Privacy summary

Private by default: Food photos, logs, and health-related account data are intended to stay private unless the user intentionally shares or publishes something.

Signed media access: Private media should be served through authenticated or signed access patterns rather than broad public URLs.

Parental controls: Under-18 and protected-device flows can add friction around settings changes, public posting, account deletion, and subscription changes.

Public publishing is intentional: Eligible Carb Dictionary entries are user-requested public submissions, not a silent side effect of taking a photo.