Privacy

Who makes Atwater

Atwater is made by Try-Catch (try-catch.co), “we” on this page. Questions about your data go to privacy@atwater.app.

What Atwater keeps

Your email address, to sign you in. What you log: meals and their photos, drinks and water, weigh-ins and workouts. What you tell it about yourself to size your goals: height, birth year, sex, weight, goal weight, activity, and any health conditions you pick. Your goals and settings. A record of the AI requests you make, to keep within limits.

What Atwater does with it

It runs the app for you with it. If you say yes to “Help make Atwater better?” (asked when you sign up, and changed in Profile › Settings), it can also use what you log and send to make Atwater better and build new things, as the terms say: checking how well the AI reads real meals, training AI models, and sharing or licensing it with others once your name, email and anything else that says who you are have been taken out. Say no, and it's used only to run the app for you. Health data from your phone is never part of this.

Health data from your phone

If you connect Health Connect in the Atwater app for Android, Atwater reads, and never writes: your weight, your workouts with the calories your watch or apps measured during them, and each day's steps and active calories. You choose which of these it can read, in Health Connect, and can take any of them away there at any time.

The app sends what it reads to Atwater about once an hour, over an encrypted connection, with a key only that phone has. Atwater uses it only to show it back to you and to work out your goals: a workout's burn, the day's calories it earns back, your weight trend, and your steps on Home. Health data is never used for advertising, never sold, and never shared with anyone else.

It isn't sent to an AI model either, with one exception: the calorie goals Chat answers from, and Today's coach card is written from, include what that day's workouts earned back, as one total, so they match Home. Your weigh-ins, steps and the workouts themselves from the phone are never part of it.

Disconnecting the phone (Profile › Health data) stops the reading and revokes its key. What it already sent stays in your log, where you can delete any workout or weigh-in.

AI

When you log a meal by photo or in words, or a workout Atwater can't read by itself, that photo or text goes through an AI gateway (OpenRouter) to a model that reads it, and the answer comes back to you as a draft to check. Nothing an AI reads is saved as fact until you save it. Your health data from the phone is not part of these requests.

To pick which food in the database each thing in the meal is, the words the model read for it (“scrambled eggs”, a brand if it has one) and the database foods it might be go to TypeSafe's Jev, with nothing that says who you are and never the photo.

To suggest what you might log next, Log food's Suggested sends a model the names and foods of your saved and often-logged meals, when you've had them, today's meals and the workouts you typed, and what's left of today's goals, each morning and after your log changes. Its numbers come from your log, not the model. You can turn it off in Profile › Settings.

To write Today's coach card, a model is sent what the app worked out about your day: your eating profile, any health needs or health goal you gave, whether you're working to lose or gain weight (never the weight itself), today's meals, where each of your goals stands, and the app's own advice. Its numbers come from your log, not the model, and the app's own words show until it has written them.

Reports and your screen

So a problem you report shows what happened, the app keeps a recording of its own screen for the last few minutes: what it showed, and what you tapped and typed in it. The recording stays in your phone's memory, never in its storage, never shows other apps, and is gone when you close Atwater or sign out.

Nothing of it is sent unless you send feedback from Chat: Send it and Report it send your words with a recording of your last few minutes in Atwater, what you typed included, and Words only sends just your words. A meal photo shown from your log is left out of the recording; one you've just taken can be in it. The people who build Atwater see what you send, and so does Claude, the AI they use to look into reports.

Who else sees it

No one who can tell it's yours, apart from the services that run Atwater for us: Neon (the database and sign-in), Render (the servers), Tigris (photo storage), OpenRouter (the AI gateway, for meals and workouts you ask it to read), TypeSafe (picking each meal item's food), Resend (sign-in emails, and reports passed on to the people who build Atwater) and Anthropic (Claude, which the people who build Atwater use to look into reports and fix problems, and which can read what's in Atwater to do that). Each keeps your data only to provide its service.

Age

Atwater is for people 18 and over. When you sign up it asks when you were born and keeps only the year, which your goals are sized from. An account for someone younger is deleted at once, with what was entered for it. If you believe someone under 18 has an account, email privacy@atwater.app and we'll delete it.

Your choices

You can change or delete anything you logged. To ask what Atwater holds about you, email privacy@atwater.app from the address you sign in with. Using Atwater is also covered by its terms.

Deleting your account

In Atwater, open Profile, then Settings, and tap Delete account at the bottom. Your account and everything in it are deleted at once: your meals and their photos, foods, goals, weigh-ins, workouts, water, chats and the reports you sent. What running Atwater cost is kept as a number that says nothing of who you are. The database keeps a day of history to recover from mistakes, so a copy lasts one more day there, then it's gone too. What Health Connect holds stays on your phone, where its own settings remove it.

Can't open the app? Email privacy@atwater.app from the address you sign in with, and it's done within 30 days.