Last updated: 28 June 2026
Noted Labs Pty Ltd (ABN 98 693 357 425) ("we", "us", "our") builds health and habit apps, including inter alia CalorieNoted and GymNoted. This Privacy Policy explains what information we collect, how we use it, and the choices you have. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
Information we collect
Information you give us
- Account and contact details — such as your first name, date of birth and email address when you sign up for an account, join a waitlist, join the beta or contact us. You may also choose to provide your surname and phone number.
- Content you log — food, nutrition, workout and activity data you enter into our apps, including foods logged, product barcodes, serving details, and information you manually enter or scan.
Information collected automatically
- Usage and diagnostics — app performance, crash reports and basic usage data that help us fix bugs and improve features, including interactions with food logging, barcode scanning and data-entry features.
- Device information — such as device model and operating system version.
Sensitive and health-related information
Depending on the features you use, we may collect information relating to your nutrition, weight, body measurements, exercise, workouts, activity, goals and other health or fitness information. We only collect sensitive information where it is reasonably necessary to provide the features you choose to use and where you have provided consent or the collection is otherwise permitted by law.
App permissions and feature data
Depending on the permissions you grant and the features you use, our apps may access or collect:
- Camera and photos — for features such as photographing meals, scanning food or capturing other information.
- Barcodes and scanned information — including product barcodes and information identified or entered through scanning features.
- Microphone and audio — for AI voice logging when you choose to describe food or other information by voice. Original audio recordings are not stored in your account or our database after processing.
- Apple Health and HealthKit data — if you choose to connect Apple Health, we may access weight, body-fat percentage, lean body mass, waist circumference, measurement date and time, the Apple Health sample identifier and source, and deletion status when a Health sample is deleted.
- Notifications — notification preferences and information needed to deliver reminders or app updates.
You can manage many of these permissions through your device settings, although disabling a permission may prevent the related feature from working.
Photos, scans and audio
When you use our artificial-intelligence features, meal photos, voice input, food descriptions and images of food labels are sent to OpenAI for processing so that the app can identify, interpret or help log the information you provide. We limit the information sent to what is reasonably necessary to perform the feature you request.
We do not store the original meal photos, audio recordings or food-label images in your account or our database after they are sent for processing. We only store the results returned from the processing where needed to provide the app's logging features.
OpenAI states that information submitted through its API is not used to train its models by default and that API content may be retained for up to 30 days for abuse monitoring unless different retention controls apply.
Goals, suggestions and insights generated using your information are informational outputs provided to help you manage your nutrition and fitness. They are not automated decisions with legal or similarly significant effects on you.
Food database searches
When you search Open Food Facts within the app, the words or barcode you search are sent to Open Food Facts — a third-party database operated outside Australia — so it can return matching products. Other food data we use, such as the USDA FoodData Central dataset, is stored within our own database, so searching it does not send your query to a third party. The sources we use are listed on our Acknowledgements page.
How we use your information
- To create and manage your account.
- To provide, maintain and improve our apps and website.
- To process the food, nutrition, health and fitness features you choose to use.
- To respond to your messages and support requests.
- To run our beta program and let testers try new features.
- To send you updates you've asked for — for example, to let you know when an app you joined the waitlist for launches or opens to new users. Every marketing email includes an unsubscribe link, and you can opt out at any time.
- To diagnose problems, prevent abuse and keep our services secure.
- To analyse the data you log and how you use the apps in order to generate your goals, suggestions and insights, and to develop and improve features (including automated and AI features).
- To review user data where needed to build, debug and improve the Services — on a de-identified basis wherever practicable, so your identity is hidden.
- To create and use aggregated or de-identified information that no longer identifies you.
- To meet our legal obligations.
Storage and security
Your account information and the data you log are stored securely in our database. We use appropriate technical and organisational safeguards to protect your information from misuse, interference, loss and unauthorised access, modification or disclosure. We aim to collect and retain only what we need to operate and improve our apps.
Sharing your information
We do not sell your personal information. We also do not sell or license bulk datasets, aggregated or de-identified user information, usage trends, nutrition or activity insights, or other information derived from how people use our apps to advertisers, data brokers or other third parties.
We only share information where necessary with:
- Service providers who help us operate our apps, including providers of database hosting, cloud infrastructure, analytics, email delivery, crash reporting and artificial-intelligence processing.
- Apple, including Apple Health, TestFlight and the App Store, under Apple's own terms and privacy policies.
- Authorities or other parties, where required or permitted by law.
Overseas processing and disclosure
Some service providers that support our apps and website may store, process or access information outside Australia.
- Database services — our database infrastructure is hosted through Supabase in Sydney, Australia and Tokyo, Japan.
- Artificial-intelligence processing — we use the OpenAI API to process meal photos, voice input, food descriptions and images of food labels. This information may be processed in the United States or other locations where OpenAI and its service providers operate.
- Other service providers — providers of cloud infrastructure, analytics, email delivery, crash reporting and Apple services may process or access limited information in Australia, the United States or other countries where they operate.
We limit information disclosed to overseas providers to what is reasonably necessary to operate the relevant service or feature.
Where practicable, we require overseas service providers to handle your information in a manner consistent with the Australian Privacy Principles. However, we may not always be able to take reasonable steps to ensure full compliance by those recipients, and by using our services you consent to your personal information being disclosed to and handled by overseas providers on that basis (see APP 8).
How long we keep your information
We retain personal information only for as long as it is reasonably needed to provide our services, meet legal obligations, resolve disputes, maintain security and enforce our agreements.
- Account and logged data — retained while your account remains active and deleted when you delete your account, subject to limited legal or security requirements.
- Diagnostic and usage logs — retained for up to 90 days.
- Backups — retained securely and automatically overwritten or deleted within 90 days.
- Deleted accounts — active account data is deleted within 30 days of the deletion request. Residual copies may remain in encrypted backups for up to 90 days before being automatically deleted or overwritten.
We may retain limited information for longer where required by law or where reasonably necessary for fraud prevention, security, accounting or legal claims.
Your choices and rights
You can request access to, or correction or deletion of, the personal information we hold about you. You can also delete your account and the data associated with it directly within the app. To make an access, correction or deletion request, email legal@notedlabs.com.au. You can delete the app and any locally stored data at any time.
Children
Our apps are intended for people aged 18 and over. They are not directed at anyone under 18, and we do not knowingly collect personal information from anyone under 18.
Privacy complaints
If you believe we have mishandled your personal information or breached an applicable privacy law, email legal@notedlabs.com.au with details of your concern. We will acknowledge your complaint, investigate it and aim to respond within 30 days.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner through oaic.gov.au.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we'll change the "last updated" date above and, where appropriate, let you know in the app.
Contact us
Questions about your privacy? Email legal@notedlabs.com.au.
Noted Labs Pty Ltd · ABN 98 693 357 425 · Melbourne, Australia