Last Updated: June 26, 2026
Oja is operated by The Matter Company LLC ("Oja," "we," "our," and/or "us"). We value the privacy of individuals who use our mobile application and related services (the "Service"). This Privacy Policy explains how we collect, use, and share information from users of the Service ("Users" or "you") or their devices. By using or accessing the Service, you agree to the collection, use, disclosure, sharing, and procedures described in this Privacy Policy.
Because the Service is designed to help you understand how food and lifestyle relate to how you feel, we collect health-related information such as digestive comfort and symptom logs. Health-related information is also governed by our separate Consumer Health Data Privacy Policy, which describes additional rights and protections that may apply to you. Where that policy applies, it controls with respect to consumer health data.
Information We Collect
A. Information You Provide to Us
Registration and Account Information. When you sign in using Apple or Google, we collect the information provided by those services, such as your email address and name.
Onboarding and Profile Information. When you set up the Service, we collect information you choose to provide, such as your age, gender, height, weight, country, dietary preferences, foods you wish to avoid, allergies or intolerances you tell us about, the wellness goal or protocol you select, and a baseline description of how you feel.
Food Logs, Photos, and Content. We collect the food photos you take or upload within the app, and the food and meal entries you log, so that we can identify ingredients and provide the Service. You should only photograph food and meals.
Health-Related Logs. We collect the information you log over time, which may include symptom severity, digestive comfort, bowel or stool entries, weight, and similar entries you choose to record. This information is also covered by our Consumer Health Data Privacy Policy.
Communications. If you contact our support team, we collect the information you include in your message.
B. Information We Collect Automatically
When you use the Service, we automatically collect certain information, including:
Device Information. Your device type, operating system version, app version, and similar technical identifiers.
Usage Information. Details about how you interact with the app, such as features used, screens viewed, and time spent.
Camera Access. If you grant permission, we access your device's camera so you can take photos for analysis. You can manage this permission in your device settings.
We do not collect precise geolocation, and we do not use geofencing. We do not collect biometric identifiers; food photographs are used to identify ingredients and are not used for biometric identification.
C. Information from Service Providers and Analytics
We use a small number of service providers to operate the Service, such as cloud hosting and infrastructure, an artificial intelligence provider that analyzes food photos and generates text, email delivery, and customer support tooling. We also use privacy-protective product analytics to understand feature usage and improve the app. Our analytics are configured so that they do not receive your identifiable consumer health data.
We do not use third-party advertising networks, advertising trackers, or cross-context behavioral advertising technologies in the Service.
How We Use the Information We Collect
We use the information collected for the following purposes:
To provide, maintain, and operate the Service, including identifying ingredients in your photos, generating insights and weekly reviews, and building recipes and plans you request.
To personalize your experience based on the goals, preferences, and logs you provide.
To analyze how the Service is used and to develop and improve features. Where we use information to improve the Service or our models, we use de-identified or aggregated information.
To communicate with you about your account, updates, and support requests.
To facilitate subscriptions and process transactions through the applicable app store.
To detect, prevent, and respond to fraud, abuse, security incidents, and unauthorized activity.
To comply with legal obligations and enforce our Terms of Service.
Artificial Intelligence Processing
The Service uses third-party artificial intelligence and machine-learning providers to analyze your food photos and generate text such as insights, weekly reviews, and recipes. When we send information to these providers to return a result to you, they process it on our behalf under contract and do not use your content to train their own general-purpose models.
How We Share the Information We Collect
We share information only as described below. We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not share your health-related information with advertisers.
With Service Providers. We share information with vendors and processors who perform services on our behalf, such as cloud hosting, AI analysis, email delivery, analytics, and customer support. These providers are bound by contract to use information only to provide services to us.
For Legal Reasons. We may disclose information to comply with applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Oja, our Users, or others.
In Business Transactions. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will provide notice as required by law, and any successor will remain bound by this Privacy Policy with respect to your information.
Additional rules apply to consumer health data, including consent requirements before sharing. Please see our Consumer Health Data Privacy Policy.
Cookies and Tracking Technologies
Our website may use cookies and similar technologies for basic functionality and privacy-protective analytics. We do not use advertising cookies or third-party cross-site tracking. Where required, our website honors the Global Privacy Control (GPC) and similar browser-based opt-out signals.
Your Privacy Rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
Access and Know. Request confirmation of whether we process your personal information and a copy of it, along with information about how we use and share it.
Correct. Request correction of inaccurate personal information.
Delete. Request deletion of your personal information.
Portability. Request a copy of certain information in a portable format.
Opt Out. Opt out of the sale or sharing of personal information and of certain profiling. As noted above, we do not sell or share your personal information for these purposes.
Limit Sensitive Information. Direct us to limit the use of sensitive personal information to what is necessary to provide the Service.
Non-Discrimination. Exercise your rights without receiving discriminatory treatment.
Appeal. Where applicable, appeal a decision we make about your request.