1. Who we are
Toast is operated by Ericeria Labs, a sole proprietor in Thailand, operating under the trade name "Ericeria Labs", based in Bangkok, Thailand.
For any privacy-related question, email hello@ericerialabs.com.
2. What we collect
We collect only what we need to run the Service:
| Category | Examples | Why |
|---|---|---|
| Account identifier | An anonymous app ID, and if you choose Sign in with Apple, the account identifier Apple provides. | To keep your account, settings, subscription status, and saved log working. |
| Plan data | Onboarding answers and targets you provide or generate in the app. | To calculate and show your plan, targets, and progress. |
| Food log | Meals, photos, descriptions, nutrition estimates, manual entries, and corrections you save or submit. | To provide food logging, nutrition estimates, syncing, and related app features. |
| Health data | If you grant access, Toast reads and writes the Apple Health data types shown in the iOS permission prompt. | To provide the Health-connected features you choose to enable. |
| Subscription status | Subscription state, renewal state, and entitlement information. Apple processes payment details; we do not receive your card number. | To unlock paid features, restore purchases, and provide support. |
| Diagnostic data | App, device, crash, performance, and usage diagnostics. We avoid including sensitive app content in analytics events. | To find bugs, improve reliability, and understand whether the app is working as intended. |
| Website analytics | Pages viewed, approximate device/browser information, referrer, and similar website events. | To keep the website working and improve the information we publish. |
What we do NOT collect
- We do not access your contacts, location, microphone, calendar, or browsing history.
- We do not collect names, phone numbers, or postal addresses.
- We do not use your food photos, meal logs, or Apple Health data for advertising.
- We do not link your activity to any advertising identifier.
3. How food photos are handled
When you scan a meal, the image is processed to identify food and estimate nutrition. We limit photo processing to what is needed to provide the feature and do not use your food photos to train AI models without your explicit, separate consent.
If you save a scanned meal, Toast may keep the related photo or thumbnail so it can appear in your food log and sync across your devices. Saved meal data is not public and can be removed by deleting the meal, deleting your account, or contacting us.
4. Service providers
We use service providers to operate Toast. We share only the information needed for them to provide services to us. Provider categories include:
- Cloud hosting and storage
- App Store purchase and subscription support
- App feature processing
- App analytics, crash reporting, and reliability tools
- Website hosting and analytics
Some processing may happen outside Thailand. Where required, we use appropriate contractual, technical, and organizational safeguards.
5. Apple Health data
Apple Health data is sensitive. Toast uses HealthKit data only for the Health-connected features you choose to enable. We do not sell Apple Health data or use it for advertising.
6. How long we keep your data
| Data | Retention |
|---|---|
| Active account, food log, plan data, and saved meal photos | While your account is active |
| After account deletion | Deleted or de-identified from active systems within 30 days |
| Encrypted backups | Up to 90 days after deletion |
| Crash and diagnostic logs | Usually up to 90 days unless we need longer to investigate security, fraud, or reliability issues |
| Anonymized aggregate statistics | Indefinitely, with no reasonable link back to you |
You can delete your account at any time from the in-app Settings or by emailing hello@ericerialabs.com.
7. Your rights
Depending on where you live, you have one or more of the following rights:
- Access a copy of your data
- Correct inaccurate data
- Delete your data
- Export your data in a portable format
- Restrict or object to processing
- Withdraw any consent you gave
- Lodge a complaint with your local data-protection authority (in Thailand, the Personal Data Protection Committee; in the EU/UK, your national data-protection authority)
To exercise any of these rights, email hello@ericerialabs.com. We will respond within 30 days. See Your Data Rights for the full process.
8. Children
Toast is not intended for children under 13. We do not knowingly collect data from anyone under 13. The App Store rates Toast 17+; users between 13 and 17 should use the app only with parental consent.
9. Security
We use industry-standard security practices, including encryption in transit (TLS) and at rest, row-level access controls, and regular security reviews. No system is ever fully secure; report suspected vulnerabilities to hello@ericerialabs.com.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be announced in the app and at toasthealth.app/privacy at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance.
11. Contact
- Privacy inquiries: hello@ericerialabs.com
- General support: hello@ericerialabs.com
- Postal: Ericeria Labs, Bangkok, Thailand