Sorati

Sorati privacy policy

Last updated: 15 October 2026.

Your diary stays on this device unless you turn on daily iCloud copies. Sorati stores your profile, body measurements and weight history, goals, meals, corrections, saved foods, workouts, routines, preferences and meal photos locally. You can use food search, manual logging and training without an account. Sorati has no diary server, advertising, tracking or automatic analytics uploads.

Apple Intelligence analysis runs on this device. Photos, descriptions and prompts are not uploaded in this mode. Availability depends on your iPhone, iOS version and Apple Intelligence readiness. An Apple analysis failure never automatically sends your data to ChatGPT.

ChatGPT is optional. Connecting opens OpenAI’s sign-in page and sends authorization information, including a random installation identifier, to OpenAI. Sorati receives account identifiers, an email address when supplied, and access, refresh and identity tokens. They are kept in this device’s non-synchronizing Keychain, outside diary exports and device backups. Connecting does not upload your diary, photos or workouts and does not give Sorati access to your ChatGPT conversations.

Before each ChatGPT analysis, you choose and confirm the photo or description to send to OpenAI with a food-identification prompt. Photos are resized and re-encoded before sending. Models describe foods and estimate grams; Sorati calculates nutrition from the bundled food bank and you review the result before saving. OpenAI processes the request under its applicable privacy policy, account controls and usage limits. Requests disable response storage, but this does not mean OpenAI has no processing or retention. Deleting a meal in Sorati does not delete copies or processing records held by OpenAI. Disconnect in Settings to remove local credentials and request remote revocation; if revocation cannot be confirmed, remove Sorati’s connection in ChatGPT settings too.

Barcodes check your saved foods first. When a product is not saved, scanning or typing its barcode sends only the barcode number, with the app/version User-Agent, to Open Food Facts. Like any remote server, it receives your IP address and processes requests under its own privacy policy. No profile, diary, workout or label photo is sent. Nutrition labels are read on this device; temporary label photos are discarded after reading. Foods you confirm are saved locally.

Diagnostics stay on this device for up to seven days, capped at 200 events, and are excluded from device backups and diary exports. They contain technical stages, safe error codes, app/OS versions and random attempt identifiers, not diary content, photos, account details or tokens. You can inspect, share or clear them in Settings. Nothing is sent automatically. If you contact support or share diagnostics, the recipient receives what you choose to send; avoid including private diary data.

You control retention. Meals, photos, profile and training records remain locally until you change or remove them or remove the installation’s data. Deletion may retain local internal markers and removes a meal photo when no other record references it. Exported backups include diary data and photos, so protect them and delete unwanted copies yourself. System device backups may also contain the diary. If you turn on daily copies in Settings, Sorati saves a backup file of the diary and photos to your own iCloud Drive each day and keeps the last seven for each device; Apple stores them under your Apple Account and the publisher cannot access them. Turning copies off stops new ones; delete existing copies in the Files app under iCloud Drive › Sorati. Sorati does not synchronize the diary between devices. Uninstalling the app does not guarantee that Keychain credentials or backups are removed: disconnect ChatGPT first and manage device backups separately. There is no Sorati server account to delete, and the publisher cannot retrieve your local diary.

Contact and your choices

Use the private contact details shown on the published policy page for privacy questions, corrections or deletion requests about information you sent to support. Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, and to complain to a data protection authority. The publisher cannot access or recover your on-device diary; requests about OpenAI or Open Food Facts processing should also be directed to those providers. Do not post credentials, meal photos or diary backups in public issue reports.

Website and policy updates

This website has no backend, accounts, advertising, analytics scripts, tracking cookies or signup form, and it never receives your app diary. Like any website, its hosting provider sees ordinary request information, such as IP address and browser, when you visit.

Changes will be published here with an updated date. App permission prompts and per-request consent still apply; a policy update does not itself authorize an upload.

Third-party privacy information

Publisher and private contact

Sorati is the publisher name used for this app. For support and privacy requests, email hello@sorati.app. The app’s App Store product page identifies its seller.

Support correspondence is used to respond to your request and resolve the issue. Keep it limited to what is needed. Correspondence is retained while a request is open and as needed for follow-up or legal obligations; you can request deletion using this contact. Your email provider and the publisher’s email provider also process correspondence under their respective policies. Do not attach diary backups or photos unless you intend to share them.