Privacy Policy

1. Introduction

ThinkFood ("we", "our", or "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our mobile application and website (collectively, the "Service").

By using ThinkFood, you agree to the collection and use of information in accordance with this policy.

2. Data We Collect

We collect the following categories of personal data:

• Account data: email address, encrypted password

• Profile data: first name, date of birth, sex, height, weight, activity level, target weight, nutritional goals

• Usage data: meals scanned, nutritional logs, app interactions, streak data

• Device data: device type, operating system version, push notification token

3. How We Use Your Data

Your data is used exclusively to:

• Provide and improve the ThinkFood service

• Calculate personalized nutritional recommendations and macro targets

• Track your food intake and progress over time

• Send meal reminders and progress notifications (with your consent)

• Improve our AI food recognition accuracy

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. AI Food Analysis

When you scan a meal photo or describe a meal, the data is sent to Google's Gemini API for processing. Photos are processed in real-time and are not stored on our servers. Text descriptions may be briefly cached for processing only. Neither photos nor descriptions are used to train AI models.

5. Data Storage & Security

Your data is stored securely on Supabase servers located in the European Union (Paris, France), compliant with GDPR regulations. We use industry-standard encryption (AES-256) for data at rest and TLS 1.3 for data in transit.

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access your personal data

• Rectify inaccurate data

• Erase your data ("right to be forgotten")

• Export your data in a portable format

• Object to certain processing activities

• Withdraw consent at any time

To exercise these rights, contact us at: privacy@thinkfood-app.com

7. Data Retention

We retain your personal data for as long as your account remains active. If you delete your account, all associated data is permanently deleted within 30 days. You can delete your account at any time from Profile → Settings in the app.

8. Third-Party Services

ThinkFood uses the following third-party services:

• Supabase — database and authentication (EU servers)

• Google Gemini API — AI food analysis

• Stripe — payment processing (Pro subscription)

• Railway — backend hosting

• Expo — push notification delivery

9. Children's Privacy

ThinkFood is not intended for users under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes via the app or email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or to exercise your rights:

📧 privacy@thinkfood-app.com

🏢 ThinkFood, France 🇫🇷