BitePrism
Effective 2 November 2026 · applies to BitePrism on Android
In short
- To estimate nutrition, your meal photo or description is sent to our server and to DeepSeek's AI model. Photos are resized first, which also removes metadata such as location.
- Nothing else goes with it: not your profile, weight, goals, meal log, name or advertising ID.
- Barcodes are looked up directly in the open Open Food Facts database.
- Our server stores no photos or descriptions. DeepSeek processes them in China under its own policy.
- Your profile, weigh-ins and meal history stay on your phone.
Who we are
BitePrism is made by Lotus Kite, a studio of Trano Technology and Digital Solutions Company Limited (Công ty TNHH Công nghệ và Giải pháp số Trano), tax code 0319730113, B199A Đông Hưng Thuận 13 Street, Quarter 25, Đông Hưng Thuận Ward, Ho Chi Minh City, Vietnam. We are the controller of the personal data described here. Contact: privacy@lotuskite.com.
What the app handles and why
- Meal photo — taken with the camera or picked from your gallery, resized to at most 1024 pixels and re-encoded (which drops metadata such as GPS location), then sent over HTTPS to our server together with your phone's language setting.
- Meal description — if you type what you ate instead (up to 300 characters), that text is sent the same way. Don't include personal details in it.
- Barcode — scanned on the device with Google ML Kit, then the barcode number alone is looked up in Open Food Facts directly from your phone.
- Install ID — a random code created the first time you use AI logging, sent with each photo or description so our server can apply the daily limit. It is not linked to your name, account or device identifiers.
- Profile and weigh-ins — sex, age, height, weight history, activity level, goal and units — are used on the device to calculate your daily targets and trends and are never sent.
- Meal log — results, photos, descriptions, barcode products and portions — is stored on the device. You can delete any meal, which deletes its photo too.
- Camera — used only when you open the scanner. Notifications — used only if you turn on meal reminders, which are scheduled on the device.
How AI logging works
Our server (a Cloudflare Worker) checks the daily limit and passes the photo or description, with a fixed instruction asking for a nutrition estimate in your language, to DeepSeek's AI model. The model's answer comes back to your phone and is saved there. The install ID is not forwarded to DeepSeek.
Estimates can be wrong. BitePrism is not a medical device and its numbers are not medical or dietary advice.
Advertising
The free version offers optional rewarded ads that unlock unlimited AI logging for 24 hours. Ads are served by Google AdMob. Google may use your device's advertising ID to show and measure ads and to prevent fraud. If you are in the EEA, the UK or Switzerland, the app asks for your consent through Google's consent form before personalised ads are shown, and you can change your choice later from the app's settings. You can also reset or delete your advertising ID in your phone's settings.
Purchases
Purchases and subscriptions are handled entirely by Google Play. We receive only what is needed to unlock what you bought (the product, its status and an anonymous purchase token). We never receive your name, card or billing address. Manage or cancel subscriptions in your Google Play account settings.
Services we rely on
| Service | What it does and what it receives | Their policy |
|---|---|---|
| Cloudflare Workers and KV (Cloudflare, Inc.) — our server | Receives the photo or description, language setting and install ID; forwards the photo or description and language to DeepSeek; keeps only daily counters. Processes your IP address to deliver the request. | Cloudflare Privacy Policy |
| DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.) | Receives the resized meal photo or your description and a short instruction, and returns the nutrition estimate. Processes data in the People's Republic of China. | DeepSeek Privacy Policy |
| Open Food Facts (Open Food Facts association, France) | Returns product nutrition for a scanned barcode. Receives the barcode number, your IP address and the app's name and version; no identifier. | Open Food Facts privacy |
| Google ML Kit barcode scanning (Google LLC) | Reads barcodes on the device; images are not sent. Like all ML Kit features, it sends Google diagnostic and usage data — device and app information, performance metrics and a per-installation identifier not meant to identify you. | ML Kit data disclosure |
| Google AdMob and the User Messaging Platform (Google LLC) | Shows ads and asks for consent where the law requires it. Receives your device's advertising ID, IP address and basic device information. | How Google uses data from apps |
| Google Play Billing (Google LLC) | Processes purchases and subscriptions on Android. We never see your card details. | Google Privacy Policy |
We do not sell your personal data, and apart from the ML Kit diagnostics above we do not use analytics or crash-reporting SDKs in this app.
How long we keep it, and how to delete it
Our server does not save meal photos or descriptions. It keeps two counters — AI logs per install ID per day, and total per day — which expire automatically after two days. If a request fails unexpectedly, Cloudflare's own error logs may hold technical details for a short period. DeepSeek's retention is governed by DeepSeek's policy.
On your phone, meals and their photos stay until you delete them; uninstalling the app deletes everything, including your profile and weigh-ins.
If device backup is turned on (Android backup to your Google account, or iCloud backup on iPhone), your phone may include this app's private data in that backup. Those backups are run and encrypted by Google or Apple under your account, not by us, and you control them in your phone's settings.
International transfers
Meal photos and descriptions are processed by DeepSeek in the People's Republic of China, and by Cloudflare on its global network; barcode lookups go to Open Food Facts in France. These countries may not offer the same level of data protection as yours. If you do not want your meals processed there, log them by barcode or with “log again” instead — the rest of the app keeps working.
Children
BitePrism is not directed to children under 13 (or the minimum age in your country) and we do not knowingly collect personal data from them. If you believe a child has sent us personal data, write to us and we will delete it.
Your rights
Depending on where you live — including under Vietnam's Personal Data Protection Law (No. 91/2025/QH15), the EU and UK GDPR, and US state privacy laws — you may have the right to access, correct, delete or port your personal data, to withdraw consent, and to object to or restrict processing. Because our server keeps no photos or descriptions and only anonymous counters, we cannot link past requests to you; deleting meals in the app or uninstalling it removes everything we could act on. For anything else, email privacy@lotuskite.com; we answer within 30 days. You may also complain to your local data protection authority.
Security
Data in transit uses HTTPS. Data kept on your phone is stored in the app's private storage, protected by your phone's own security. No method of transmission or storage is perfectly secure, but we keep what we hold to the minimum.
Changes to this policy
If our practices change we will update this page and the date at the top. Material changes will also be announced in the app.