Privacy Policy
開飯喇 LunchBox · Last updated 4 August 2026
開飯喇 LunchBox (“the app”) helps you decide what to eat, estimate calories from a photo, and keep a personal meal log. This policy explains exactly what data leaves your phone and what does not.
What stays on your device
- Your meal log — every meal you record, its calorie estimate, time and date.
- Your daily goal, streak, badges and roll count.
All of this is stored in the app’s local storage on your phone. It is never uploaded, never backed up to us, and we cannot see it. Deleting the app deletes this data permanently.
What is sent off your device
- Food photos (識食 tab). When you take or choose a photo, it is sent to our server and forwarded to the Google Gemini API to identify the dish and estimate its calories. The photo is held in memory only for the duration of that request. We do not save it, and it is not used to train any model by us.
- An approximate district name (附近 tab). If you grant location permission, the app converts your position into a neighbourhood name on your device — for example “Causeway Bay” — and sends only that text. Your precise coordinates are never transmitted. If you decline the permission, the app uses a default district and works normally.
- Your menu filters — cuisine, dine-in or home-cooking, and price range — so the AI can suggest relevant dishes.
Advertising
The app shows ads served by Google AdMob — a banner in 附近 and 記錄, a full-screen ad every few rolls in 揀餐, and a short video in exchange for using 識食. AdMob may use an advertising identifier (IDFA) to show ads relevant to you and to measure ad performance.
On first launch, iOS asks whether to allow tracking (App Tracking Transparency). If you say no, or if you are in the EU/UK and do not consent via the on-screen form, you still see ads — they are just not personalized. Declining never blocks any feature of the app.
AdMob’s handling of this data is governed by Google’s Privacy Policy and, for advertising specifically, Google’s ads and data page.
Third parties
The app relies on two third-party services: the Google Gemini API, which processes the photos and text prompts described above, and Google AdMob, described in the Advertising section. Both are governed by Google’s Privacy Policy.
Our server runs on Google Cloud Run. Standard server logs record request metadata such as timestamp, IP address and endpoint, retained for operational and abuse-prevention purposes. These logs do not contain your photos or your meal history.
What we do not do
- No accounts, no sign-in, no email collection.
- No analytics or behavioural tracking SDKs beyond AdMob, described above.
- No selling or sharing of personal data with data brokers.
- No tracking of you across other apps or websites outside of AdMob’s advertising described above, which you can opt out of via the tracking prompt.
Health information
Calorie and nutrition figures shown in the app are AI estimates and may be wrong. They are for general interest only and are not nutritional, dietary or medical advice. Do not rely on them for any medical purpose. Consult a qualified professional for health decisions. The app does not read from or write to Apple Health.
Children
The app is not directed at children under 13 and we do not knowingly collect personal information from them.
Your choices
- Camera and photo access can be revoked at any time in iOS Settings; the other three tabs continue to work.
- Location access can be revoked at any time; restaurant suggestions fall back to a default district.
- Ad tracking can be turned off any time in iOS Settings → Privacy & Security → Tracking; ads keep showing, just without personalization.
- Deleting your data — remove individual meals with the 🗑 button, or delete the app to erase everything at once. Because your log is only on your phone, there is nothing for us to delete on our side.
Changes
If this policy changes materially, the updated version will be posted at this address with a new “last updated” date.
Contact
Questions about this policy: tommysmsteam@gmail.com