Privacy Policy

1. Information We Collect

We collect different types of information to provide and improve our services:

1.1 Account Information

• Email address - Required for account creation and communication
• Name - For personalization (optional)
• Authentication data - Login credentials via Firebase Authentication (Google Sign-In, Sign in with Apple, Email/Password)
• Profile photo - Optional, stored securely if provided

1.2 Health and Fitness Data

• Physical measurements: Age, biological sex, height, weight
• Nutrition goals: Calorie targets, weight goals, activity level
• Food logs: Meal names, nutritional data (calories, protein, carbs, fat, fiber, sugar, sodium), timestamps, optional food photos
• Gamification data: Pet name, growth points, fullness state, mood, streak days (daily, weekly, best), achievement unlocks
• Weight tracking: Weight entries, notes, goal progress
• Body composition: Body fat percentage, muscle mass percentage (if you choose to track)
• Body measurements: Waist, hips, chest, thighs, upper arms circumference (if you choose to track)
• Blood pressure: Systolic and diastolic readings (if you choose to track)
• Digestion/gut health: Bowel movement frequency, Bristol stool scale type, ease, urgency (if you choose to track)

1.3 Device and Usage Information

• Device identifiers: Device type, operating system, unique device ID
• App usage data: Features used, interaction patterns, session duration
• Analytics events: Anonymized usage patterns, feature interactions, and aggregated profile attributes (goal type, activity level) sent to Firebase Analytics
• Crash reports: Technical logs to diagnose and fix issues (via Firebase Crashlytics)
• Timezone: Local time for accurate daily tracking
• Local storage: Achievements, preferences, and cached data stored on your device

1.4 Camera, Photos, and Voice Input

• Camera access: Used only when you actively take a food photo or scan a barcode
• Photo library access: Used when you select existing photos from your device for food analysis
• Microphone access: Optional voice input for meal logging (iOS only)
• Barcode scans: Product barcodes are sent to Open Food Facts (open database) to retrieve product nutrition information
• No background access: We never access your camera, photo library, or microphone in the background

1.5 Notifications

• Push notifications: Optional meal reminders and motivation (you can disable anytime)
• Personalized content: Notification messages vary based on your app activity and pet status
• Notification preferences: Stored locally on your device

1.6 Information NOT Collected

• We do NOT access your contacts, SMS, call logs, or location
• We do NOT access files outside of photos you explicitly choose to analyze
• We do NOT collect financial or payment information directly (handled by app stores)

2. How We Use Food Photos

2.1 Photo Processing

When you take a food photo:

1. Photo is compressed and sent securely (encrypted) to our AI service (Google Gemini or OpenAI)
2. AI analyzes the image to estimate nutritional content
3. Analysis results are returned to you
4. The AI service processes the image temporarily and does not retain it permanently

2.2 Photo Storage

For your food diary:

• Food photos are stored securely in Cloudflare R2 (cloud storage)
• Photos are associated with your food logs so you can view your meal history
• Photos are automatically deleted when you delete the associated food log
• Photos are permanently deleted when you delete your account

2.3 What We Don't Do

• We do NOT share your food photos with other users
• We do NOT use your photos for advertising or marketing
• We do NOT sell access to your photos
• We do NOT use your personal photos to train AI models (third-party AI services have their own policies)

3. How We Use Your Information

We also use your information to:

• Send important updates about the app and your account
• Respond to your support requests
• Ensure security and prevent fraud
• Comply with legal obligations

4. Data Sharing and Disclosure

We do NOT sell your personal information. We may share information only in these circumstances:

4.1 Service Providers

We use trusted third-party services to operate Foodly:

Each provider operates under their own privacy policy and data protection agreements.

4.2 Other Disclosures

• Legal requirements: When required by law, court order, or government request
• Safety: To protect the rights, safety, or property of Foodly or others
• Business transfers: In connection with a merger, acquisition, or sale of assets (you will be notified)
• With your consent: When you explicitly authorize sharing

5. Data Security

We implement industry-standard security measures:

• Encryption in transit: All data transmitted using TLS/SSL encryption
• Encryption at rest: Sensitive data encrypted in our database
• Secure authentication: Firebase Auth with secure token management
• Access controls: Limited personnel access to personal data
• Regular security reviews: Ongoing security assessments

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active:

• Account data: Retained until you delete your account
• Food logs and health data: Retained until you delete them or your account
• Food photos: Stored in Cloudflare R2 until you delete the food log or your account
• Profile photos: Previous photos are deleted when you upload a new one; deleted when account is deleted
• Analytics data: Retained for up to 26 months, then anonymized
• Crash logs: Retained for 90 days

After account deletion, we may retain anonymized, aggregated data for analytics purposes.

7. Your Rights and Choices

7.1 All Users

• Access: View all your data within the app
• Edit: Update your profile and data at any time
• Delete: Delete individual logs or your entire account
• Export: Request a copy of your data
• Opt-out: Disable optional tracking features (digestion, blood pressure, etc.)

7.2 Additional Rights (EU/EEA - GDPR)

• Right to rectification: Correct inaccurate data
• Right to erasure: Request deletion of your data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a portable format
• Right to object: Object to processing based on legitimate interest
• Right to withdraw consent: Withdraw consent at any time

7.3 California Residents (CCPA)

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information (we do not sell data)
• Right to delete personal information
• Right to non-discrimination for exercising your rights

To exercise any rights, contact us at support@foodly.fit

8. Account and Data Deletion

You have the right to delete your account and associated data at any time. Here's how:

8.1 Delete Your Account (All Data)

1. Open the Foodly app
2. Go to Profile (bottom navigation)
3. Tap Settings (gear icon)
4. Scroll down and tap "Delete Account"
5. Confirm the deletion when prompted

What gets deleted:

• Your account and profile information (name, email, photo)
• All food logs and associated photos
• All health data (weight, body measurements, blood pressure, digestion logs)
• Your pet data (name, progress, achievements)
• Favorites and preferences
• All data stored in our database and cloud storage

8.2 Delete Specific Data

You can delete individual data without deleting your entire account:

• Food logs: Swipe left on any food entry and tap "Delete" (photos are automatically deleted with the log)
• Weight entries: In Charts → Weight, tap an entry to view and delete it
• Body measurements: In Body Hub, tap any measurement to view history and delete entries
• Favorites: Swipe left on any favorite to delete it

8.3 Request Deletion via Email

If you cannot access the app or prefer to request deletion by email:

1. Send an email to support@foodly.fit
2. Subject line: "Account Deletion Request"
3. Include the email address associated with your Foodly account
4. We will verify your identity and process the deletion within 30 days

8.4 Data Deletion Timeline

9. Children's Privacy

Foodly is not intended for children under 13 years of age (or 16 in the EU/EEA).

• We do not knowingly collect personal information from children
• If you believe a child has provided us with personal information, please contact us immediately
• We will take steps to delete such information from our servers

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. These countries may have different data protection laws.

We ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) with service providers
• Encryption of data in transit and at rest
• Compliance with applicable data protection frameworks

11. Third-Party Links

Foodly may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last updated" date at the top
• For significant changes, we will notify you via email or in-app notification
• Continued use of Foodly after changes constitutes acceptance

We encourage you to review this policy periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:

• Email: support@foodly.fit

We will respond to your inquiry within 30 days.

14. Summary of Key Points