Privacy Policy for VoiCal

1. Information We Collect

1.1 Personal Information You Provide

When you create an account and use VoiCal, we collect the following personal information:

Profile Information:

• First name
• Gender (male, female, other, or prefer not to say)
• Date of birth / Age
• Current weight
• Height
• Weight goal
• Physical activity level (sedentary, active, athletic, athlete)
• Daily calorie goals (calculated based on your profile)

Meal and Nutrition Data:

• Voice recordings temporarily processed to text for meal logging
• Meal descriptions and names
• Food items and quantities consumed
• Nutritional information (calories, proteins, carbohydrates, fats)
• Meal timestamps and dates
• Weight tracking entries over time

Account Information:

• Email address (via Google or Apple Sign-In)
• Authentication credentials (securely managed by third-party providers)
• Account creation date
• Subscription status and payment information (processed by our payment provider)

1.2 Information Automatically Collected

When you use the App, we may automatically collect:

Device Information:

• Device type and model
• Operating system and version
• Unique device identifiers
• Mobile network information
• Device language and region settings

Usage Information:

• App features used
• Time spent in the App
• Navigation patterns
• Error logs and crash reports
• Performance data

1.3 Voice Data

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Core App Functionality

• Create and manage your account
• Calculate personalized daily calorie and macro goals
• Process and log your meals using AI-powered natural language processing
• Retrieve nutritional information for food items
• Track your weight progress over time
• Display your nutritional data through charts and graphs
• Sync data across your devices

2.2 Service Improvement

• Analyze usage patterns to improve app features
• Identify and fix technical issues
• Develop new features based on user needs
• Optimize app performance and user experience

2.3 Communication

• Send important service announcements
• Provide customer support
• Respond to your inquiries and requests
• Send subscription and billing notifications
• Deliver optional push notifications (with your permission)

2.4 Legal and Security

• Comply with legal obligations
• Enforce our Terms and Conditions
• Protect against fraud and abuse
• Ensure the security of our systems and users

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

3.1 Service Providers

We engage trusted third-party service providers to help us operate the App:

Infrastructure and Storage:

• Supabase (Database and Authentication) - Stores your profile, meal data, and weight history
• Cloud hosting providers - For app infrastructure and data storage

AI and Data Processing:

• Anthropic Claude API - Processes meal descriptions to extract food items and generate structured data
• API Ninjas - Retrieves nutritional information for food items
• N8N (Workflow automation) - Orchestrates the meal processing pipeline

Payment Processing:

• RevenueCat - Manages subscriptions and in-app purchases
• Apple App Store / Google Play Store - Process payments (we never see your payment details)

Analytics and Monitoring:

• PostHog - Anonymous analytics and product insights
• Sentry - Error tracking and performance monitoring
• OneSignal - Push notification delivery (only if you opt-in)

All service providers are contractually required to use your data only for providing services to us, implement appropriate security measures, comply with applicable data protection laws, and not use your data for their own purposes.

3.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Requests from law enforcement or government authorities
• Protection of our rights, property, or safety
• Protection of our users or the public

3.3 Business Transfers

If VoiCal is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different Privacy Policy.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: Data is retained while your account is active
• Deleted Accounts: Upon account deletion, your data is permanently deleted within 30 days
• Meal History: Meal logs are retained for the life of your account or until you delete them
• Weight History: Weight tracking data is retained for the life of your account
• Legal Retention: Some data may be retained longer to comply with legal obligations

You can delete individual meals or your entire account at any time through the App settings.

5. Data Security

We implement industry-standard security measures to protect your information:

Technical Safeguards:

• End-to-end encryption for data transmission (HTTPS/TLS)
• Encrypted data storage
• Secure authentication protocols (OAuth 2.0)
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements

Organizational Safeguards:

• Limited employee access to personal data
• Confidentiality agreements with all personnel
• Regular security training
• Incident response procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

6.1 Access and Portability

• Request a copy of your personal data in a structured, machine-readable format
• Access your data through the App's export feature

6.2 Correction and Update

• Update your profile information at any time in the App settings
• Correct inaccurate or incomplete data

6.3 Deletion

• Delete individual meals or weight entries
• Request complete account deletion through App settings
• Data will be permanently deleted within 30 days

To exercise your rights, contact us at: contact@mexar.fr

7. Children's Privacy

VoiCal is not intended for users under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children.

If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information immediately. If you believe we have collected information from a child, please contact us at: contact@mexar.fr

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those in your country.

When we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (EU)
• Privacy Shield Framework compliance (where applicable)
• Adequacy decisions by regulatory authorities
• Your explicit consent when required

Data Storage Locations:

• Primary data storage: EU and US regions (Supabase infrastructure)
• Processing locations: US (Claude API, API Ninjas, N8N)
• Backup locations: Multiple geographic regions for redundancy

9. Third-Party Links

The App may contain links to third-party websites, services, or resources that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites or services before providing your personal information.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

10.1 Right to Know

You have the right to request disclosure of:

• Categories of personal information collected
• Categories of sources from which information is collected
• Business or commercial purposes for collecting information
• Categories of third parties with whom we share information
• Specific pieces of personal information we have collected

10.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions.

10.3 Right to Opt-Out

You have the right to opt-out of the "sale" of personal information. We do not sell your personal information.

To exercise your CCPA rights, contact us at: contact@mexar.fr

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

11.1 Legal Basis for Processing

We process your personal data based on:

• Contract Performance: To provide the App services you subscribed to
• Legitimate Interests: To improve our services, prevent fraud, and ensure security
• Consent: For optional features like push notifications and analytics
• Legal Obligations: To comply with applicable laws

11.2 Your GDPR Rights

• Right of access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

For GDPR-related inquiries, contact us at: contact@mexar.fr

12. Cookie Policy

VoiCal is a native mobile application and does not use traditional web cookies. However, we may use similar technologies:

12.1 Local Storage

• We store data locally on your device for app functionality
• This includes cached meal data, preferences, and authentication tokens
• You can clear this data by deleting the app

12.2 Analytics Identifiers

• Anonymous device identifiers for analytics purposes
• Used to understand app usage patterns
• Can be disabled through device settings or app preferences

13. Push Notifications

If you opt-in to push notifications:

What We Send:

• Reminder notifications for meal logging
• Goal achievement celebrations
• Subscription and account notifications
• Optional motivational messages

Your Control:

• Enable/disable in App settings at any time
• Manage notification preferences through device settings
• We use OneSignal for push notification delivery

14. Analytics and Tracking

We use analytics to understand how users interact with the App:

14.1 What We Track

• App opens and session duration
• Features used and navigation patterns
• Button clicks and user interactions
• Error rates and crash reports
• Performance metrics

14.2 Opt-Out

You can opt-out of analytics through App settings. This will disable anonymous usage tracking and stop sending analytics data to PostHog, without affecting core app functionality.

15. AI and Machine Learning

VoiCal uses artificial intelligence to process your meal descriptions:

15.1 How AI Processes Your Data

• Your meal description (text) is sent to Anthropic's Claude API
• The AI extracts food items and quantities from your description
• Food items are sent to API Ninjas to retrieve nutritional data
• The structured data is saved to your meal log
• All processing happens in real-time during meal logging

15.2 AI Data Usage

• Your meal descriptions are NOT used to train AI models
• Anthropic and API Ninjas have data processing agreements with us
• Data is processed solely for providing you the service
• No data is shared with AI providers for their own purposes

15.3 AI Accuracy

• AI-generated nutritional information is estimates
• Accuracy depends on the quality of your description
• You can manually edit any meal or item
• We are not responsible for dietary decisions based on AI estimates

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, changes in applicable laws, new features or services, or user feedback.

When We Update:

• The "Last Updated" date will be revised
• Material changes will be notified through in-app notifications and email to registered users

Continued use of the App after changes constitutes acceptance. If you do not agree with changes, please stop using the App and delete your account.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: