Privacy Policy

Last updated May 25, 2026

dietmax.ai (“dietmax,” “we,” “us”) operates a paid SMS-based calorie tracking service. This Privacy Policy explains what information we collect, how we use it, how we share it, and the choices you have. It covers our website, our SMS service, our hosted billing flow, and any related interactions you have with us.

1. Eligibility

dietmax is intended for adults 18 and older. We do not knowingly collect personal information from anyone under 13, and we do not target the service to anyone under 18. If we learn that we have collected information from a child under 13, we will delete the account and the data.

2. Information We Collect

We collect the following categories of information:

• Identifiers. Your mobile phone number (your primary account identifier), any name or nickname you tell us, IP address and basic device information when you visit our website.
• Commercial information. Subscription status, trial start and end dates, plan, and payment metadata. Full card details are stored by Stripe, not by us.
• User content. SMS messages you send us, meal photos you upload, your stated goals (such as calorie or protein targets), and your conversation history with the dietmax agent.
• Inferences. Calorie and macro estimates, daily totals, progress against your goal, and notes the agent maintains to help it respond consistently.
• Sensitive information. Some of what you send us (food choices, body goals, allergies, photos that may include your environment) can be characterized as consumer health information under laws such as the Washington My Health My Data Act and as sensitive personal information under the California Privacy Rights Act. We treat this category with elevated care.
• Automatically collected. Standard analytics events on our website (page views, performance metrics) collected via PostHog.

3. How We Use Information

• To deliver the SMS service, including parsing your meals and returning estimates.
• To create and manage your account, process billing through Stripe, and send transactional SMS related to your trial, charges, and service status.
• To improve the product, debug agent behavior, and monitor reliability through our analytics and LLM observability tooling.
• To prevent fraud and abuse, enforce our Terms, and comply with applicable law.

We do not use your information for cross-context behavioral advertising. We do not send marketing SMS unrelated to your account without your separate consent.

4. SMS Program Disclosures

By providing your phone number, you agree to receive recurring automated SMS from dietmax.ai related to your account, food logging, and billing. Consent is not a condition of purchase outside of the dietmax service itself.

• Message frequency varies based on your usage.
• Message and data rates may apply.
• Reply STOP to cancel, HELP for help, or email hi@dietmax.ai.
• Mobile information and SMS opt-in data will not be shared with or sold to third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors that support the service (for example, SMS providers and billing processors) is permitted.

5. Billing

Subscriptions are processed by Stripe. dietmax does not see or store your full card number. The current plan is a 3-day free trial that converts to $5/month unless you cancel before the trial ends. Cancellation instructions are in our Terms of Service. Stripe acts as an independent controller for payment data it processes for fraud prevention and regulatory purposes.

6. Third Parties and Sub-processors

We share information with the following categories of service providers, under contracts that limit their use of your information to the purposes we direct:

• SMS delivery: Linq, Sendblue, Twilio, and the WhatsApp Business Platform operated by Meta. We send phone numbers and message content so messages can be delivered.
• Billing: Stripe.
• Hosting and storage: Amazon Web Services for our database (Aurora PostgreSQL) and meal photo storage (S3).
• AI processing: OpenAI and Google (Gemini) for converting your meal descriptions and photos into nutrition estimates. We send only what is needed for the parsing task. As of the effective date of this policy, OpenAI and Google do not train their generally available API models on customer inputs by default; we do not opt in to training programs.
• Analytics, support, and LLM observability: PostHog. We may include support requests plus prompt and response snapshots tied to your account for internal debugging; this is observability and support operations, not model training.
• Authentication: Clerk, for our internal admin tooling only.

7. AI-Generated Content

dietmax uses third-party large language models to parse messages and photos. Estimates produced by these models can be inaccurate or incomplete. dietmax is not a medical device, does not provide medical or nutritional advice, and should not be used for medication dosing, allergen avoidance, or clinical decisions. See our Terms of Service for the full disclaimer.

8. How We Share Information

We share personal information only as follows:

• With service providers as described in Section 6.
• To comply with law, respond to legal process, or protect rights and safety.
• In connection with a merger, acquisition, or sale of assets.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

9. Data Retention

We retain information for as long as your account is active and as needed to operate the service. Indicative periods:

• Account and phone number: while active, plus 30 days after deletion.
• Message history and food logs: up to 24 months on a rolling basis, or until you request deletion.
• Meal photos: up to 12 months unless you ask us to keep specific photos.
• Stripe billing records: as required for tax and audit purposes, typically 7 years.
• Analytics events: per PostHog defaults, which we may reduce over time.

10. Your Privacy Rights

Depending on where you live, you may have the right to access, correct, delete, or obtain a copy of your personal information; to opt out of certain sharing or profiling; and to appeal a decision we make about your request. You can exercise these rights by emailing hi@dietmax.ai from the address associated with your account, or by replying “privacy” to one of our SMS messages.

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to limit the use of sensitive personal information, and the right not to receive discriminatory treatment for exercising these rights. We honor browser-level Global Privacy Control signals as a request to opt out of sale or sharing where applicable.

Washington residents have rights specific to consumer health data, including the right to withdraw consent and to have deletion requests propagated to processors that hold relevant data on our behalf.

11. Security

We protect information in transit with TLS and at rest using cloud provider encryption. Access to production systems is limited and logged. No system is perfectly secure; if we learn of a breach that requires notification, we will notify affected users in line with applicable law.

12. Cookies and Tracking

Our website uses cookies for essential functionality and for analytics through PostHog. You can control cookies through your browser settings. We honor recognized opt-out signals such as Global Privacy Control.

13. International Users

dietmax is operated from and intended for users in the United States. If you access the service from outside the United States, your information will be processed in the United States.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through SMS, email, or a notice on this page at least 30 days before they take effect, where required by law.

15. Contact

Questions, requests, or complaints about this Privacy Policy can be sent to hi@dietmax.ai.