Privacy Policy

1. Information We Collect

Personal Information

When you create an account or use the Service, we may collect the following personal information:

• Account details: name, email address, and profile photo
• Authentication data: credentials managed through Firebase Authentication (including Google and Apple Sign-In)
• Payment information: processed securely by Stripe and RevenueCat; we do not store your credit card number

Usage Data

• Meal photos: images you upload or capture for calorie estimation
• Meal logs: food items, calorie data, macronutrients, and meal timestamps
• AI chat conversations: messages exchanged with NutriBot for nutritional guidance
• Menu scans: restaurant menu images scanned for calorie analysis
• Meal plan preferences: dietary goals, budget, and food preferences used to generate personalized meal plans

Health Data

With your explicit consent, we integrate with Apple HealthKit to read and/or write health-related data such as active energy burned, dietary energy consumed, and step count. See the "Apple HealthKit Data" section below for full details.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve the Service, including calorie tracking, AI chat, menu scanning, and meal plan generation
• To personalize your experience and deliver tailored nutrition insights
• To process transactions and manage your subscription
• To communicate with you about updates, security alerts, and support messages
• To analyze usage patterns and improve our AI models and features
• To comply with legal obligations and enforce our terms

3. Third-Party Services

We rely on the following third-party services to operate the Service. Each has its own privacy policy governing the use of your information:

• Firebase (Google): Authentication, Cloud Firestore (database), and Cloud Storage for secure data management
• Google Gemini AI: powers NutriBot chat, menu scanning analysis, meal plan generation, and recipe creation
• Stripe: secure payment processing for web-based subscriptions
• RevenueCat: in-app subscription management on iOS
• Apple HealthKit: optional health data integration on iOS devices

4. Apple HealthKit Data

If you choose to connect Apple Health, the following applies:

• We request access to read active energy burned, dietary energy consumed, and step count from HealthKit
• We may write dietary energy consumed data back to HealthKit when you log meals
• HealthKit data is used solely to display your health metrics within the app and to adjust your daily calorie goal based on activity
• HealthKit data is never sold, shared with third parties, or used for advertising purposes
• HealthKit data is not stored on our servers; it is read in real time from the HealthKit store on your device
• You can revoke HealthKit access at any time through your device's Settings > Health > Data Access & Devices

5. Data Storage and Security

We take the security of your data seriously and implement industry-standard measures to protect it:

• All data is stored in Google Firebase with encryption at rest and in transit
• Authentication is handled through Firebase Authentication with support for secure OAuth providers (Google, Apple)
• Payment information is processed by PCI-compliant providers (Stripe, RevenueCat) and is never stored on our servers
• Meal photos are stored in Firebase Cloud Storage with access restricted to the authenticated user
• We use Firestore security rules to ensure users can only access their own data

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights

You have the following rights regarding your personal data:

• Access: You can view your personal data within the app at any time through your profile and meal history
• Correction: You can update your profile information directly in the app
• Deletion: You can delete your account and all associated data from the Profile screen in the app. This permanently removes your account, meal logs, chat history, meal plans, and all other personal data from our servers
• Data portability: You may request a copy of your data by contacting us at the email below
• Withdraw consent: You can disconnect Apple Health or revoke permissions at any time

To exercise any of these rights, contact us at joseph.hamawi.ng@gmail.com.

7. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe your child has provided us with personal data, please contact us at joseph.hamawi.ng@gmail.com so we can take appropriate action.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will revise the "Effective Date" at the top of this page and, where appropriate, notify you via email or an in-app notification. We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: