Your information

How Sato handles your data

No Sato account, no ads, and no sale of your health data. Most features work on your device. Here’s what goes online and how to control it.

Your records

Your records and progress photos stay on your device and can sync through private iCloud. Turn sync off in Settings. Profile images and fatsecret food details stay local; other devices use synced identifiers to fetch food details again. Imported Apple Health values sync with your records. Backups and exports are separate copies.

Food lookup

Search terms and food identifiers go through Sato’s service to fatsecret. Barcode scans first send digits directly to Open Food Facts, along with connection information such as your IP address. Turning online food lookup off stops these requests. Lookups do not send your weight, dose history, or full food diary.

Voice & AI

Spoken check-ins send audio and medication terms, including names you added, through Sato’s service to OpenAI for transcription and draft entries. Plus Watch check-ins transfer through your iPhone; the watch deletes its copy after transfer. Foods may be looked up with fatsecret or estimated by OpenAI from your transcript.

Photo tools can send food images and up to three on-device labels, unrecognized barcode photos, or nutrition-label text and, if needed, images. Requested import help sends column headings and format summaries, without individual cell values. See the full list of inputs.

Weekly note

With Plus, your OpenAI agreement, and the weekly-note switch on, Sato automatically sends a record when each dose week closes, usually before you open the report. OpenAI writes the top note using the week’s weight, doses, symptoms, appetite, food, activity, profile details, recent weight averages, and previous note. Apple Health values may be included; names, food names, dates, and free-text notes are excluded. See the complete weekly record. With the switch off, the whole report is written on-device.

Purchases & support

Apple and RevenueCat handle Plus subscriptions and optional tips; tips unlock nothing. A random customer identifier in iCloud Keychain restores purchases after reinstalls or on other devices. Sato’s service uses a separate installation identifier for sessions and usage limits. Website and email providers process your messages and requested email updates.

What happens to your recording

The app is designed to delete temporary audio after processing or cancellation. Failed uploads stay on your iPhone until you retry or dismiss the error. Watch recordings transfer to your iPhone and follow the same rules.

Sato’s server processes audio in memory and keeps transcripts and results for up to 90 seconds to answer retries. OpenAI lists no retention for its transcription endpoint. Later transcript processing may remain in abuse logs for up to 30 days, or longer for legal or safety reasons. Prompt caching can also retain an encrypted request representation; duration depends on the model and provider settings.

OpenAI does not train on API recordings or transcripts by default. Training requires the API customer to opt in.

OpenAI’s data policy · Full retention details

What you can change

Before sending anything to OpenAI, Sato asks you to choose “Agree and continue” or “Not now.” “Not now” sends nothing; the page returns when you next use a feature that needs it.

Settings → Cloud features: switches for voice, meal photos and cloud label readings, online food lookup (including barcodes), and weekly notes. They start on, but OpenAI features still require your agreement. “Sending to OpenAI” shows or changes your answer.
Import help: runs only after “Read the names” and your OpenAI agreement. Use “See what’s sent” to preview the payload.
Apple Health: manage permissions in Apple’s settings.
Settings → Backup & export: save backups and exports. Settings → Privacy → Delete all Sato data removes records, including the iCloud copy when sync is on.

Turning off a switch stops future requests for that feature; it does not delete earlier uploads or change other features. Draft review happens after processing. Manual tracking and on-device weekly reports remain available without cloud AI.

Questions or requests: privacy@sato-app.com.