Last updated: 26 May 2026
This privacy policy describes how Sprig ("we", "us", "our") collects, uses, and protects your information when you use our mobile application (the "App"). We've tried to write this in plain language. If anything is unclear, email us at support@trysprig.co.
Sprig is a mobile application that helps users track their nutrition through AI-powered photo recognition, manual logging, and coaching. The app is operated as an independent business based in the United Kingdom.
When you create an account, we collect your email address and a securely hashed password. If you sign in with Apple or Google, we receive your email and a unique identifier from those providers. We do not receive your password from sign-in providers.
To make the app useful, you provide information about yourself, including:
This information is sensitive. We treat it accordingly. See section 5 for how we secure it.
When you photograph a meal, the image is sent to our AI provider (OpenAI) for analysis. The photo is processed to identify the food and is not retained by the AI provider for training purposes, in accordance with OpenAI's data policy for API users. We do not store the photo on our servers after analysis is complete.
We collect basic usage information to keep the app running, including:
We do not use third-party analytics SDKs or advertising trackers.
If you subscribe to premium, we receive a confirmation of your subscription status from Apple or Google. We do not see your credit card details. Subscription billing is handled entirely by Apple App Store or Google Play.
We use the information we collect to:
We do not sell your information. We do not share it with advertisers. We do not use it for any purpose other than running the app.
We use a small number of trusted service providers to run the app. Each one only receives the information needed for their specific function:
We have data processing agreements with these providers where required by law.
Sprig follows industry-standard security practices:
No system is perfectly secure. If we ever experience a data breach affecting your account, we'll notify you within 72 hours as required by applicable law.
Depending on where you live, you may have the following rights regarding your personal information:
You can exercise most of these rights directly in the app under Settings → Privacy. For anything else, email us.
California residents have additional rights, including the right to know what categories of information we collect, the right to delete personal information, and the right to non-discrimination for exercising these rights. We do not sell personal information.
Sprig is intended for users aged 13 and older. We do not knowingly collect information from children under 13. If you believe we've collected information from a child under 13, please contact us and we'll delete it.
Some jurisdictions set this minimum age higher (16 in parts of Europe). If you're below the age of digital consent where you live, please don't use the app without a parent or guardian.
We keep your account information for as long as your account exists. When you delete your account through the app, we deactivate it immediately and permanently delete your data within 30 days. The 30-day window exists so you can recover the account if you change your mind.
Some information may be retained longer if required for legal, accounting, or security reasons.
Your data may be processed in countries outside your country of residence, including the United States (where OpenAI and some Supabase regions are located). We rely on standard contractual clauses and other lawful mechanisms to protect your data during these transfers.
We may update this privacy policy from time to time. When we do, we'll update the "last updated" date at the top and, for significant changes, notify you in the app. Continued use of Sprig after an update constitutes acceptance of the new terms.
For any privacy-related questions or to exercise your rights, contact us at:
Email: support@trysprig.co
We aim to respond to all privacy requests within 30 days.