Privacy Policy

Last updated: October 2, 2026

Oxamate (“Oxamate”, “we”, “us”) is an iPhone app that helps you estimate the oxalate in your meals, set a daily target and track how you feel. This policy explains what information we collect, how we use it, and the choices you have. If you have questions, email support@oxamate.app.

The short version: we collect what we need to run the app, we never sell your data, we don't show ads, and you can delete your account and data at any time from inside the app.

1. Information we collect

Information you give us

• Account information: your name and email address when you sign in with Apple, Google or email. If you choose “Hide My Email” with Apple, we receive a private relay address instead.
• Profile information: your sex and date of birth, why you're using Oxamate, the foods you eat, your diet type, your daily target, lowering pace and preferences.
• Food logs: photos of meals you take or choose, descriptions you type, foods you search for, and the meals, portions and corrections you save.
• Health-related information: symptoms, mood, check-ins, habits (such as calcium with meals) and notes you choose to record. See Consumer health data below.
• Support messages: anything you send us by email.

Information collected automatically

• Usage and device information: how you use app features, your device model, iOS version, app version, language, approximate region (country), and a randomly generated app identifier.
• Diagnostics: crash reports and performance data.
• Notifications: a push-notification token if you allow notifications.

Information from Apple

• Purchases: Apple tells us whether you have an active subscription, a free trial, and its renewal status. Apple processes payments; we never receive your card details.

We do not access your contacts, location, or Apple Health data.

2. How we use information

• To provide the app: estimating the oxalate in your meals, showing what drives it, suggesting swaps, tracking your target and progress, and saving your history across devices.
• To personalize your plan, targets, symptom list and reminders.
• To manage your subscription and restore purchases.
• To improve Oxamate, including understanding, in aggregate, how different groups (for example, age ranges and sex) use the app and which features are valuable.
• To send reminders and notifications you've turned on, and, only if you opt in, tips and product news by email.
• To provide support, keep the service secure, prevent abuse, and meet legal obligations.

We do not use your information to show you ads, and we do not sell or rent your personal information.

3. How meal estimates are made

When you photograph or describe a meal, the photo or text is sent securely to an artificial-intelligence service provider that identifies likely ingredients and portions. We then estimate oxalate using published food data. We only use providers that process this content on our behalf and do not use it to train their own models. Estimates can be wrong; you can always correct a meal.

4. How we share information

We share information only as needed to run Oxamate:

• Service providers that work on our behalf under contract: cloud hosting and storage, AI meal analysis, product analytics, crash reporting, subscription management, and email delivery. They may use your information only to provide services to us.
• Apple, for sign-in, purchases and notifications.
• Legal and safety: when required by law, or to protect the rights, safety and security of our users, the public or Oxamate.
• Business transfers: if Oxamate is involved in a merger, acquisition or sale of assets, your information may be transferred, subject to this policy.

We never sell your personal information or share it for cross-context behavioral advertising.

5. Consumer health data

Some information in Oxamate can be considered “consumer health data” under laws such as Washington's My Health My Data Act and similar laws in Nevada and Connecticut. This includes symptoms, mood, check-ins, habits, notes, and food logs linked to your health goals.

• What we collect and why: the information listed above, only to provide and personalize the app's tracking features and, in de-identified or aggregate form, to improve the app.
• Sources: directly from you, when you enter it in the app.
• Sharing: only with the service providers described in section 4, who process it on our behalf. We do not sell consumer health data.
• Your consent: we collect it only when you choose to enter it, and you can stop at any time.
• Your rights: you can confirm whether we hold your consumer health data, access it, delete it, and withdraw consent, as described in section 7. You can also appeal if we decline a request by replying to our response.

6. How long we keep information

We keep your information while your account is active. If you delete your account in the app (Profile → Delete Account), we delete your account and associated data from our active systems within 30 days, and from backups within 90 days, except where we must keep limited records to meet legal obligations (for example, purchase records). Aggregated or de-identified data that can no longer identify you may be kept.

7. Your choices and rights

• Edit your profile, targets and logs at any time in the app.
• Delete your account and data in the app, or by emailing us.
• Access or export a copy of your data by emailing us.
• Notifications: turn them off in the app or in iOS Settings.
• Marketing emails: opt out in the app or with the unsubscribe link in any email.

Depending on where you live (for example, the EU, UK, California and other US states), you may have additional rights, including to access, correct, delete or port your data, object to or restrict certain processing, and not be discriminated against for exercising your rights. Where we rely on consent, you can withdraw it at any time. To make a request, email support@oxamate.app; we'll respond within the time required by law (usually 30 days). You also have the right to complain to your local data protection authority.

8. Legal bases (EU and UK users)

We process your information to perform our contract with you (providing the app and your subscription), with your explicit consent for health-related information you choose to enter, based on our legitimate interests (improving and securing the app, in ways that don't override your rights), and to comply with legal obligations.

9. Security

We use industry-standard safeguards, including encryption in transit and at rest, and access controls. No method of storage or transmission is completely secure, but we work to protect your information.

10. International transfers

Our service providers may process information in countries other than where you live, including the United States. Where required, we use appropriate safeguards such as standard contractual clauses.

11. Children

Oxamate is designed for adults and is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

12. Changes to this policy

We may update this policy. If we make material changes, we'll notify you in the app or by email before they take effect. The date at the top shows when it was last updated.

13. Contact

Email support@oxamate.app.

Oxamate provides estimates for informational purposes only. It is not a medical device and does not diagnose, treat or cure any condition.