1. Scope and contact
This Privacy Policy applies to the ProteinBuddy iOS app, application programming interface, and related support services (collectively, the “Service”). ProteinBuddy is responsible for the personal information described here.
For privacy questions or requests, contact proteinbuddysupport@proton.me.
2. Information we collect
Account information
When you create an account, we collect your name, email address, and password. Passwords are stored in hashed form rather than as readable text.
Profile and wellness information
We collect information you provide during onboarding or in your profile, including your general fitness goal, eating style, height, weight, preferred units, daily protein goal, age group, how you discovered ProteinBuddy, and time zone. Some of this information may be considered sensitive or health-related information in some places.
Meal and activity information
We collect meals you log, including meal names, serving descriptions and quantities, meal type, calories, protein, carbohydrates, fat, and the date and time consumed. We use these entries to calculate progress, streaks, averages, and nutrition insights. We also store favorites and related preferences associated with your account.
Meal photos
If you choose meal scanning, you may take a photo or select one from your photo library. The selected image is uploaded to our server and sent to OpenAI for food identification and portion estimation. Our current flow uses the image to produce scan results and does not save the image in ProteinBuddy’s database. Do not submit images containing people, documents, addresses, or other information unrelated to your meal.
Subscription information
Purchases are processed by Apple. We use RevenueCat to manage subscription entitlements and receive information such as an app-specific user identifier, product or plan identifier, subscription status, purchase and expiration information, and related transaction events. We do not receive your full payment-card number.
Technical information
Our hosting infrastructure may process standard network and request information such as IP address, request time, endpoint, response status, device or user-agent information, and diagnostic logs. The app stores an authentication token securely in the iOS Keychain on your device.
3. How we use information
- Provide, personalize, secure, and maintain the Service.
- Create and authenticate your account.
- Calculate nutrition totals, protein goals, trends, streaks, and progress.
- Analyze meal photos and return editable food estimates.
- Process, verify, restore, and manage subscription access.
- Troubleshoot errors, prevent misuse, and protect the Service.
- Respond to support, privacy, and legal requests.
- Comply with law and enforce our Terms of Service.
We do not sell your personal information or use your meal, profile, or health-related information for third-party advertising.
4. How we share information
We disclose information only as needed to operate the Service or when required by law:
- OpenAI: receives meal photos and related instructions when you request a meal scan.
- RevenueCat: receives app user identifiers and subscription information to manage entitlements and purchases.
- Apple: processes App Store purchases and provides related transaction information.
- Hosting and database providers: process account, meal, network, and application data to host our API and database. Our API currently uses Railway infrastructure.
- Legal and safety disclosures: we may disclose information to comply with law or valid requests, protect rights and safety, investigate fraud, or enforce agreements.
- Business transfers: information may transfer during a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate protections.
We require service providers to process information only for the services they provide and to apply protections consistent with this policy and applicable law.
5. Retention and deletion
We retain account, profile, and meal information while your account remains active and as reasonably needed to provide the Service. Operational logs and backup copies may remain for a limited period according to our providers’ backup and security cycles.
You may delete your account through account settings in the app. Account deletion permanently deletes your account and all associated user data from ProteinBuddy’s database, including your profile, logged meals, and favorites. Deletion cannot be undone. Limited records may be retained only where required by law, to resolve disputes, prevent fraud, or enforce agreements, and will be deleted when no longer required.
You may also contact proteinbuddysupport@proton.me about an access, correction, or deletion request.
6. Your choices and rights
You can decline optional information, camera access, or photo-library access; log meals manually instead of scanning; edit certain profile and nutrition information in the app; and cancel subscriptions through Apple. You can revoke camera or photo access in iOS Settings.
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing; receive a portable copy; withdraw consent; or appeal a decision. We may need to verify your identity before completing a request.
7. Security and international processing
We use reasonable administrative, technical, and organizational safeguards, including hashed passwords, authenticated API access, and device Keychain storage for authentication tokens. No transmission or storage method is completely secure, so we cannot guarantee absolute security.
ProteinBuddy and its providers may process information in countries other than your own, including the United States. Where required, we use appropriate safeguards for cross-border transfers.
8. Children
The Service is not directed to children under 13, or a higher minimum age where required by local law. We do not knowingly collect personal information from children below the applicable minimum age. Contact us if you believe a child has provided information so we can investigate and delete it.
9. Changes to this policy
We may update this policy as the Service or law changes. We will post the revised policy here, update the effective date, and provide additional notice when required.