDK to tell TikTok (TikTok Pte. Ltd. and its affiliates) that the app was installed or opened and whether you started a trial or subscription (event name, product and price), together with your device's advertising identifier (IDFA), the app-scoped device identifier, IP address, device model, iOS version and app version, so that TikTok can measure how its ads perform for us. No photos, foods, weight or other health details are sent to TikTok.
If you don't allow tracking, the app sends nothing to TikTok. Apple's SKAdNetwork may still report to the ad network that showed you an ad an anonymous install and one value (for example "started a trial"), without identifying you or your device. You can change your choice anytime in iOS Settings › Privacy & Security › Tracking.
Sharing
We don't sell personal information. We share data only with service providers that process it for us (OpenAI for meal analysis when our own model is busy, Cloudflare for analytics hosting, TikTok for ad measurement as described above), with Apple for purchases, or when the law requires it.
Children
Mealshot is meant for adults and is not directed to children under 13. We don't knowingly collect their personal information.
Your choices and rights
You can turn off camera and notification access for Mealshot in iOS Settings, switch off AI analysis in Mealshot › Settings, and delete your data or the whole app at any time. Depending on where you live, you may have the right to access, correct or delete personal information we hold, or to object to its processing. Because Mealshot has no accounts, email us at feedback@appholdings.org (or from the app: Settings › Contact support) so we can find your data, and we will respond within 30 days.
Security and international transfers
Data sent to our services travels over encrypted connections (HTTPS). We and our service providers may process data in the United States and other countries where they operate.
Changes
If we change this policy we will update the date above, and tell you in the app when the change is significant.
Contact: feedback@appholdings.org · Terms of Use · Support