Privacy Policy

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account
• Use our applications or services
• Contact us for support
• Subscribe to our newsletter or marketing communications

Automatically Collected Information

When you use our Services, we may automatically collect certain information, including:

• Device information (device type, operating system, unique device identifiers)
• Usage data (app features used, time spent, user interactions)
• Log data (IP address, browser type, access times)
• Location data (with your permission)

We use the information we collect for various purposes, including:

• Providing, maintaining, and improving our Services
• Processing transactions and sending related information
• Sending technical notices, updates, and support messages
• Responding to your comments, questions, and customer service requests
• Communicating with you about products, services, and events
• Monitoring and analyzing trends, usage, and activities
• Detecting, investigating, and preventing fraudulent transactions
• Personalizing and improving user experience

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as:

• Cloud hosting and data storage providers (Supabase)
• Anonymous analytics and performance monitoring (TelemetryDeck - see Section 8 for details)
• Subscription management services (RevenueCat, Apple App Store)
• AI processing providers (OpenAI, Google Gemini - for food photo analysis)
• Customer support and communication platforms

Important: Only anonymous, privacy-safe data is shared with analytics providers (TelemetryDeck). Your health data (food logs, weight) is never sent to analytics services and remains in your private account.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Security Measures Include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your information
• Opt-out: Opt-out of marketing communications
• Restriction: Request restriction of processing

To exercise these rights, please contact us using the information provided in the "Contact Us" section.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods:

• Account information: Until account deletion or 3 years of inactivity
• Anonymous analytics data: 90 days (automatically deleted via TelemetryDeck)
• User health data: Until account deletion, plus 30 days for backups
• Support communications: Up to 3 years
• Legal compliance data: As required by applicable laws

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws than your jurisdiction.

When we transfer your information internationally, we implement appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy and applicable laws.

Privacy-First Analytics

Our mobile applications (including Bulk AI) use TelemetryDeck, a privacy-first analytics service, to understand how people use our apps. This helps us improve the app experience, fix bugs, and prioritize new features.

What We Collect (Anonymous)

All analytics data is completely anonymous and cannot be linked to your identity:

• App usage patterns: Which screens you view, which features you use, how often you use the app
• Performance metrics: App launch time, loading speeds, error rates (bucketed for privacy)
• Interaction events: Button taps, navigation patterns, feature engagement (e.g., "photo analyzed," "achievement unlocked")
• Subscription events (Bulk AI): Paywall views, purchase outcomes (completed/failed), trial starts, subscription status changes (all without exact prices or payment details)
• Aggregated statistics: Number of food logs per day (bucketed: "1-5", "6-10"), streak lengths, achievement progress (no exact counts)

What We DON'T Collect

We prioritize your privacy and never collect personally identifiable information in analytics:

• Your identity: No names, email addresses, phone numbers, or user IDs
• Your health data: No specific food names, exact calorie counts, exact weights, or meal details
• Your location: No GPS coordinates or precise location tracking
• Your payment details: No credit card numbers, exact subscription prices, or payment methods
• Your photos: No images or photo content (photos are processed locally and stored only in your private account)
• Exact timestamps: All time-based metrics are bucketed (e.g., "0-5 seconds," "5-15 seconds") to prevent tracking

How We Use Analytics

Anonymous analytics data helps us improve our apps in the following ways:

• Identify and fix bugs (e.g., "5% of users experience a crash on this screen")
• Improve performance (e.g., "app launch takes too long on older devices")
• Understand feature adoption (e.g., "70% of users try the camera feature within first week")
• Optimize user flows (e.g., "users drop off at this onboarding step")
• Prioritize development (e.g., "most-requested features based on usage patterns")

Your Control

You have full control over analytics sharing. You can opt-out at any time through the app settings:

• Bulk AI: Settings → Privacy → Analytics Sharing (toggle off)
• When analytics is disabled, no events are sent to TelemetryDeck
• Your choice is saved locally and respected immediately
• You can re-enable analytics at any time through the same setting

Third-Party Analytics Provider

We use TelemetryDeck (https://telemetrydeck.com) as our analytics provider. TelemetryDeck is a privacy-focused service that:

• EU-hosted: All data is stored in the European Union with GDPR compliance
• No user tracking: Uses anonymous session IDs, not personal identifiers
• No cross-app linking: Cannot link data across apps or websites
• Automatic deletion: All analytics data is automatically deleted after 90 days
• Privacy policy: TelemetryDeck Privacy Policy

Data Retention

Anonymous analytics data is retained for 90 days, after which it is automatically and permanently deleted. This retention period allows us to identify trends while minimizing data storage.

Legal Compliance

Our analytics practices comply with:

• GDPR (General Data Protection Regulation) - EU privacy law
• CCPA (California Consumer Privacy Act) - User opt-out rights
• Apple App Store Guidelines - Privacy nutrition labels and user consent

Note: We never use analytics for advertising, cross-app tracking, or selling data to third parties. Analytics is solely for improving your app experience.