Privacy Policy

1. Introduction

CalorieSense ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web services (collectively, the "Service").

Please read this Privacy Policy carefully. By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

We collect several types of information from and about users of our Service:

2.1 Account and Authentication Information

When you create an account, we collect:

• Email address (used for account authentication and communication)
• Password (encrypted and stored securely through Firebase Authentication)
• Account creation date and last login information

2.2 Profile Information

During onboarding and profile setup, we collect:

• Display name (optional)
• Height (in centimeters or inches)
• Weight (in kilograms or pounds)
• Gender
• Birth year
• Activity level
• Daily calorie goals
• Daily macronutrient goals (protein, carbohydrates, fat)
• Target weight (if applicable)

2.3 Meal and Nutrition Data

When you use the food scanning feature, we collect:

• Food photographs (stored in Firebase Cloud Storage)
• Nutritional estimates generated by AI analysis (calories, protein, carbohydrates, fat)
• Food item names and portion sizes
• Meal types (breakfast, lunch, dinner, snack)
• Timestamps of when meals were logged

Important: When you use the food recognition feature, your food images are sent to OpenAI's servers for AI analysis. This is necessary for the Service to function. Please see Section 5 (Third-Party Services) for more information.

2.4 Usage and Technical Information

We automatically collect certain information when you use the Service:

• Device information (device type, operating system, browser type)
• Usage patterns and interactions with the Service
• IP address and general location information
• App performance and error logs
• Local storage data (tutorial completion status, preferences)

2.5 Analytics Data

We use Firebase Analytics to collect aggregated, anonymized usage statistics to help us improve the Service. This data does not personally identify you.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To provide, maintain, and improve the Service, including food recognition, nutrition tracking, and goal management
• Account Management: To create and manage your account, authenticate your identity, and provide customer support
• Personalization: To personalize your experience, including setting and tracking your nutrition goals based on your profile information
• AI Processing: To process food images through OpenAI's AI services to generate nutritional estimates
• Data Storage: To store your meal logs, nutritional data, and progress history
• Communication: To send you service-related notifications, updates, and respond to your inquiries
• Analytics: To analyze usage patterns, improve Service functionality, and develop new features
• Legal Compliance: To comply with legal obligations, enforce our Terms of Service, and protect our rights and the rights of our users

4. How We Store Your Information

Your information is stored using Firebase services provided by Google Cloud Platform:

• Firebase Authentication: Stores your account credentials (email and encrypted password)
• Cloud Firestore: Stores your profile information, meal logs, and nutritional data
• Cloud Storage: Stores your food photographs in a secure, private storage bucket
• Firebase Analytics: Stores aggregated, anonymized usage analytics

Data Security: We implement industry-standard security measures to protect your information:

• Data encryption in transit (HTTPS/TLS)
• Data encryption at rest
• Secure authentication mechanisms
• Access controls and firewalls
• Regular security audits and updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

5. Third-Party Services and Data Sharing

We use third-party services to operate the Service. These services have access to certain information as necessary to perform their functions:

5.1 Firebase (Google Cloud Platform)

We use Firebase services for authentication, data storage, and analytics. Your data is stored on Google Cloud Platform servers. Firebase's use of your information is governed by Google's Privacy Policy, available at: https://policies.google.com/privacy

5.2 OpenAI

When you use the food recognition feature, your food photographs are sent to OpenAI's servers for AI analysis. This is necessary for the Service to function. OpenAI's use of your images is governed by OpenAI's Privacy Policy, available at: https://openai.com/policies/privacy-policy

Important: By using the food recognition feature, you consent to the transmission of your food images to OpenAI's servers. We do not control how OpenAI uses or stores your images beyond what is necessary for the Service to function.

5.3 Data Sharing

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With third-party service providers (Firebase, OpenAI) who perform services on our behalf
• Legal Requirements: When required by law, court order, or government regulation
• Protection of Rights: To protect our rights, property, or safety, or that of our users or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)
• With Your Consent: When you have given us explicit permission to share your information

6. Your Privacy Rights and Choices

You have the following rights regarding your personal information:

6.1 Access and Portability

You can access your personal information at any time through the Service. You can view and edit your profile information, meal logs, and goals directly in the app.

6.2 Correction

You can update or correct your profile information, goals, and meal logs at any time through the Service settings.

6.3 Deletion

You can delete your account and all associated data at any time through the Service settings. When you delete your account:

• Your account credentials will be deleted
• Your profile information will be deleted
• Your meal logs and nutritional data will be deleted
• Your food photographs will be deleted from our storage
• Some information may be retained as required by law or for legitimate business purposes (e.g., aggregated analytics data)

6.4 Data Portability

You can request a copy of your data in a machine-readable format by contacting us at the email address provided in Section 12 (Contact Information).

6.5 Opt-Out Rights

You can opt out of certain data collection by:

• Not using the food recognition feature (though this will limit Service functionality)
• Adjusting your device settings to limit location or analytics data collection
• Contacting us to request restrictions on data processing

6.6 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your information)
• Right to non-discrimination for exercising your privacy rights

6.7 European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification (correction) of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent (where processing is based on consent)

To exercise any of these rights, please contact us using the information provided in Section 12 (Contact Information).

7. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Active Accounts: We retain your data while your account is active and for a reasonable period thereafter
• Deleted Accounts: When you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal purposes
• Analytics Data: Aggregated, anonymized analytics data may be retained indefinitely
• Legal Requirements: We may retain certain information as required by law, court order, or to resolve disputes

8. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information.

If you are between 13 and 18 years of age, you must have your parent's or guardian's permission to use the Service, and they must agree to these Terms and this Privacy Policy on your behalf.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

Specifically:

• Firebase services are hosted on Google Cloud Platform servers, which may be located in various countries
• OpenAI's services are hosted on servers that may be located outside your country

By using the Service, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure your information receives adequate protection in accordance with this Privacy Policy.

10. Cookies and Tracking Technologies

We use the following technologies to collect information:

• Local Storage: We use browser local storage to remember your preferences and tutorial completion status
• Session Storage: We use session storage to temporarily store data during your session
• Firebase Analytics: We use Firebase Analytics to collect aggregated usage statistics

You can control local and session storage through your browser settings. Note that disabling these may affect Service functionality.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Updating the "Last Updated" date at the top of this Privacy Policy
• Posting a notice in the Service
• Sending you an email notification (if you have provided an email address)

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

CalorieSense
Email: privacy@caloriesense.com
Website: https://caloriesnap-c08d4.web.app

We will respond to your inquiry within a reasonable timeframe, typically within 30 days.