Privacy Policy
Sushka, an Android app published by Engbet.
Last updated 24 August 2026
This policy describes what Sushka collects, why, who it is shared with, and how to get rid of it. It covers the Sushka Android app and this website.
The short version. Sushka stores your food diary so you can see it on your phone. It contains no advertising, no analytics and no tracking of any kind. The only outside services that ever see your data are Google Firebase, which stores it, OpenAI, which reads meal descriptions in order to estimate nutrition, and Open Food Facts, which is sent a barcode number when you scan one. Deleting your account deletes your data.
What is collected
| Data | Why |
|---|---|
| Your name, email address and profile picture, from Google Sign-In | To identify your account so your diary follows you between devices |
| Food entries: what you ate, the weight, the time, and the nutrition recorded at the time | This is the app's core function — your daily totals and history |
| Your food library: foods you have saved, with their nutrition, brand and photos | So foods you eat often can be logged again without re-entering them |
| Daily goals | To show progress against your targets |
| Photos you take or attach | To identify a food and to illustrate it in your library |
| Meal descriptions you type | To work out which foods you ate and in what quantity |
| A count of how many AI analyses you have run today | To enforce a fair-use limit. It records only your account identifier, the date and a number. |
Food and nutrition information is treated as health and fitness data. It is stored under your account and is not readable by other users.
What is not collected
- No advertising identifiers, and no advertising of any kind
- No analytics, usage tracking, behavioural profiling or crash-reporting SDKs
- No location data
- No contacts, calendar, call logs or messages
- No payment information — the app takes no payments
Who your data is shared with
Sushka does not sell data and does not share it for advertising. Data is processed by:
Google Firebase
Authentication, database (Firestore) and photo storage. Data is held in Google Cloud in the United States. Access is restricted by security rules so that only your signed-in account can read or write your records.
OpenAI
When you describe a meal or ask for a photo to be analysed, that text and those photos are sent to OpenAI's API to estimate nutrition, along with the names of foods already in your library so that existing ones can be reused rather than duplicated. Your name, email address and account identifier are not sent. The request travels through our own server so that no credentials are held on your phone. OpenAI states that data submitted through its API is not used to train its models.
Open Food Facts
When you scan a barcode, the barcode number alone is sent to the Open Food Facts database to look up the product. Nothing identifying you is included. Barcode detection itself happens on your device — the camera image is never uploaded for that purpose.
Google Play
If you install from Google Play, Google collects installation and crash information under its own privacy policy, independently of this app.
Permissions
- Camera — used only when you choose to photograph a food or scan a barcode. The app never opens the camera on its own. You can decline it and still use everything else.
- Internet and network state — to sync your diary and request nutrition estimates.
How long data is kept
Your diary, library and photos are kept until you delete them or delete your account. Meal drafts awaiting your review are temporary and are removed once accepted or discarded. The daily usage counter is kept per day for fair-use enforcement.
Your choices
- Delete any entry or saved food from within the app at any time.
- Ask for your account and all associated data to be deleted by writing to admin@engbet.io. Requests are actioned within 30 days.
- Ask for a copy of your data at the same address.
- Revoke the camera permission at any time in Android settings.
If you are in the United Kingdom, the European Economic Area, or another region with equivalent law, you have rights of access, correction, erasure, restriction, portability and objection. We process your data to provide a service you asked for, and on your consent where that applies. You may withdraw consent by deleting your account.
Children
Sushka is not directed at children under 13, and accounts are not knowingly created for them. If you believe a child has provided data, write to us and it will be removed.
Security
Data is transmitted over encrypted connections and stored in Google Cloud. Access is enforced per user by server-side security rules rather than by the app. Credentials for third-party services are held on the server and never shipped inside the app.
Changes
If this policy changes materially, the date above will be updated and the revised policy posted here before the change takes effect.
Contact
Engbet — admin@engbet.io