This Privacy Policy explains how Twenty Four Hour Preparing Meals (licence No. 282892, Ministry of Commerce and Industry), Doha, Qatar, the operator of the OFITO app ("we", "us"), collects, uses, shares and protects the personal data of people who use the OFITO mobile and web apps and related services (the "App"). We are responsible for this data.

Qatar's data protection law. We process personal data in line with Qatar's Law No. 13 of 2016 on the Protection of Personal Data Privacy. Health, body and activity data are personal data of a special nature: we process them only with your explicit consent and only for the features you use. You can withdraw this consent at any time by e-mailing [email protected] or by deleting your account, and you can switch off each optional feature (connected devices, AI food logging, sharing) in the App; we then stop using that data for those features (and may no longer be able to provide them).

1. Information we collect

We collect only what we need to run the service. We do not sell your data.

You give us directly:

• Account details — first name, last name, e-mail and password (stored as a one-way hash; we can never see it).
• Phone number — for one-time login codes, delivery calls and WhatsApp service messages.
• Delivery address — building number, street, zone, the map pin (latitude/longitude, only if you pin your location) and any delivery instructions you add.
• Profile and body details — date of birth, sex, height and weight, used to estimate your calorie and protein targets. Your date of birth also confirms that you are 18 or over.
• Diet and health details — diet type (for example classic, keto or vegetarian), allergies, calorie target and weight goal, used to choose suitable meals for you.
• Food and training logs — the foods you log (by typing, barcode, the food library, voice or photo), your workouts, weigh-ins, body-composition results (such as InBody) and weekly check-ins.
• Payment details — in the iPhone app you pay for meal plans in cash or by Fawran bank transfer, and for OFITO Premium through Apple. Where card payment is offered on our website, the payment gateway (for example Tap or Dibsy) handles your card; we never store your full card number, only a token and the last four digits.
• Photos you add — only when you choose to:
  • A meal photo you scan (to estimate calories) and a photo of a body-composition sheet such as InBody (to fill in the numbers for you): the photo is sent to Anthropic's Claude service, which reads it for us; you check the result before anything is saved. We do not keep these photos.
  • Progress photos: stored privately (never on a public link), with the location and camera details removed from the file; seen by you, and by your coach only if you choose to share them.
  • Photos on a meal rating: seen by our kitchen team so they can fix a problem.
  • Your profile picture: shown in your account.
• Support requests — the messages you send us in Profile → My requests or by e-mail, and our replies.
• WhatsApp messages — the messages you send to our WhatsApp line. An AI assistant (Claude by Anthropic), which tells you it is an AI, may help answer them and keeps short notes of what you tell it (such as your goals and allergies) so it can help you next time; our team can see the conversation.

Collected automatically:

• Usage logs — meal selections, order history, delivery dates and times. Used to run your subscription and reconcile invoices.
• Device info — operating system, app version and language. Used for support and to fix crashes.
• Push-notification tokens (only if you allow notifications) — your device's Apple push token (APNs), with the app version and language, so we can send notifications in your language (see section 3).

From connected devices and health apps (only if you connect them):

• Which services — Apple Health (on iPhone), WHOOP, Oura and Withings. Garmin and Strava reach the App only through Apple Health. You choose each one in Profile → Connected devices; nothing is read until you approve it on that service's own screen.
• What we read — steps, active and resting calories, exercise minutes, sleep duration, resting heart rate, heart-rate variability (HRV), the device's recovery or readiness score, workouts the device recorded (type, time, duration, distance, heart rate), and scale readings (weight, body fat, muscle, water).
• Apple Health in particular — we only read the data types above, and only the ones you allow on Apple's own screen; we never write anything to Apple Health. Data from Apple Health is never sold, never shared with advertisers, data brokers or information resellers, and never used for advertising or marketing.
• What we use it for — showing it to you, inside your own account: your activity and sleep beside your meals, your workouts in your training history, your scale readings in Body. That is all. It never changes your meals, portions, calorie target or deliveries, and it is never used for advertising.
• Not used for AI — data from connected devices and health apps is never sent to our AI assistant or any AI model, and is never used to train one.
• Who can see it — you. We never show it to the kitchen, to drivers or to advertisers, and never sell it. Two things are in your hands, both off until you act: (1) you can create a time-limited, read-only link for your coach or doctor in Profile → Share with coach / doctor and choose what it includes (you can stop it at any time and see when it was opened); (2) in Train together you can switch a category on for one friend at a time, and off again. Entering a coach's code gives you that coach's plan; it does not give the coach any of your data.
• How it is kept — the access keys a service gives us are stored encrypted; the data sits in our own database.
• Stopping — tap Remove on the device in Profile → Connected devices (or revoke access in that service's own app): we stop reading and delete everything that device sent. Deleting your account deletes it too.

Food logging by voice or photo (AI):

• Voice — you tap the microphone and speak. Your iPhone turns your speech into text using Apple's speech recogniser (on the device when Apple has the language on it; otherwise Apple's service, as for Arabic and some English). We never receive or keep your recording. Only the text is sent to our servers and from there to an AI service to work out the foods and amounts. Before that, we replace your name, phone number, e-mail, customer code and address in the text with placeholders. You are asked for your OK first, and you can withdraw it at any time in Profile → Privacy & consents.
• Photos — a meal photo or a body-composition sheet you choose to scan is sent to the AI service to be read, after you agree to it. We do not keep the photo. You check the result before anything is saved.
• Which AI service — Anthropic (Claude), which does not use this data to train its models. If we start to use another provider for these features, we will name it here before it receives any data. Health data from connected devices and Apple Health is never sent to an AI service.
• Estimates — calorie and nutrient figures from voice, photos and the food library are estimates, not measurements.

Train together, shared workouts and Messages (only if you use them):

• Friends — adults only (18+, confirmed by the date of birth you give). You add a friend by a private invite link or code; there is no search for strangers. Your friend sees your first name and the initial of your last name. You choose, friend by friend, what they can see (for example finished workouts); you can change it or stop it at any time, and Stop sharing with everyone switches all of it off.
• Cheers and sent workouts — cheers and the short note on a workout are chosen from fixed phrases; there is no free-text chat between users. A workout or weekly plan you send arrives as a copy; the receiver can save it, report it, or block you.
• Messages — the in-app inbox for notices from your kitchen and from OFITO, delivery updates and workouts friends sent you (kept 180 days).
• Safety — you can block anyone and report a person or a shared workout. Our team reviews reports; urgent ones (for example threats or anything involving a child) are handled first. We keep reports as a safety record even after an account is deleted.
• Who viewed — we keep a log of when a friend or a share link viewed your data, so you can see it.

2. How we use it

• Run your subscription: prepare meals that suit your diet and allergies, and deliver them.
• Estimate your calorie and nutrient targets and show your progress, from the details and logs you give us.
• Send you service messages — order confirmations, delivery updates and invoices — by e-mail, WhatsApp and in-app notifications.
• Provide customer support when you contact us.
• Comply with Qatar's tax and accounting laws (invoices and payment records are kept for the period the law requires, even after you delete your account).
• Improve the App — using only aggregated figures (for example "X% of customers chose option 1 on Tuesday"), never data that identifies you.
• Keep the App safe — review reports, prevent misuse and protect accounts.

3. Notifications and your choices

• Your inbox — inside the App we keep messages for you for 180 days: replies from your kitchen or our team, updates about your deliveries and plan, and — only if you turn them on — offers from kitchens and our own news and offers.
• Push notifications — on iPhone only after you allow them on Apple's prompt. Tapping one opens the related screen. The text on your lock screen never contains health, allergy or payment details; a reply to a request says only that there is a new reply.
• Offers and news need your consent — they are off until you switch them on in Settings → Notifications. When you do, we record the time and the version of the consent text you agreed to. You can switch them off at any time there (or in your iPhone's Settings). Offers go out only between 08:00 and 22:00 in your country's time, at most once a day from a kitchen and three times a week in total. To choose which offers you see, we use only your plan and purchase status, your country, your language and your app version — never your health, body or allergy details or your Apple Health data.
• Who can message you — a kitchen can send notifications only to its own customers, and we review every kitchen notification before it is sent.
• Device tokens — kept only to deliver your notifications, including the offers and news you switched on, and to tell you when an app update is available; switched off when they stop working; never used for tracking and never shared with advertisers.

4. Sharing

We share personal data only with those who need it to run the service:

• The kitchen you order from (at launch, our own kitchen, Twenty Four Meals) — your name, meal choices, allergies and delivery details, to prepare your meals.
• Our delivery drivers — name, address and phone, for that day's deliveries only.
• The coaching team of the kitchen you subscribe to — to coach you, they see what you log yourself in the App (your workouts, the weigh-ins and InBody results you enter, your weekly check-ins) and the progress photos you choose to share, only while sharing is on. They never see data from connected devices or health apps unless you put it in a share link you create. Coaches outside the kitchen (whose plan you add with a coach code) receive none of your data.
• Payment providers — Apple for OFITO Premium, and the card payment gateway (for example Tap or Dibsy) when you pay by card on our website; they handle payment data under their own privacy terms.
• E-mail and messaging providers (Resend, which sends our e-mails; Cloudflare, which routes e-mails sent to us; Google Gmail, which holds the mailboxes that receive them; Meta WhatsApp Business) — your e-mail address or phone number and the message, to deliver it.
• Apple — push notifications (device token and notification text), speech recognition when you use the microphone, and App Store purchases.
• Anthropic (Claude) — the meal photo or body-composition sheet you choose to scan and the text of a voice entry you make (names, phone numbers and other identifiers removed first), to read them; the messages you send to our WhatsApp line, to help answer them; and the records involved when we fix a problem or answer a support request, because our team also uses Claude to maintain the service. Anthropic does not use this data to train its models. We do not keep the photos. Another AI provider would be named here before it is used for these features.
• RevenueCat — to run Premium subscriptions: your account ID and your purchase status.
• Capgo — to deliver app updates: an install ID, the app version and update results. No health or food data.
• WHOOP, Oura, Withings — only after you connect them yourself; we receive what you allowed on their screen.
• People you choose — a coach or doctor through a share link you create, and friends through the switches you set (see above).
• Our hosting and backup providers (Hostinger for our servers, Cloudflare for encrypted backups) — to store and run the service (see section 5).

We do not share your data with advertisers, marketing networks, or anyone who uses it for profiling or resale. We may disclose data where the law or a competent authority in Qatar requires it.

5. Where your data is processed

Our servers are hosted by Hostinger and our backups are stored with Cloudflare, outside Qatar. Some of our providers also process data outside Qatar — for example Anthropic (AI features, our WhatsApp assistant and maintenance), Google (our mailboxes), Resend (our e-mails, including the kitchen's daily production sheets; stored in the United States for up to 30 days), RevenueCat and Apple. We send each provider only what it needs, under its data-protection terms, and we never send Apple Health or connected-device data to an AI model. We ask for your explicit consent to this processing outside Qatar together with your consent to health data.

6. How long we keep data

• We keep your data while your account is open.
• When you delete your account, we delete your health, body, food and training data, photos and connected-device data at once, and erase your name, phone numbers, e-mail, birthday and addresses. Your orders, invoices, payments, support requests and ratings stay in our records, linked to an anonymous "Deleted User" record.
• Invoices and payment records are kept for up to 10 years, as Qatar's Commercial Law requires for business records. Safety reports are kept for up to 3 years after the account they concern is deleted.
• Backups: daily copies are kept for up to 30 days and monthly copies for up to 12 months, then deleted; data you deleted disappears from backups when those copies expire.
• Messages in your in-app inbox are kept for 180 days. Share links end at the time you set or when you stop them. Data from a connected device is deleted when you remove the device.

7. Your rights

• Access — ask what we hold about you: [email protected].
• Correction — fix most details directly in the App, or e-mail us.
• Deletion — delete your account in the App at Profile → Delete my account, or by e-mailing us; section 6 explains what is deleted and what stays. Deleting your account cancels your meal subscriptions. OFITO Premium is billed by Apple: cancel it in your iPhone's Settings → your name → Subscriptions, because deleting your account does not stop it.
• Stop sharing — end any share link, switch a friend off, or choose Stop sharing with everyone, at any time.
• Portability — request a copy of your data in a machine-readable format.
• Withdrawal of consent — switch off offers, news or any notification kind in Settings → Notifications, turn push off in your iPhone's Settings, or reply STOP on WhatsApp; switch off AI features in Profile → Privacy & consents; remove a connected device; or withdraw your consent to health data by e-mailing us — at any time.
• Objection and questions — you may also object to processing and ask how your data is used.

We answer requests within 30 days. If you are not satisfied with our answer, you can complain to the competent data-protection authority in Qatar.

8. Security

Passwords are stored as one-way bcrypt hashes. Sessions use short-lived JWTs with rotating refresh tokens. Traffic between the App and our servers is encrypted with TLS. Database access is restricted to authorised staff. If a breach exposes personal data, we will notify the competent authority in Qatar and the affected customers within 72 hours of becoming aware of it.

9. Children

The App is for adults aged 18 and over. If we learn that someone under 18 has an account, we close it and delete its data, except records the law requires us to keep. A parent may add their child as a family member on the parent's own account; we use the child's details only for the child's meals, with the parent's consent. Contact [email protected] if you believe a person under 18 has an account.

10. Changes to this policy

We may update this policy from time to time. We will announce material changes in the App or by e-mail at least 14 days before they take effect. The "Last updated" date at the top shows the current version. This policy is issued in Arabic and English; if they differ, the Arabic text prevails.

11. Contact

Questions about this policy or your data?

• Privacy requests: [email protected]
• Other questions: [email protected]
• Responsible for your data: Twenty Four Hour Preparing Meals · licence No. 282892 (Ministry of Commerce and Industry) · Doha, Qatar

See also our Terms of Service.