Last updated 19 October 2026
This policy explains exactly what Koala collects, why, who it goes to, and how to erase it.
Koala is an iOS app published by Actual Occasions LLC. For anything in this policy, including any request about your data, write to anonymous@actualoccasions.com. For UK and EU data protection law, we are the data controller for the information described below.
The first time you open the app it quietly creates an anonymous account for you. This is a randomly generated identifier. It is not linked to your name, your email, your phone number, or your device's advertising identifier, and there is no signup screen. Its only job is to keep your profile and your history attached to you across sessions.
To size your protein target and pick food that suits you, the app asks about you during setup and in Profile. Depending on what you answer, your profile can hold your sex, age range, height, current weight, starting weight and goal weight; which GLP-1 medication you take, where you are with it (starting, losing, maintaining or coming off), the weekday of your shot, whether your dose changed recently, and any side effects you are having; your appetite, how many times a day you eat, whether you cook and how you like to eat; the foods you avoid and any allergies; how active you are and whether you do strength work; what matters most to you; and where you heard about Koala.
Most of this is health related information. Under UK and EU law it is a special category of personal data, and we process it only on the basis of your explicit consent, which you give by choosing to enter it. Every answer is optional, you can change it in Profile, and you can withdraw consent at any time by clearing it or deleting your account. Your medication and its details are never shown anywhere in the app's public surfaces, never shared, and never used in marketing.
Weigh-ins you enter, the results of the weekly strength check, and the walk and strength buttons you tap on Today.
Koala never writes to Apple Health, and it only reads after you tap to connect it. During setup it reads your height, weight, date of birth and sex so it can skip those questions; the answers it fills in are saved to your profile exactly as if you had typed them. It reads your steps and strength workouts to draw the Movement petal, and your lean body mass, if a scale writes it, to show on the Keep page. Steps, workouts and lean mass are used on your phone and are not uploaded. Data from Apple Health is never used for advertising, never sold, and never sent to the AI model.
Linking Sign in with Apple is entirely optional and the app works fully without it. If you do link it, Apple sends us the email address you approve, which may be one of Apple's private relay addresses that hides your real one. We use it for a single purpose: restoring your subscription and history if you reinstall the app or move to a new phone.
Purchases are processed by Apple. We never see or receive your card number, billing address, or any other payment detail. We receive only whether your subscription is currently active, by way of Superwall, which shows the subscription screen and manages entitlements for us.
If you tell us a product is missing or wrong, we store the barcode, whatever name you typed, the reason, and your anonymous account id so we can tell reports apart.
Reading a plate, a menu or a line you type, and writing the explanation under a scan's score, is done by Claude, an AI model made by Anthropic. This is on by default. You can turn it off or back on at any time in Profile, under Privacy. When it is off, plates, menus and typed lines do not work and labels still scan.
When it is on, your phone sends the request to our server, and our server sends it to Anthropic and returns the answer. What goes to Anthropic:
What never goes to Anthropic: your name, your email, your account id, which medication you take, and anything read from Apple Health. Anthropic processes these requests under its commercial terms, does not use them to train its models, and may keep them for a limited time for safety and abuse monitoring under its own policy. We do not store your plate photos. To avoid reading the same thing twice, we keep the answer to a plate or menu against a fingerprint of the input, which carries no link to you.
We use a small number of service providers. They process data on our instructions only and cannot use it for their own purposes.
| Provider | What it handles | What it receives |
|---|---|---|
| Supabase | Database, anonymous authentication and our server functions | Your account id, profile, history, and the requests the app sends to be read |
| Anthropic | The AI model that reads plates, menus and typed lines, and writes explanations | Only what is listed under How the AI reading works, and only while it is turned on |
| Superwall | Subscription screen and entitlements | Your account id, subscription status, and basic device details such as OS version and locale |
| Apple | Payments, and Sign in with Apple if you link it | Payment details, which we never see |
| Open Food Facts | Product and nutrition lookup | The barcode only |
| USDA FoodData Central | Product and nutrition lookup | The barcode only |
When the app looks up a product, it sends the barcode number and nothing else. Your account id, your profile and your allergies are never included in those requests, so neither database can associate a lookup with you.
If you are in the UK or the EU, our legal bases under the GDPR are:
Your profile and history stay until you delete them. There is no fixed expiry, because a history that silently erased itself would make the app worse. Plate photos are not kept at all.
When you delete your account, your profile, everything you logged, your scans, your menu and plate reads, and your missing product reports are removed from our database immediately and permanently. Cached nutrition facts for a barcode and cached answers for a plate or menu are kept, because they carry no link to you.
Wherever you live, you can ask us to give you a copy of your data, correct it, delete it, export it, restrict how we use it, or object to our using it. If you are in the UK or the EU you may also withdraw consent at any time and complain to your data protection regulator, which in the UK is the Information Commissioner's Office. If you are in California you have the rights to know, delete, and correct, the right to opt out of sale or sharing, which is moot because we do neither, and the right not to be treated differently for exercising any of them.
The fastest way to erase everything is in the app: open Profile, then Delete account. It is immediate and it is not recoverable. For anything else, email anonymous@actualoccasions.com and we will respond within 30 days. We do not charge for this.
Your data is held on infrastructure operated by our providers, which may process and store it in the United States and other countries outside the UK and the EEA. Where that happens, the transfer is covered by Standard Contractual Clauses approved by the UK and EU authorities, or an equivalent approved safeguard.
Every table enforces row level security, so a given account can only ever read or write its own rows, and that rule is applied by the database itself rather than by the app. All traffic runs over TLS. Your session token is held in the iOS Keychain. No system is perfect, and we will not claim otherwise, but we do not hold payment details or passwords, which removes the two things most worth stealing.
Koala is meant for adults and is not directed at children under 13. We do not knowingly collect their personal information. If you believe a child has given us data, email us and we will delete it.
Koala gives general nutrition information. It is not a medical device, and nothing in it is medical or dietary advice. Its figures for plates and menus are estimates. Allergy flags are a convenience built on label data that can be incomplete or out of date, so always read the physical packaging. Talk to your prescriber about your medication and your diet.
If we change this policy we will update the date at the top. If a change materially affects your rights or what we collect, we will tell you in the app before it takes effect rather than hoping you re-read this page.
