Your information matters.

Effective September 28, 2026. Version 2026-09-28. This notice covers public early enrollment.

Who is responsible

Brandon Blakeney operates Dietune as an individual. For privacy questions or requests, contact [email protected] or Brandon Blakeney, Dietune, PO Box 88, Mark, IL 61340, United States.

Information used during early enrollment

We process your account name, email address, password hash, confirmation of US residency and adult eligibility, account status, email preferences and security records. If you enable an authenticator, we store the information needed to verify its codes. Essential session cookies keep you signed in and protect account requests. Server and service-provider logs may record IP addresses, requested pages, timestamps and other connection information. Planned health profiles and food logging are not open to ordinary early accounts.

How the information is used

We use information to operate and secure accounts, verify email addresses, provide notifications, handle support, prevent abuse and maintain the service. Optional project-update emails require your choice to receive them. You can change that choice in Profile or use the unsubscribe link. Verification, password-reset and security messages are separate from optional project updates.

Feedback and suggestions

Feedback choices are stored without an account ID or raw IP address. A keyed network fingerprint is stored with the choice to limit repeated votes; shared connections may share a limit. Operational request logs mean this is not a promise of complete anonymity. Suggestions include your name and account email and are emailed to support so we can review and respond. Do not include credentials or private health information. Temporary keyed account and network counters limit suggestion volume; they expire after two days and are removed when another suggestion is submitted.

Services involved

OVHcloud hosts the VPS in Beauharnois, Canada. Cloudflare provides domain/network services and forwards support email to a Google Gmail inbox. Resend processes outgoing email. USDA FoodData Central receives search terms through our server; searches should not contain personal health information. Providers may process information in other locations according to their own services and policies. Canada's VPS location does not mean all providers process data only in Canada.

Discord and Patreon links take you to separate services governed by their policies. Joining either is optional. A Patreon payment is handled by Patreon, not by the Dietune website. Dietune does not automatically link these external memberships to an early account.

Early-stage retention

There is currently no automatic inactivity-deletion deadline for early accounts, support correspondence or project feedback. We retain these during early enrollment to maintain accounts, answer support requests and understand interest in the project. You may delete your account sooner or contact us about information we hold. We will establish and communicate the applicable retention periods when the official services open. This policy does not require retention of temporary security counters or caches that already expire as part of normal operation.

Deletion and copies

Nginx logs under the server's standard log directory are configured to rotate daily and retain 14 rotated files in addition to the current log. This normally represents roughly two weeks of rotated logs, but empty logs are skipped and interruptions to rotation can extend retention. Separate application logs, system logs, backups and service-provider records do not share this rotation policy. We have not established a single deletion period for those records; contact support with questions about a particular record.

Security provides self-service account deletion. For accounts without unresolved subscriptions, it removes private application records and anonymizes the account immediately. A minimal account placeholder and audit history remain to preserve record integrity. Previously approved shared contributions may remain without account attribution. Account deletion does not automatically erase a suggestion already delivered to our support inbox or unlink a feedback choice stored without an account ID. Contact support to request review of correspondence or other identifiable information. Records needed for security, disputes or applicable obligations may require separate handling.

We plan to make daily backups and retain only the five most recent successful backups, replacing the oldest when a new backup succeeds. This rotation is not yet configured. It is a count-based policy rather than a fixed number of days; copies can persist longer if backups stop. We have not verified the retention or location of any existing provider-managed backup copies. Only the VPS location in Canada is confirmed. Deleting an account does not immediately remove it from existing backup copies. Our planned five-copy rotation does not apply to provider-managed copies or email held by other services. If we restore a backup, we will reapply completed account deletions before resuming public access.

Requests and security

Contact support to request access, correction or deletion of personal information or to report a security concern. We may need to verify your identity before acting. Early screens omit the full-service export controls, but you can contact support for an access request. Access controls, password hashing and encryption for selected records help protect information; they cannot eliminate the risk of unauthorized access or disclosure.