a. Information You Provide to Us

When you interact with our Service, we collect the personal information that you voluntarily provide, including but not limited to:

• Account Information: When you register, we collect your full name, email address, and a password. The password is securely stored in a hashed format and is not accessible in plaintext.
• Uploaded Content: You may upload photographs of meals to use our nutritional analysis features. These images are stored and associated with your account for ongoing service delivery and model improvement.
• AI Correction Data: If you correct our AI's food recognition, the text correction is stored to improve the model's accuracy. This data may be aggregated and anonymized for training purposes.
• Profile and Goal Information: In the future, optional features may collect data such as your age, gender, weight, height, activity level, and dietary goals, strictly for personalized recommendations.
• Communication Records: If you contact us for support or feedback, we retain the content of your communication, your email address, and any attachments for recordkeeping and support delivery.

b. Information We Collect Automatically

When you use the Service, we automatically collect certain data to ensure optimal functionality:

• Device and Usage Information: This includes IP address, browser type and version, operating system, device identifiers, date and time of access, referring URLs, and pages visited.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar technologies to enhance your user experience, maintain session data, and collect aggregated usage statistics. You can manage cookie preferences through your browser settings.

Cookie Usage

We use various types of cookies and local storage to provide and improve our Service:

• Essential Cookies: These are necessary for the website to function and cannot be switched off. They include:
  • Authentication cookies to keep you logged in during your session
  • Security cookies to prevent unauthorized access
  • Basic functionality cookies to remember your preferences
• Functionality Cookies: These enable enhanced features and personalization, including:
  • UI preferences (like sidebar state)
  • Recently analyzed meals history
  • Language and region preferences
• Local Storage Usage: We use browser local storage for:
  • Caching meal analysis results for better performance
  • Storing user preferences and settings
  • Maintaining your session state
  • Temporary data storage for app functionality

You can control cookie preferences through your browser settings. Note that disabling certain cookies may limit the functionality of the Service.

c. Information from Third Parties

We may receive personal data about you from third-party sources, such as authentication providers (e.g., Google OAuth) or analytics tools. This information is governed by the third party's privacy policies and your settings with them.

We process your personal information for the following purposes:

• Service Delivery and Maintenance: To provide core features including nutritional analysis, user authentication, and account management.
• Improvement and Personalization: To analyze usage patterns and feedback to improve our Service and to offer personalized user experiences based on your profile data and preferences.
• AI Model Training: To improve the accuracy of our nutritional AI, we may use your uploaded images and corrections in a de-identified, aggregated manner.
• Communication and Support: To send account-related notifications, respond to inquiries, resolve technical issues, and provide customer support.
• Security and Abuse Prevention: To detect, investigate, and prevent fraudulent behavior, abuse of the Service, and violations of our Terms of Service.
• Legal Compliance: To fulfill obligations under applicable laws, regulations, and legal processes, or respond to lawful requests from public authorities.

We collect and process your personal data under one or more of the following lawful bases:

• Consent: When you have explicitly consented to the processing.
• Contractual Necessity: Where processing is required to fulfill a contract with you.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation.
• Legitimate Interests: For purposes such as improving the Service or preventing fraud, provided these do not override your rights.

We do not sell or rent your personal information to third parties. However, we may share your information in the following situations:

• With Service Providers: We engage third-party vendors for hosting, storage, authentication, analytics, and support. These vendors are contractually bound to protect your data and use it solely to provide services to us.
• Business Transfers: In the event of a merger, acquisition, sale, or reorganization, your data may be transferred to the new entity.
• Legal Requirements: We may disclose your information if compelled by law, legal process, or governmental request.
• Consent-Based Sharing: We may share information for other purposes if you give us explicit consent.

Depending on your location, you may have the following rights:

• Right of Access: You can request a copy of your personal data.
• Right to Correction: You may update or correct inaccurate information.
• Right to Deletion: You can request the deletion of your data, subject to lawful exceptions.
• Right to Object: You may object to certain forms of processing.
• Right to Data Portability: You may request a copy of your data in a machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, email us at privacy@nutrimealsnap.com. We may require verification of your identity before processing requests.

We implement administrative, technical, and physical safeguards to secure your personal data. These include:

• End-to-end encrypted HTTPS connections (SSL/TLS)
• Secure, access-controlled cloud infrastructure
• Hashed and salted passwords
• Regular system audits and vulnerability scanning

However, no method of transmission over the internet or method of storage is completely secure. We encourage you to use strong passwords and protect your login credentials.

We retain personal data only as long as necessary to fulfill the purposes described above, including:

• While your account is active
• As required for legal, tax, or regulatory purposes
• To enforce our legal rights or resolve disputes

When data is no longer needed, we securely delete or anonymize it.