Skip to content

What Cress keeps, where, and why, stated as plainly as the nutrition numbers are. Last revised 7 September 2026.

Data used to provide Cress

Cress stores the information you choose to put in your account so your diary works across your devices. There are no advertising trackers or advertising profiles. Browsing the food catalogue does not require an account.

Account information includes your email address, account identifier, sign-in provider and authentication records. If Google or Apple supplies a name or profile metadata, our authentication service may retain it with your sign-in identity.

Your account can include foods, amounts, meals, supplements, water, weight and other body measurements, nutrition goals, preferences, imported records and progress photos you save. These are used to show your diary, calculate its nutrition totals and provide the features you request.

Where your information goes

Supabase provides account authentication, database storage and private photo storage. Vercel hosts the website. Resend delivers account emails and processes their recipients and delivery events. Requests use HTTPS; database and storage access rules restrict personal records to their account. Authorized service operators can access information when needed to run, secure or support the service.

These services process technical information such as IP addresses, request times, URLs, response status and sign-in events to operate Cress, diagnose failures and prevent abuse. Security logs and backups follow the providers’ retention periods. They are not used for advertising.

Appearance, icon, haptics and the Apple Health connection switch are device preferences. Authentication credentials are retained on your device to keep you signed in; signing out clears the app’s session and personal data caches.

Sign-in providers

Google or Apple sign-in uses that provider to verify your identity and Supabase to create your Cress session. Cress does not ask for access to your email inbox, contacts or files. The provider applies its own privacy policy to its sign-in service.

Apple Health

Connecting Apple Health on iPhone is optional and requires your permission. Cress can write logged nutrition, water and weight to Health. With read permission, it can import water and weight samples, including their dates and source identifiers, into your Cress diary. Imported records are stored in your Cress account and can sync to your other devices.

You can turn the connection off in Cress or change permissions in Apple Health. This stops future syncing; it does not erase records already saved in either app. Health information is never used for advertising or marketing.

Camera and photos

Barcode, nutrition-label and meal recognition process the image on your device. Recognition images are not sent to an external inference service. The web app may download recognition software and model files from jsDelivr, Hugging Face and Project Naptha; those hosts receive the normal technical details of the download.

Progress photos you choose to save are different: Cress compresses them on your device and uploads them to private account storage so you can view them across devices. They are not public. Access uses temporary signed links; anyone you give a working signed link to can view it until it expires.

Feedback and shared foods

Feedback you submit, including its text and account identifier, can be read by Cress administrators to respond to problems and improve the app. Foods you deliberately share may become part of the public catalogue. Private foods and diary entries are not published as feedback or contributions.

Advertising and contributions

Your personal information is not sold, rented or shared for advertising. Optional contributions unlock no app features. Apple or the external payment service processes payments under its own terms; Cress does not receive your card details.

Your control

Export your diary from Settings → Account → Export full diary. The export includes recorded diary data and saved progress photos; it is not a backup of authentication credentials or every account preference.

Delete your account from Settings → Account. This removes your account, personal diary records and saved progress photos from active service storage. Food and supplement catalogue records may remain without your account identifier so existing references stay valid; private records remain hidden from other accounts. Copies in existing backups and security logs may remain until their retention periods expire. Copies previously exported by you or written to Apple Health remain under your control.

Contact

Email support@cress.food or send questions through Feedback in Settings. More help is available at Cress support. Every catalogue data source and its licence is listed under Sources.

Cress is loading