Privacy Policy

Last updated 29 September 2026

Portion Pilot is run by RaccoonSoft SAS ("we"). This page explains what we keep about you, why, who else handles it, and how to get it deleted.

What we keep

  • Your account: your email address and your password, stored only as a secure hash.
  • Your profile: what you tell us to plan your meals: sex, body weight, body-fat percentage, activity and training, your goal, how you like to split your meals, and any special circumstance you tell us about, such as pregnancy, breastfeeding or an injury.
  • Your plans: meal plans, weigh-ins and the custom foods you create. A custom food you don't keep private can be found and used by other people using Portion Pilot.
  • Messages you send us through the in-app feedback link.
  • Technical data: IP address, browser type and the pages you visit, in our logs and analytics.

Before you create an account, your profile and plans stay in your browser; we don't save them. If you ask us to email your plan, we send it through Brevo and don't keep your address. Photos of food labels and voice recordings you send are read to fill in the food, then discarded. The text we heard in a recording can stay in our logs for a short time.

Why we use it

  • To run the service you signed up for: your plans, your account and the emails it sends (confirmation, password reset, and the meal plan you ask us to email).
  • To keep it safe: blocking automated sign-ups and abuse.
  • To fix problems and improve the app, using logs and usage analytics.

We don't sell your data, and we don't share it with advertisers.

Who else handles it

  • Microsoft Azure hosts the app and its databases, and stores our logs.
  • Brevo sends our emails, and may record whether an email was opened and which links were clicked.
  • Google reads food-label photos and voice recordings (Gemini).
  • PostHog measures how the app is used.
  • Cloudflare checks that a sign-up comes from a person (Turnstile).
  • Google Fonts, jsDelivr, cdnjs (Cloudflare) and the jQuery CDN serve fonts and scripts to every page, so they see your IP address.
  • GitHub holds feedback messages, with your account number but not your name or email.

Google, PostHog, Cloudflare, GitHub and the script providers above may process data in the United States.

Cookies and browser storage

  • A security cookie that protects forms. The app doesn't work without it.
  • Your sign-in is kept in your browser's storage, encrypted, until you sign out.
  • A cookie that remembers you have a profile, so returning visitors go straight to their plan. It lasts up to 400 days.
  • No analytics cookies. PostHog measures usage without storing anything in your browser.
  • A copy of your profile, plans, weigh-ins and custom foods is kept in your browser's storage so the app loads quickly. It stays until you sign out or clear your browser data.

How long we keep it

We keep your data while you have an account. When you delete your account (My Profile, then Delete account; if you haven't set up a profile yet, email us), we erase your profile, plans, weigh-ins and custom foods, and strip your email from the account record. If a deletion can't finish, the record of the request, which holds your email and IP address, is erased after about 90 days. Feedback messages on GitHub are not removed automatically; write to us and we'll remove them. Logs and usage analytics are kept separately, on their own schedules, and aren't erased when you delete your account.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it. Email support@portionpilot.com. If you think we've got it wrong, you can complain to your data protection authority; in France, that's the CNIL.

Changes

If we change this policy, we'll update the date at the top. For a big change, we'll email you first.