Privacy Policy

1. Introduction

ThinkFood ("we", "our", or "us") is committed to protecting your personal data. This policy explains what data we collect, why, who it is shared with and how you can control it when you use our mobile application and website (the "Service").

We do not do advertising or tracking: we do not sell your data, we show no ads, and the app contains no advertising tracker.

2. Data We Collect

• Account: email address and password (the password is hashed by our authentication provider; we never see it).

• Profile: first or full name, nickname, profile photo, date of birth, sex, diet, activity level, goal and preferred units.

• Health and fitness: height, weight, target weight, the meals you log (calories, macronutrients, micronutrients), water, sleep, fasting and the physical activities you enter.

• Content: meal photos, written descriptions, voice recordings used to dictate a meal, captions, comments, mentions, favorites, buddy requests and messages sent through the "company" form.

• Identifiers: your account identifier and the token that lets us send you push notifications.

• Purchases: the state of your ThinkFood Pro subscription (active or not, end date). Payment is handled by Apple; we never have access to your card.

We do not collect your location, your contacts, your browsing history or an advertising identifier. The step count measured by your phone stays on your device and is not sent to our servers.

3. Health Data

Information about your weight, height, food, sleep and activity is health data, which the GDPR protects more strictly. We process it only with your explicit consent, which you give when you create your profile, and only to run and personalize the Service (computing your targets, tracking, recommendations).

We never use this data for advertising, and we never sell it or share it with data brokers. You can withdraw your consent at any time by deleting your account.

4. How We Use Your Data

• Provide the Service and compute calorie and macro targets suited to your profile (performance of the contract and consent).

• Track your food intake and progress, and show your history, streak, badges and rewards.

• Manage your account and your Pro subscription.

• Send reminders and notifications, only if you turned them on.

• Keep the Service secure and prevent abuse, for example by limiting the number of analyses per day (legitimate interest).

5. AI Food Analysis

When you scan a meal, describe it in writing or dictate it by voice, your photo, text or recording is sent to our server and then to Google's Gemini API, which returns the nutritional analysis. Our server does not keep the voice recording or the content sent for analysis.

We use the paid tier of the Gemini API, whose terms state that Google does not use this content to improve its products or train its models. We do not use your photos or descriptions to train AI models either.

If you save the meal, its photo is kept in your private storage space, tied to your account. It is only visible to other people if you share the meal to the feed.

6. Sharing With Other Users

You share nothing until you have friends ("buddies"). A buddy request must be accepted by the other person before anything becomes visible. Your meals are only visible to your buddies if you share them to the feed, and you can hide your feed from a buddy or remove them at any time.

The weekly league leaderboard shows your nickname (or first name) and your weekly stats to other users, along with the profile frame you equipped. Your profile photo and full name do not appear there.

7. Storage & Security

Your data is stored with Supabase, on servers located in the European Union (Paris, France). Access is protected by security rules that limit each account to its own data, meal photos sit in private storage viewed through temporary links, the session is stored encrypted on your phone, and traffic to our servers is encrypted (TLS). Data is encrypted at rest by our host.

No measure is foolproof: we do our best to protect your data, but cannot guarantee absolute security.

8. Third-Party Services

To run the Service we use providers that process data on our behalf:

• Supabase — database, authentication and file storage

• Railway — hosting of our server

• Google (Gemini API) — AI food analysis

• RevenueCat — subscription management (receives your account identifier and purchase state)

• Apple — App Store, payment and billing of the subscription

• Expo — push notification delivery

• Open Food Facts — receives the barcode you scan to find the product, with no other information about you

On the website: OVH (hosting) and Plausible (cookie-free visit statistics).

9. Transfers Outside the European Union

Some providers (notably Google, RevenueCat, Railway, Expo and Apple) may process data outside the European Union, including in the United States. These transfers are covered by appropriate safeguards, such as the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.

10. Retention & Deletion

We keep your data for as long as your account is active. You can delete it at any time from Settings → Delete account in the app: your account, profile, meals, photos and logs are then deleted immediately. Any technical backup copies are purged within 30 days at most.

Apple and RevenueCat may keep your purchase history as long as accounting law or their obligations require. Our server's technical logs (errors, usage limits) are kept briefly for security purposes.

11. Your Rights (GDPR)

You have the right to access your data, correct it, erase it, export it in a portable format (backup feature in Settings), restrict or object to certain processing, and withdraw your consent at any time.

To exercise these rights, write to contact@thinkfood-app.com. You may also lodge a complaint with your data protection authority (in France, the CNIL: www.cnil.fr).

12. Children's Privacy

ThinkFood is not intended for anyone under 16. We do not knowingly collect personal data from children under 16. If you believe a child has given us information, contact us and we will delete it.

13. Changes to This Policy

We may update this policy from time to time. For a significant change we will let you know in the app or by email. The date of the last update is shown at the top of this page.

14. Contact

For any privacy question or to exercise your rights:

📧 contact@thinkfood-app.com

🏢 ThinkFood, France 🇫🇷