Privacy Policy

Last updated 10 October 2026

Pickt ("we", "us") helps you choose meals that fit your goals. We built it to collect as little as possible: there's no sign-up, and we never ask for your name, email or password in the app. This policy explains what we collect, why, who we share it with and your choices. It applies to the Pickt app and pickt.com.au, and is written to meet the Australian Privacy Principles in the Privacy Act 1988 (Cth) and the New Zealand Privacy Act 2020.

The short version

• Your data is tied to a random ID on your phone, not to your name or email.
• We don't keep a history of where you've been.
• We have no ads, analytics or tracking tools in the app, and we never sell your data.
• Your body details, allergies and preferences never go to Google or any AI provider.
• You can delete everything from the app at any time.

1. What we collect

Information you give us

• Setup answers. Country, kilojoules or calories, sex, birth year, height, weight, activity level and goal (lose, maintain or gain). If you choose "Just browse", we don't ask for any of these.
• Your targets. Daily kilojoules, protein, carbs and fat, and meals per day, whether we calculate them or you set them.
• Diet and allergies. Diets (such as vegetarian or halal), allergies, foods you avoid and cuisines you like.
• Optional questions. How often you eat out, how you heard about us, what you find hard, how you like to choose and your favourite brands. We use these to personalise the app and to understand what to build next.
• Things you do in the app. Meals you log, restaurants you save, your home meal plan and shopping list ticks.
• Reports. When you tell us a menu item is wrong, we keep the item and the reason you give.
• Menus you add. If you photograph or paste a menu, we use it to estimate that restaurant's nutrition (see section 4).
• Waitlist. If you join the early-access list on our website, we keep your email address and which form you used.
• Emails to us. If you contact support, we keep your message and email address to reply.

Information collected automatically

• A random device ID. It's created the first time you open the app and stored securely on your phone. We store a scrambled (hashed) copy, plus when it was created and last used.
• Location. See section 3.

We don't use analytics, advertising, crash-reporting or tracking tools, and we don't store your IP address. Like any website or server, our hosting provider may briefly see it to deliver the service.

2. Health information

Your height, weight, goals, diet and allergies can be health information, which the law treats as sensitive. We collect it only with your consent, which you give during setup, and only to work out your targets and rank menus for you. You can use Pickt without it by choosing "Just browse".

3. Location

With your permission (only while the app is open), the app sends your location, or the spot you're looking at on the map, to our server to find nearby restaurants. We don't store it against your device ID or keep a location history.

To save on lookups, we cache search results for an area of about 1 km, together with the search words, for up to 30 days. This cache isn't linked to you or any other user. If we don't have results for an area, we send the location and search words to Google to find restaurants.

You can turn location off in your phone's settings and search by suburb instead.

4. Menu photos and AI

We use AI models to estimate nutrition for restaurants that don't publish it, and to write "How to order" tips.

• Menu estimates. We send the restaurant's name and country with its menu: text from its website, text you paste or a photo you take. Photos are processed in memory and not saved; we keep only the menu items and estimates, which every Pickt user can then see.
• "How to order" tips. We send the restaurant, the dish and its nutrition, and your general goal (lose, maintain or gain). Nothing else about you. Tips are shared with other users who have the same goal.

Depending on availability, these requests go to Anthropic, Google (Gemini), Groq, OpenRouter, Mistral or OpenAI. They never receive your device ID, body details, allergies, preferences or location. Please don't photograph people or personal details along with a menu.

5. How we use your information

• To show restaurants near you and rank their menus for your goals, diet and allergies.
• To calculate and update your targets as you log meals.
• To fix incorrect menu data you report.
• To send your early-access invite and launch news, if you joined the waitlist.
• To understand, in aggregate, what people need so we can improve Pickt.
• To keep the service secure, prevent misuse (for example, rate limits on menu scans) and meet our legal obligations.

We don't use your information for advertising or sell it to anyone.

6. Who we share it with

• Hosting. Our server and database are run by cloud hosting providers who store data for us and aren't allowed to use it for anything else.
• Google Maps Platform. Receives map and search requests (a location or search words) to find restaurants, and restaurant names and addresses to look up photos, opening hours, websites and phone numbers. Restaurant photos and website icons load from Google straight to your phone, so Google sees your device's internet address when they load.
• AI providers. As described in section 4.
• Restaurant websites. Our server, not your phone, visits them to read their public menus.
• Apple. Apple distributes the app and may give us general download and crash statistics under its own privacy policy.
• When the law requires it, or to protect people's safety or our rights.
• If Pickt is sold or merged, the new owner would take on this policy.

7. Data stored overseas

Some of our providers, including Google and the AI providers, are based in or process data in the United States and other countries. Our hosting may also be outside Australia. We choose providers with strong security and take reasonable steps so they handle data in line with the Australian Privacy Principles. The personal details we keep (your profile and logs) are only sent where our hosting is; AI and Google requests contain no personal details.

8. How long we keep it

• Your profile, targets, preferences, logs, favourites and plan: until you delete your account.
• Reports you send: kept to improve menu data, but unlinked from you when you delete your account.
• Area search cache: up to 30 days. Google restaurant details and photo references: up to 30 days.
• Waitlist emails: until launch news is no longer relevant or you ask to be removed.
• Recent searches: only on your phone.

9. Security

Data travels over encrypted connections. Your device ID is kept in your phone's secure storage and only a hashed copy is held on our server. Access to our systems is limited. No system is perfectly secure, so if a breach is likely to cause serious harm, we'll tell you and the regulator as the law requires.

10. Your choices and rights

• See or change your details: in the app's Settings at any time.
• Delete everything: Settings → Account → Delete account. This permanently removes your profile, targets, preferences, meals, favourites and plan from our server straight away.
• Leave the waitlist or get a copy of your data: email us. Because the app has no accounts, we may need your device ID (shown in Settings) to find your data.
• Location, camera and photos: turn them on or off in your phone's settings.

11. Children

Pickt is for people aged 13 and over. If you're under 18, please use it with a parent or guardian's help. If you think a child under 13 has given us information, email us and we'll delete it.

12. Changes

If we change this policy, we'll update the date above. If a change is significant, such as using your information in a new way, we'll tell you in the app first.

13. Questions and complaints

Email support@pickt.com.au. We'll reply within 30 days. If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner or, in New Zealand, the Office of the Privacy Commissioner.