1. Introduction
BiteBuddy is a competitive fitness application that lets users track food, monitor calorie and macro progress, and participate in calorie-based Battles. This Privacy Policy describes how BiteBuddy collects, uses, protects, and deletes personal information.
Questions may be sent to support@bitebuddyapp.online.
2. Information we collect
Account information
- Email address and authentication records.
- Password credentials protected by our authentication provider; BiteBuddy does not store readable passwords.
- Profile, friendship, referral, and account-recovery information needed to operate your account.
App activity
- Food and nutrition entries, calorie and macro progress, and Battle participation and results.
- Referral activity, non-cash reward history, feature interactions, and setup progress.
- Moderated community content, reports, blocks, appeals, and safety evidence when those features are used.
Food photos
A food photo is processed only when you request an AI meal estimate. BiteBuddy removes EXIF and location metadata, sends a re-encoded image inline for inference, and deletes the original image after inference. Food photos are not made public or shared with other users.
Device and security information
We may process app version, operating system, crash and performance data, device-integrity signals, fraud indicators, and security audit events. BiteBuddy does not request your contacts, messages, or precise location.
3. How information is used
- Create, secure, recover, and support accounts.
- Generate editable food estimates and track user-entered nutrition.
- Compute Battle scores and progression on the server.
- Connect friends, process referrals, and prevent cheating or reward abuse.
- Moderate content, respond to safety reports, and comply with law.
- Measure anonymous reliability and performance without placing food or health data in analytics payloads.
BiteBuddy does not sell personal information. Food and health data are not shared with advertisers or used to personalize advertising.
4. AI meal analysis
AI scanning requires a separate, versioned disclosure and consent. BiteBuddy sends the prepared meal image to Google Gemini Paid Services solely to estimate visible foods, portions, calories, and macronutrients. BiteBuddy does not send your name, email, account ID, history, or location with the image.
Google states that paid-service prompts and responses are not used to improve its products. Limited retention may still occur for abuse prevention, security, or legal obligations. See the AI Meal Scan Consent Disclosure for details.
5. Advertising
Ads help keep BiteBuddy’s plate and barcode scanning available without a subscription charge. BiteBuddy uses optional rewarded ads for non-cash, non-transferable features such as Cheat Day Tickets and brief interstitial ads after each user-reviewed AI plate log and every other successfully logged matched barcode. Interstitials are preloaded during scan processing and skipped when they are not ready; manual entries are ad-free.
Google Mobile Ads may process IP-derived coarse location, ad interactions, diagnostics, and device identifiers to deliver, measure, and protect ads. BiteBuddy requests limited or non-personalized ads, does not send food or health data to advertisers, and does not request iOS tracking authorization.
6. Retention and sharing
Information is shared only with processors needed to provide hosting, authentication, AI inference, notifications, security, moderation, support, and limited advertising. Typical retention includes scan-job records for about 30 days, security signals for about 90 days, and moderation evidence for up to two years. Account information is retained while the account is active. Battle, consent, reward, fraud, legal, and audit proofs may be retained longer or anonymized where integrity or law requires it.
7. Your privacy rights
Depending on where you live, you may request access, correction, deletion, portability, restriction, or withdrawal of optional consent. Washington residents may also have rights under the My Health My Data Act. EEA and UK residents may exercise applicable GDPR or UK GDPR rights.
Use Profile → Account & Privacy in BiteBuddy, our web deletion flow, or contact support. Deletion is propagated to applicable subprocessors, subject to narrow legal, fraud, safety, and transaction-integrity exceptions.
8. Age requirement
BiteBuddy is intended only for users who are at least 18 years old.
9. Changes
We may update this policy as BiteBuddy evolves. Material changes receive a new version and effective date, and renewed consent is requested where required.