Privacy Policy

Last Updated: September 27, 2026

Application: Calorie Counter by Wayout AI

1. Who we are

Wayout is owned and operated by WAYLAB Limited Liability Company (WAYLAB LLC), registered in the Republic of Armenia, registration number 999.110.1606793, taxpayer identification number 02955452.

Registered address: 26A Movses Khorenatsi Street, Office 210, Yerevan 0010, Republic of Armenia.

WAYLAB LLC is the controller responsible for the personal data processed to operate the application and related account and support services described in this policy. In this policy, “Wayout”, “we”, “us” and “our” refer to WAYLAB LLC.

Privacy enquiries and requests: support@waylab.tech.

App support: info@wayout.fitness.

Telephone: +374 43 425 832.

2. Information we process

The data we process depends on the features you use:

Account information

For registration, authentication, account management and support, we process your required email and name, account identifier and information made available by Google or Apple if you choose that sign-in method.

Profile information

Your required age, sex, weight, height and activity level are used to configure your profile and calculate personalised nutrition and fitness estimates.

Food diary

You may choose to provide food entries, food photographs, text descriptions, recipes and audio recordings. We use these materials, and text recognised from the audio, to maintain your food diary and track and analyse nutrition.

Optional AI chat

To respond to your questions and provide the AI feature described in section 5, we process the questions and messages you choose to send, the context needed for your request and the generated responses.

Personalised recommendations

To generate personalised recommendations using AI, we use nutrition information and other data you entered over the week that are needed for the analysis.

Optional activity and wellbeing entries

Physical activity, sleep and self-reported stress levels you choose to enter are used to record these entries and provide the tracking or other relevant function you select.

Connected-service data

Data made available through permissions you grant to an enabled health or fitness integration are used to provide that integration as described in section 4.

Purchase information

To verify purchases, activate access and resolve billing enquiries, we process product and transaction references, purchase tokens and subscription or entitlement status received through the purchase service.

Technical information

For app operation, analytics, security and troubleshooting, we process IP addresses, device, app and installation identifiers, app and operating-system versions, usage events, diagnostic and crash information.

Support information

Messages and attachments you send us are used to respond to enquiries and exercise your rights.

Email, name, age, sex, weight, height and activity level are required to set up and use your account. You can sign in using a password, Google or Apple. If you choose Google or Apple, we use the account information made available by that service to authenticate your Wayout account.

Nutrition content, voice input, AI-chat questions, detailed activity entries, sleep and stress entries are optional. The required profile activity level is distinct from optional records of particular physical activities. You choose whether to use optional features and what to submit.

If you do not provide the input needed for a particular feature, that feature cannot process it. Providing optional content does not authorise its use for unrelated purposes.

3. Purposes, legal grounds and choices

We use information to provide the functions you request, maintain your account, calculate nutrition and fitness estimates, generate personalised recommendations, administer paid access, respond to support requests, protect the service and diagnose technical problems.

Optional analytics and marketing are subject to the choices described in section 6.

We process personal data under applicable data-protection law, including the Armenian Law on Protection of Personal Data. We obtain consent where required and process information for the purposes covered by the relevant consent, agreement or legal obligation.

Where the GDPR applies, our grounds are performance of our agreement for necessary account and service operations; consent for optional processing requiring consent; compliance with legal obligations; and legitimate interests for proportionate security, fraud prevention and support, subject to your rights.

These GDPR grounds are not presented as a universal substitute for requirements under other laws.

Information about your health may receive additional legal protection. Depending on its content and use, nutrition, weight, activity, sleep, stress and AI-chat entries may reveal information about your health.

Where we rely on consent to process health data, we obtain the required specific and, where applicable, explicit consent. Contract necessity alone does not remove the additional restrictions on health data.

You may withdraw consent by contacting support@waylab.tech or through the relevant available privacy controls. Withdrawal does not invalidate earlier lawful processing. A feature may be unavailable if it needs data or permission you decline. We explain such consequences when requesting the relevant data or permission.

4. Permissions and health integrations

Access to permission-protected features is requested before access begins. You can manage device permissions in Android settings. A camera or photo permission, where used, enables the feature for which it is requested; it is not permission to use your images for unrelated purposes.

Voice input is optional. When you use it, an audio recording of your spoken nutrition input is transmitted to the AI service identified in section 5 for speech recognition so that the app can process the information you wish to enter.

If the app accesses the microphone, it requests the applicable microphone permission before access. Wayout deletes the audio recording and the intermediate recognised text after completing this processing.

Nutrition entries created from the input are separate records subject to the diary retention rules in section 8.

Wayout supports Health Connect on Android and Apple Health (HealthKit) on iOS. Apple Health is available only on the supported Apple platform; it is not an Android integration.

Connecting either service is optional. We access only the data types and read/write directions you authorise, to provide the corresponding nutrition and activity features. Revoking a permission stops future access through that permission; deletion of data already retained by Wayout is handled under section 8.

Health Connect read access covers steps, calories burned, distance and speed: these support activity tracking, calorie-balance estimates and exercise-intensity analysis.

Through the connected health services, authorised nutrition, exercise, calorie, step and hydration information can populate your diary and calculations; sleep information supports comparison with nutrition and activity.

If you grant write access for nutrition or hydration, the app can synchronise those entries to the connected service. Access is limited to the relevant enabled feature and the permissions you grant.

Health Connect and Apple Health data are used only for permitted health and fitness functions. They are not sold or used for advertising or advertising-audience creation. Any onward processing must comply with the applicable integration restrictions; user consent does not authorise a prohibited use.

5. AI features

Wayout uses Google Gemini models for its AI features. Material from a particular request is passed through a technical AI infrastructure provider to a model provider to generate the result.

We send only the information needed for the feature you select and do not attach your Wayout user ID or account identity details to the request.

The transmitted material is limited to the content of the particular request. Saving AI requests and using your data for model training are disabled in our AI-service configuration. We do not authorise the use of your request content for model training.

Personalised recommendations are generated using AI to analyse your nutrition and the data you entered over the week. Only the data needed for this analysis are transmitted to the AI service.

You may choose to submit food photographs, nutrition descriptions, recipes or questions in the AI chat. Voice recordings are processed as described in section 4.

Wayout deletes the audio and intermediate transcription after processing and stores product photographs so that you can view them in the app. The retention rules for photographs and other app records are described in section 8.

Photographs are analysed only to recognise food and determine its nutritional value. We do not use them for facial recognition, identifying individuals or extracting biometric data.

The AI configuration above concerns request content and training. Providers may separately process technical request metadata, such as timing, usage and token counts, for service operation and accounting. This is distinct from saving the content of your requests.

Wayout is not a medical device and is not intended to diagnose, treat, cure or prevent any medical condition. Calculations and personalised recommendations, including AI-generated results, are provided for informational purposes and may contain errors.

Consult a qualified healthcare professional for medical advice, diagnosis or treatment.

6. SDKs, analytics, notifications and purchases

The app uses the following services.

Yandex AppMetrica

App analytics and diagnostics; technical and installation/device information, and events enabled in our implementation.

Google Analytics for Firebase

Usage analytics; app-instance identifiers, device information and enabled automatic/custom events; advertising identifiers where enabled.

Firebase Crashlytics

Crash diagnosis; crash reports, device/app metadata and installation identifiers; custom logs or keys if configured.

Firebase Cloud Messaging

Push delivery; installation identifiers, messaging tokens and message-related information.

Google Play Billing

Google Play purchases and subscription verification; purchase references, tokens and entitlement status.

Google ML Kit Barcode Scanning

On-device barcode recognition; SDK usage, performance and diagnostic metrics may be transmitted to Google.

ML Kit's on-device image processing does not mean that the SDK has no network communication. Any separate Wayout lookup using a recognised barcode is distinct from ML Kit's recognition process.

We may analyse app interactions, such as screen visits and feature use, to improve the service and relevant content. We obtain consent for optional analytics where required by applicable law. You may withdraw an optional consent by contacting support@waylab.tech.

The app may display offers to purchase a Wayout subscription and personal discounts on that subscription. These offers relate to Wayout's own paid features. The app does not display advertisements for third-party products or services.

Health information and data from Health Connect or Apple Health are not used to personalise commercial offers or create advertising audiences.

We may send Wayout subscription offers and discounts by email, push notification or other messages. We obtain consent where required.

You may unsubscribe from offer emails using the unsubscribe link, disable notifications in device settings, or contact support@waylab.tech or info@wayout.fitness to opt out of marketing messages. Necessary account and security communications may still be sent.

Our associated website may use session and persistent cookies for operation, preferences, analytics and Wayout subscription offers. Non-essential cookies require consent where applicable.

You can decline or change optional cookie choices and manage stored cookies in your browser; disabling essential cookies may affect website functions.

Other recipients may include hosting, storage, authentication, support and communication providers for the specified purposes, including delivery of Wayout subscription messages. Providers processing information on our behalf are subject to the applicable processing and security requirements.

Google and Apple also process sign-in information under their own privacy notices: Google and Apple.

We do not sell personal and sensitive user data. We do not use health or Health Connect information for advertising audiences. Disclosures to service providers are limited to specified purposes and are subject to the applicable legal and contractual requirements.

7. International processing

Your data may be transferred to and processed outside your country of residence to operate the app, including its AI features, analytics and support.

These transfers are necessary for providing the App's functionality. Where required by GDPR, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or the service provider's adequacy certification, to ensure appropriate safeguards.

8. Retention, account deletion and data deletion

We retain information only for its specified purpose and applicable retention period. Deleting an account also requires deletion of its associated personal data, subject to limited and explained lawful retention.

After five years of account inactivity, we review whether continued retention of your data is necessary. Information that is no longer needed for the stated purposes and is not subject to mandatory retention by law is deleted or anonymised. The shorter retention periods specified below continue to apply.

Account and profile information

Account and profile information is retained until account deletion, subject to the completion period and limited lawful exceptions described below.

Recognised products and their photographs

Deleted if the recognised product is not used for 90 days; its photograph is deleted together with the product. Photographs are retained during this period to display the product to you.

Dishes created from recipes

Dishes created from recipes are retained until account deletion.

Detailed food-diary entries

Detailed food-diary entries are retained for 180 days.

Aggregate diary data: calories, protein, fat and carbohydrates; body measurements

These data are retained until account deletion to maintain your nutrition and progress statistics.

Voice recordings and intermediate recognised text

Deleted by Wayout after voice-input processing; any resulting diary entry follows the applicable diary retention rule.

Chat history

Stored locally on your device until account deletion or app uninstallation. The content of a particular AI request is transmitted for processing as described in section 5; saving AI requests is disabled.

Analytics data

Retained for up to 26 months.

Firebase Crashlytics

Google retains crash reports and associated identifiers for 90 days before starting their removal from live and backup systems.

Firebase Cloud Messaging

Installation identifiers are retained until an API request is made to delete them; after that request, Google removes the data from live and backup systems within 180 days.

Support correspondence

Retained for up to 12 months after the dispute is resolved.

Subscription documentation

Mandatory tax and accounting records are retained for at least 5 years, or longer where Armenian law requires.

Wayout database backups

Residual copies of deleted data are permanently removed from backups no later than 30 calendar days after the data is deleted from live databases.

Request account and data deletion

You can delete your account in the app: Menu → Settings → Delete account → confirm deletion. For instructions, see the Wayout account-deletion page.

You can also request deletion without opening or reinstalling the app by emailing support@waylab.tech. State that you wish to delete your Wayout account and associated personal data, and identify the email used for your account. Do not send your password or full payment details.

• Deletion through the app: once you confirm deletion, your account and associated data are deleted immediately from Wayout's live databases; local chat history is also deleted. Account deletion is permanent for the user; restoration of the account and its content is not available.
• Deletion by email request: we complete deletion within 30 business days of receiving your request, or sooner where applicable law requires a shorter period. We may take proportionate steps to verify that the request concerns your own account. Once deletion is completed, restoration of the account and its content is not available.

Residual copies of deleted data may remain in Wayout database backups for no more than 30 calendar days after deletion from live databases, after which they are permanently removed.

Technical deletion periods for analytics, diagnostic and messaging services are set out separately above; immediate deletion from Wayout's live databases does not mean immediate physical removal of all copies held by those services.

The limited lawful retention of separate records described in this section does not permit restoration of a deleted account or its diary.

Any data retained for a specific legal requirement or to resolve a related dispute must be limited to that purpose and retained only for the applicable period disclosed above. Account deactivation is not a substitute for deletion.

Uninstalling the app does not itself delete the server-side account. Account deletion does not necessarily cancel a store-managed subscription; manage it through the relevant store's subscription controls.

9. Security

We protect your data using generally accepted industry security measures, including encryption in transit (TLS/HTTPS), secure cloud infrastructure and access controls. However, no method of electronic data storage or transmission is completely secure, so we cannot guarantee absolute protection.

10. Your rights

Subject to applicable law, you may request access to, correction or deletion of your personal data; information about its processing; restriction of or objection to particular processing; and portability where available.

You may withdraw consent and complain to the competent data-protection authority. These rights depend on the applicable law and may be subject to lawful exceptions.

Send requests to support@waylab.tech. We respond within one month, or sooner if required by law. Where necessary, we may ask you to verify your identity.

11. Children

You must be at least 16 years old, or have consent from your parent or legal guardian to install and use the app where use below that age is permitted by applicable law. Any additional minimum-age or parental-consent requirement under applicable law continues to apply.

If we become aware that personal information of a child below the applicable minimum age has been collected without the required parental or guardian consent, we will promptly take the necessary steps to delete that information.

If you believe a child has provided personal information contrary to these requirements, contact support@waylab.tech.

12. Other disclosures and policy updates

We may disclose necessary information in response to a valid legal requirement, to protect users and the service where lawful, or in a business reorganisation subject to applicable safeguards and notices. Such circumstances do not authorise unrestricted reuse of health data.

We update this policy when our data practices change. The current version and effective date will be available at the privacy-policy page linked from the app and Google Play. Where a change requires notice or new consent, we provide it before the relevant new processing begins.

Continued use alone is not treated as consent to a new purpose requiring consent.

For all privacy questions, contact WAYLAB LLC at support@waylab.tech or write to the registered address in section 1.