Food Diary privacy
Updated: 18 October 2026
Food Diary is Danis’s free, invitation-only hobby service for keeping a personal diary through ChatGPT.
What is stored and why
Food stores your account ID, invitation display name and timezone; meal names, portions, dates, notes and supplied calories, protein, fat, carbohydrates and fiber; favorite foods and aliases; optional calorie/protein goals; and optional body weight, body-fat readings, notes and weight plans. Nutrition and body measurements can reveal sensitive information about your health. Supply them only if you want Food to store and return them to you through ChatGPT.
Food receives tool inputs sent by ChatGPT and returns requested diary data to that connection. It does not receive your entire chat through these tools. Nutrition may be an estimate supplied by ChatGPT; Food itself does not look up or invent values. Unknown values remain unknown.
For sign-in and security, Food stores invitation hashes and their expiry/use status, passkey public keys and credential metadata, short-lived authentication flows, OAuth client registrations, grants and tokens. Your passkey private key and Face ID data are not sent to Food. A necessary browser cookie identifies the sign-in flow. Authentication throttling stores a hash derived from the connecting IP address and minute, with a request count, to limit sign-in abuse. Mutation receipts retain operation hashes and responses to make retries safe. Server errors may be logged for diagnosis.
Storage and recipients
The service runs on Cloudflare Workers; diary and account records are in Cloudflare D1, and OAuth state is in Cloudflare KV. Cloudflare processes network requests, including IP addresses and technical metadata. Danis administers the service and can access its stored data. Authorized connections, including OpenAI’s ChatGPT, receive the diary data requested through Food tools. Their own privacy and retention policies apply to data they receive. Food has no advertising or analytics integration in its application code and no data-sale feature.
Retention and controls
Diary, account and mutation-receipt records have no automatic retention deadline: they remain until the operator removes them or the service is reset or discontinued. This hobby service does not guarantee permanent storage. Sign-in flows expire after ten minutes; expired flows and two-minute rate-limit buckets are cleaned on later authentication requests, rather than on a guaranteed deletion schedule. Expired or consumed invitation records may remain. OAuth tokens expire or can be revoked; expiry does not erase your diary. Infrastructure logs and recovery copies may have separate provider retention; this application does not enforce an erasure deadline for those copies.
Through ChatGPT you can read and correct records, remove individual meals, favorites and body measurements, and clear current nutrition goals and the weight plan. Meals, favorites and measurements are logically deleted: hidden from normal reads but retained in storage. Cleared plans leave revision markers, and receipts can retain earlier responses. These controls are not permanent privacy erasure. There is no account-wide erasure tool or complete account export. You can request diary records through read tools, but that is not a full export. Disconnecting Food in ChatGPT does not delete Food’s stored records or copies already in ChatGPT.
For privacy questions and requests, contact the maintainer at fooddiary.support@gmail.com; see Support. Do not put diary data, passkeys or invitation links into public reports.