This Privacy Policy describes how Protocols ("we," "our," or "us") collects, uses, and protects your information when you use our mobile application (the "App"). Your privacy is important to us, and we are committed to protecting your personal information.
1. Information We Collect
1.1 Personal Information
We may collect the following types of personal information:
- Account Information: Email address, username, and profile information when you create an account
- Health & Fitness Data: Workout logs, exercise records, fitness goals, and progress tracking data
- Nutrition Data: Meal logs, dietary preferences, nutritional intake, and food consumption records
- Biometric Data: Weight, body measurements, and other health metrics you choose to input
1.2 Camera and Photo Access
Our app requests camera permissions for the following purposes:
- Food Logging: Take photos of meals for nutrition tracking and analysis
- Barcode Scanning: Scan food product barcodes to quickly log nutritional information
- Photo Gallery Access: Select existing photos from your device for food analysis
Important: When you use photo food analysis, the photo is sent securely to our server and on to OpenAI, which analyzes it to identify the food and estimate its nutrition. We do not store your photos; only the resulting food entry is saved to your meal log. Barcode scanning happens on your device, and only the barcode number is looked up.
1.3 Technical Information
- Technical Data: Basic information your device sends when the app talks to our servers, such as app version and operating system, and server logs of errors
- No Tracking: We do not use advertising, analytics, or tracking tools, and we do not collect your location or contacts
2. How We Use Your Information
We use your information for the following purposes:
- Core App Functionality: Provide fitness and nutrition tracking features
- AI Features: Generate workouts, meal plans, recipes, food photo analysis, and wellness insights. To do this, the information relevant to each request (for example your goals, preferences, body stats, recent logs, or a food photo) is sent to OpenAI for processing
- Progress Tracking: Help you monitor your health and fitness goals
- App Improvement: Fix errors and improve features
- Customer Support: Respond to your inquiries and provide assistance
- Security: Protect against fraud and ensure app security
3. Data Storage and Security
We implement appropriate security measures to protect your personal information:
- Encryption: Data is encrypted in transit and at rest
- Secure Servers: We use Supabase, a secure cloud database platform
- Access Controls: Limited access to personal data on a need-to-know basis
- Regular Updates: We regularly update our security practices
4. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With Your Consent: When you explicitly agree to share information
- Service Providers: With the third-party services that operate the app on our behalf: database and hosting providers, and OpenAI for AI features (see Section 11)
- Legal Requirements: When required by law or to protect our rights and safety
- Business Transfers: In the event of a merger, acquisition, or sale of assets
5. Your Rights and Choices
You have the following rights regarding your personal information:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your personal data
- Data Portability: Export your data in a portable format
- Opt-out: Withdraw consent for data processing where applicable
6. Camera and Photo Permissions
Camera Usage: The app requests camera access solely for food logging and barcode scanning features. You can deny camera permissions and still use other app features. Camera access can be managed through your device's settings at any time.
7. Data Retention and Deletion
We retain your personal information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Improve our services
You can delete your account and data at any time from Settings in the app or at mregan.xyz/account-deletion. When you delete your account, we will permanently delete your personal data within 30 days, except where we are required to retain certain information for legal or regulatory purposes.
8. Children's Privacy
Our app is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.
9. International Data Transfers
Your information may be stored and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your data during international transfers.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy in the app and updating the "Last Updated" date. Your continued use of the app after changes constitutes acceptance of the updated policy.
11. Third-Party Services
Our app uses the following third-party services:
- Supabase: Database, authentication, and server functions
- OpenAI: AI processing for generated workouts, meals, recipes, insights, onboarding chat, and food photo analysis
- Vercel: Hosting for our website and the web version of the app
- Expo: App development, build, and update delivery platform
- OpenFoodFacts: Food database for nutritional information (when using barcode scanning; only the barcode number is sent)
These services have their own privacy policies, which we encourage you to review.
12. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
Email: mregan@duck.com
Response Time: We will respond to privacy inquiries within 30 days
By using the Protocols app, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein.