Privacy Policy

Last Updated: January 2025

1. Introduction

Welcome to You Are What You Eat ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our mobile application.

2. Information We Collect

2.1 Personal Information

• Account Information: Email address, name, and password (encrypted)
• Profile Data: Subscription status, preferences

2.2 Usage Data

• Scanned Products: Barcode numbers and product information
• Analysis History: Ingredient analysis results and health scores
• App Usage: Features used, scan frequency, favorites

2.3 Device Information

• Device Type: iOS or Android device model
• Operating System: Version information
• App Version: Current version installed
• Device Identifiers: For analytics and crash reporting

2.4 Camera Access

• Barcode Scanning: We access your camera only to scan product barcodes
• No Photo Storage: We do not store photos or images from your camera

3. How We Use Your Information

3.1 To Provide Services

• Scan and analyze product barcodes
• Generate ingredient health analysis using AI
• Store your scan history and favorites
• Manage your subscription and account

3.2 To Improve Our App

• Analyze usage patterns to enhance features
• Fix bugs and improve performance
• Develop new features based on user needs

3.3 To Communicate

• Send important service updates
• Respond to support requests
• Notify you of subscription status changes
• Send marketing emails (with your consent)

4. Data Sharing and Third Parties

4.1 Third-Party Services We Use

4.2 What We DON'T Do

• ❌ We DO NOT sell your personal data to third parties
• ❌ We DO NOT share your email with advertisers
• ❌ We DO NOT use your camera for anything except scanning
• ❌ We DO NOT track your location

5. Data Storage and Security

5.1 Storage

• Database: MongoDB with encrypted connections
• Location: Secure cloud servers
• Backup: Regular encrypted backups

5.2 Security Measures

• Passwords encrypted using bcrypt
• HTTPS/TLS encryption for all data transmission
• Regular security audits
• Secure API authentication

5.3 Data Retention

• Active Accounts: Data retained as long as account is active
• Deleted Accounts: Data deleted within 30 days of account deletion
• Legal Compliance: Some data may be retained longer if required by law

6. Your Rights (GDPR & CCPA Compliance)

6.1 Access Your Data

• Request a copy of all your personal data
• Contact: privacy@youarewhatyoueat.com

6.2 Delete Your Data

• Delete your account in app settings
• Or email: privacy@youarewhatyoueat.com
• All data will be permanently deleted within 30 days

6.3 Correct Your Data

• Update your profile in app settings
• Contact support for assistance

6.4 Export Your Data

• Download your scan history as CSV
• Request complete data export

6.5 Opt-Out of Marketing

• Unsubscribe link in all marketing emails
• Update preferences in app settings

6.6 Object to Processing

• You can object to certain data processing
• Contact: privacy@youarewhatyoueat.com

7. Cookies and Tracking

7.1 Essential Cookies

• Authentication tokens
• Session management
• App functionality

7.2 Analytics

• Usage statistics (anonymized)
• Crash reports
• Performance metrics

7.3 No Advertising Tracking

• We do NOT use advertising cookies
• We do NOT track you across other apps/websites

8. Children's Privacy

• Our app is not intended for children under 13 years old
• We do not knowingly collect data from children
• If we discover data from a child, we will delete it immediately
• Parents: Contact us if you believe your child provided information

9. International Data Transfers

• Data may be processed in countries outside your residence
• We ensure appropriate safeguards are in place
• EU users: We comply with GDPR requirements

10. Changes to This Policy

• We may update this policy periodically
• Significant changes will be notified via app or email
• Last updated date shown at top of policy
• Continued use after changes means acceptance

11. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what data we collect
• Right to delete your data
• Right to opt-out of sale (we don't sell data)
• Right to non-discrimination

12. European Privacy Rights (GDPR)

EU/EEA residents have rights including:

• Right to access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object
• Right to withdraw consent

13. Contact Us

14. Legal Basis for Processing (GDPR)

We process your data based on:

• Consent: When you agree to use our services
• Contract: To fulfill our service agreement with you
• Legitimate Interest: To improve our app and prevent fraud
• Legal Obligation: When required by law

15. Automated Decision Making

• We use AI (OpenAI GPT) to analyze ingredients
• This is for informational purposes only
• Not used for decisions that significantly affect you
• You can always request human review

Acceptance: By using You Are What You Eat, you acknowledge that you have read and understood this Privacy Policy.