A compact view of BiteBuddy’s collection, sharing, protection, retention, and deletion practices.
Account and profile details, food and nutrition entries, optional health data, user-requested inference photos, community content, support messages, security signals, interactions, diagnostics, limited-ad processing data, and minimized derived wellness-safety signals.
App functionality, estimates, Battle scoring, private wellness safeguards, account security, moderation, support, fraud prevention, opt-in rewarded ads, and post-log scan interstitials. Health, nutrition, and wellness-safety data are not placed in analytics or advertising payloads.
Only with contracted processors needed for hosting, AI inference, notifications, user-requested support, and limited advertising. Private inferred eating or weight patterns are never sent to moderators, advertisers, analytics providers, opponents, or other users. Scan interstitials may follow each AI plate log and every other successfully logged matched barcode; manual entries are ad-free.
TLS in transit, least-privilege authorization, secure mobile storage, signed uploads, integrity checks, replay protection, rate limits, access-controlled safety records, and append-only audit trails.
Original food images are deleted after inference. Expired derived safety signals are retained for up to 90 days, and auditable Safe Mode transitions for up to two years, then deleted or irreversibly anonymized unless a legal hold applies. Account deletion is propagated to subprocessors.
Correct estimates, manage consent and ad privacy choices, respond to private wellness check-ins, enter or recover from Safe Mode, report or block users, hide or delete your content, appeal content decisions, export data, and delete your account.