Eatolerance

Eatolerance is a food diary that does the maths. It records meals, drinks and symptoms, breaks every food into the substances it carries - lactose, fructose, fructans, sorbitol, histamine, gluten, tyramine, caffeine and the EU allergens - and then compares the days that carried a substance against the days that did not. What comes out is a sentence with the numbers beside it, not a list to read through yourself.

Key Features

• Free: no subscription, no account, no advertising.
• Several profiles, shareable: one diary per person, and two parents can keep a child's diary together.
• The diary stays on the phone: the analysis runs on the device. Only a profile you share yourself ever leaves it, and it leaves encrypted.
• Six languages: English, German, Spanish, French, Italian, Portuguese, including the food names.
• Honest about thin data: if there is not enough to say anything, the app says so.

---

Terms of Use

Last updated: 24 September 2026

1. Acceptance of Terms

By downloading, installing, accessing or using Eatolerance (the "Application" or "App"), you agree to these Terms of Use ("Terms"). If you do not agree, do not use the App. If a child's diary is kept in the App, the parent or legal guardian keeping it agrees to these Terms on the child's behalf.

2. Eatolerance is not a medical device and gives no diagnosis

This is the most important sentence on this page. Eatolerance finds patterns in a diary somebody wrote themselves. A pattern is not a diagnosis, a cause or a medical finding. Food intolerances, allergies and digestive illnesses are diagnosed by doctors, with tests the App does not perform and cannot replace.

Take what the App shows to a doctor or a dietitian. Do not use it to remove a food from your diet for good on your own, and never to treat, delay treatment of or rule out a medical condition. Removing foods without medical advice can cause harm, particularly in children and during pregnancy. If you feel seriously unwell, seek medical help rather than a second opinion from an app.

3. License

Subject to these Terms, the Service Provider grants you a limited, non-exclusive, non-transferable, revocable license to use the App for personal, non-commercial purposes.

4. Account and eligibility

• No account: the App works without registering and asks for no email address, phone number or name that leaves the device.
• Age: the App is meant for adults. A parent or guardian may keep a diary for a child.
• Jurisdiction: you are responsible for complying with the laws that apply to your use.

5. Acceptable use

You agree not to:

• use the App unlawfully or to harm others;
• attempt to reverse-engineer, modify or interfere with the App or the service behind it;
• circumvent the security, quotas or rate limits of that service; or
• keep a diary about another person without their knowledge, or share a profile with somebody the diary is not theirs to share with.

6. The food catalogue

Food entries are produced once, on the server, and shared by everybody who uses the App. They are estimates: recipes differ, products change and a value that is not known is shown as not known rather than as zero. The catalogue is offered as it is, and a figure in it is not a nutritional declaration.

7. Availability and changes

We may update, suspend or discontinue parts of the App and its service at any time. We may also update these Terms, and will say so in the "Last updated" date above.

8. Disclaimer; limitation of liability

The App is provided "as is" and "as available", without warranties of any kind. To the maximum extent permitted by law, the Service Provider is not liable for indirect, incidental, special, consequential or exemplary damages, or for loss of data, arising from your use of the App. Nothing here limits liability that cannot be limited by law.

9. Governing law

These Terms are governed by the laws of Austria, without regard to conflict-of-law provisions. Mandatory consumer protection rules of your country of residence may also apply.

10. Contact

For questions about these Terms, write to .

---

Privacy Policy

Last updated: 24 September 2026

Overview

A food diary is health data, and health data deserves an architecture rather than a promise. Eatolerance is built so that the parts that could identify you and the parts that describe your health never meet on a server. The diary - what you ate, when, and how you felt - is stored on your device and analysed there.

What stays on your device

• Every meal, drink, symptom, severity, time and note you record.
• Your profiles and their names.
• The copy of the food catalogue the App keeps so that it works offline.
• The whole analysis. It is computed on the phone; no result is sent anywhere.

Deleting the App deletes all of it. There is no copy elsewhere unless you shared a profile.

What the server receives

Only two things travel, and they are deliberately kept apart:

• Food names and barcodes. When you search for or add a food the App asks the server about that name - "Kaisersemmel", "oat drink", a barcode. The request carries no name, no account, no device id and no timestamped diary entry. A food name on its own is not health data, and the server is built so that it cannot become one: it is never stored together with anything identifying.
• A daily counter token. To stop one installation from running up the bill, the App sends a value derived from a random installation id and today's date. It changes every day, it is never stored next to the content of a request, and it cannot be turned back into an installation or a person.

In addition, every request carries an Apple App Attest / Firebase App Check token, which proves the request comes from a genuine copy of the App and not from a script. It identifies the App, not you. The web server keeps ordinary access logs containing IP address, time and status code for a short period, for the sole purpose of stopping abuse.

Shared profiles

Sharing a profile is the one case where a diary leaves the phone, and it leaves encrypted. The App encrypts it on your device with a key derived from the twelve character code, uploads the result under an address derived from the same code, and never sends the key anywhere. The server stores bytes it cannot read and has no way of asking for the key: it cannot tell whose diary it holds, what is in it, or that two profiles belong together.

Whoever has the code can read that diary - that is what sharing means, so give it only to the person you mean. Ending the sharing in the App deletes the stored copy from the server. An untouched shared profile is removed after twelve months without a write.

Who else is involved

• Google (Firebase App Check), to verify that a request comes from the real App. Google receives the App's attestation, not your diary.
• Anthropic and OpenAI, when a food nobody has ever entered has to be worked out or drawn. They receive the food name alone - never a diary entry, a time, a symptom or an identifier - and the result is stored in the shared catalogue so that it is never asked again.
• Open Food Facts, when you scan a barcode. They receive the barcode.
• Apple, for the download itself and for crash reports if you have those switched on in iOS. We do not add an analytics or advertising framework of our own.

What we do not do

No advertising, no advertising identifiers, no analytics or tracking framework, no profiling, no sale or sharing of data with anybody who wants to sell you something, no newsletter, no account.

Children

A parent or guardian may keep a diary for a child, which is why profiles can be shared between two phones. The child needs no account and gives nothing to us: that diary is data on your device, exactly like your own.

Where the server is, and for how long

The service runs on rented servers of Hetzner Online GmbH in Finland, inside the EU. The food catalogue is kept indefinitely, because it belongs to nobody in particular. Counters are kept per day and expire. Shared profile blobs are kept until you end the sharing, or for twelve months without a write.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction, objection and data portability. For the diary, all of these are in your own hands: it is on your device, and the App exports and deletes it. For a shared profile, ending the sharing erases it. Since we hold nothing that identifies you, we can neither find nor hand out "your data" on request - there is no key by which to look it up, and that is by design rather than an evasion.

You also have the right to complain to a supervisory authority. In Austria that is the Datenschutzbehoerde, Barichgasse 40-42, 1030 Vienna.

Controller and contact

insoso GmbH, Griepenkerlgasse 10, 1130 Vienna, Austria - . Write to that address for any question about this policy, and we will answer it.

Changes

If this policy changes, the date above changes with it, and a change that affects what leaves your device will be said in the App as well, not only here.