Privacy Policy

1. Information We Collect

1.1 Information You Provide to Us

Account Information: When you create an account using Apple Sign-In or Google Sign-In, we collect your email address, name (if provided), and a unique identifier from the authentication provider.

Onboarding Information: During app setup, you may provide information about:

• Your health and fitness goals
• Current dietary challenges
• Health-related preferences

Meal Photos: When you use our meal analysis feature, you upload photographs of food that are stored in our secure database.

User Preferences: Settings, preferences, and customization choices you make within the App.

1.2 Information Automatically Collected

Device Information: Device type, operating system, unique device identifiers, mobile network information.

Usage Data: How you interact with the App, including features used, pages viewed, time spent, and other analytics data.

Log Data: Error logs, crash reports, and technical diagnostics.

1.3 Information from Third Parties

Authentication Providers: We receive limited information from Apple or Google when you use their sign-in services, including your email and user ID.

Payment Processors: Apple App Store and Google Play Store handle all payment transactions. We receive subscription status information but do not have access to your payment card details.

1.4 AI-Generated Data

When you submit meal photos, our AI (powered by OpenAI) generates nutritional analysis including:

• Glycemic load estimates
• Insulin spike impact predictions
• Inflammation impact assessments
• Nutritional breakdowns and recommendations
• Health and dietary suggestions

This generated information is stored with your account for tracking and historical purposes.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 To Provide the Service

• Process and analyze your meal photos using AI
• Generate personalized nutritional insights and recommendations
• Track your meal history and dietary trends over time
• Display monthly and daily summaries in the Tracker tab
• Provide access to educational content in the Learn tab
• Maintain your account and authentication

2.2 To Improve and Develop the Service

• Analyze usage patterns to enhance features and functionality
• Train and improve our AI models for better accuracy
• Identify and fix technical issues and bugs
• Develop new features based on user behavior

2.3 To Communicate With You

• Send service-related notifications and updates
• Respond to your inquiries and support requests
• Provide educational content about nutrition and health
• Send subscription and billing information

2.4 For Legal and Security Purposes

• Enforce our Terms of Service
• Protect against fraud, abuse, and security threats
• Comply with legal obligations and requests
• Resolve disputes and enforce our agreements

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• OpenAI: Meal photos are sent to OpenAI's API for AI-powered nutritional analysis
• Supabase: Database and authentication services for storing your data securely
• Apple/Google: Authentication services and payment processing
• Cloud Infrastructure: Hosting and storage providers

These providers are contractually obligated to protect your data and use it only as instructed.

3.2 Legal Requirements

We may disclose your information if required by law, legal process, or government request, or to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Prevent fraud or security issues
• Enforce our Terms of Service

3.3 Business Transfers

If CHOPCAM is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

3.4 With Your Consent

We may share information with your explicit consent or at your direction.

4. Data Storage and Security

4.1 Data Storage

Your data is stored using Supabase, a secure cloud database service. Data is stored in data centers located in the United States and may be transferred internationally.

Meal Photos: Stored in Supabase secure storage buckets with row-level security policies.

Analysis Data: Nutritional analysis results are stored in our PostgreSQL database with encryption.

4.2 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Row-level security policies in the database
• Regular security audits and monitoring
• Access controls and authentication
• Secure API endpoints

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

4.3 Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete your personal data within 30 days, except:

• Data we are required to retain for legal or compliance purposes
• Aggregated, anonymized data used for analytics (cannot identify you)
• Backups, which are purged according to our backup retention schedule

5. Your Privacy Rights

5.1 Access and Portability

You have the right to access your personal data and request a copy in a portable format. Contact us at privacy@chopcam.com to request your data.

5.2 Correction

You can update your account information and preferences through the Account tab in the App.

5.3 Deletion

You have the right to request deletion of your personal data. To delete your account and data:

• Open the CHOPCAM app
• Go to the Account tab
• Select "Delete Account"
• Or email us at privacy@chopcam.com

Note: Deleting your account will permanently delete your meal photos, analysis history, and account information. This action cannot be undone.

5.4 Opt-Out of Communications

You can opt out of promotional emails by following the unsubscribe link in any email. You cannot opt out of service-related communications (e.g., account verification, subscription confirmations).

5.5 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your rights

To exercise these rights, contact us at privacy@chopcam.com.

5.6 European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, contact us at privacy@chopcam.com. You also have the right to lodge a complaint with your local data protection authority.

6. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are under 18, you must have your parent or guardian's permission to use the Service.

If we learn that we have collected information from a child under 13 without parental consent, we will delete that information immediately. If you believe we have collected information from a child under 13, please contact us at privacy@chopcam.com.

7. Third-Party Links and Services

The App may contain links to third-party websites, services, or educational resources. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

Key Third-Party Services We Use:

• OpenAI: Privacy Policy
• Supabase: Privacy Policy
• Apple: Privacy Policy
• Google: Privacy Policy

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

Our servers are primarily located in the United States. By using the Service, you consent to the transfer of your information to the United States and other countries where we operate.

We take steps to ensure adequate protection of your data, including using Standard Contractual Clauses for transfers from the EEA.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by:

• Posting the new Privacy Policy in the App
• Updating the "Last updated" date at the top of this policy
• Sending you an email notification (for material changes)
• Displaying an in-app notification

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy. If you do not agree to the changes, you must stop using the Service and delete your account.

10. Do Not Track Signals

Some web browsers have a "Do Not Track" feature. Because there is not yet a common understanding of how to interpret Do Not Track signals, our Service does not currently respond to Do Not Track signals.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your request within 30 days.

12. Legal Basis for Processing (GDPR)

If you are in the EEA, our legal basis for collecting and using your personal information depends on the specific context:

• Contract Performance: Processing necessary to provide the Service you requested
• Consent: You have given explicit consent for specific processing activities
• Legitimate Interests: Processing necessary for our legitimate business interests (e.g., improving the Service, fraud prevention)
• Legal Obligation: Processing required to comply with legal obligations