1. Introduction
BiteBuddy is a competitive fitness application that lets users track food, monitor calorie and macro progress, and participate in calorie-based Battles. BiteBuddy is operated by Greyson Kayde Riley, an individual publisher. This Privacy Policy describes how BiteBuddy collects, uses, protects, and deletes personal information. Our separate Consumer Health Data Privacy Policy explains health-related data and rights.
Questions may be sent to support@bitebuddyapp.online.
2. Information we collect
Account information
- Email address and authentication records.
- Password credentials protected by our authentication provider; BiteBuddy does not store readable passwords.
- Profile, friendship, referral, and account-recovery information needed to operate your account.
App activity
- Food and nutrition entries, calorie and macro progress, and Battle participation and results.
- Referral activity, non-cash reward history, feature interactions, and setup progress.
- Moderated community content, reports, blocks, appeals, and safety evidence when those features are used.
Food photos
A food photo is processed only when you request an AI meal estimate. BiteBuddy removes EXIF and location metadata and sends a re-encoded image inline to Google Gemini. The camera and prepared images exist temporarily on your device; the app attempts to delete those temporary files after processing, but cannot guarantee cleanup on every interruption. BiteBuddy doesn’t store the photo in its database or file storage. Google’s published policy says it keeps submitted content for 55 days for abuse monitoring. Food photos are not made public or shared with other users.
Device and security information
We may process app version, operating system, crash and performance data, device-integrity signals, fraud indicators, and security audit events. BiteBuddy does not request your contacts, messages, or precise location.
2a. Apple Health choice
Apple Health is optional. Depending on the installed version, BiteBuddy may read active or resting energy, steps, workouts, weight, and height after permission to update your personal targets and profile. BiteBuddy does not write to Apple Health, sell Health data, or use it for advertising. Authorized values may be stored in your BiteBuddy account and processed by Supabase for us. You can revoke access in iOS Settings → Health → Data Access & Devices. Versions with an in-app Disconnect action also remove saved raw Health snapshots; historical profile and weight entries remain because they may include manual edits.
3. How information is used
- Create, secure, recover, and support accounts.
- Generate editable food estimates and track user-entered nutrition.
- Compute Battle scores and progression on the server.
- Connect friends, process referrals, and prevent cheating or reward abuse.
- Moderate content, respond to safety reports, and comply with law.
- Measure anonymous reliability and performance without placing food or health data in analytics payloads.
BiteBuddy does not sell personal information. Food and health data are not shared with advertisers or used to personalize advertising.
4. Wellness safeguards
Automatic check-ins and Safe Mode pauses are not currently active, and BiteBuddy is not recording wellness-safety signals. A locked day confirms entries were saved; it cannot establish that every food consumed was logged. Meal logging, history, support, privacy controls, and account deletion remain available.
Previously recorded wellness-safety signals are deleted at expiry; no new signals are recorded. These records are not used for advertising or social features and are not automatically sent to moderators, other users, or analytics providers.
5. AI meal analysis
AI scanning requires a separate, versioned disclosure and consent. BiteBuddy sends the prepared meal image and a fixed nutrition-estimation prompt to Google Gemini Paid Services. No name, email, account-derived identifier, history, or location is included in the request body; Google receives BiteBuddy’s project API key and server connection information.
Google states that paid-service prompts and responses are not used to improve its products. Its published abuse-monitoring policy says it retains prompts, additional context, and responses for 55 days for safety, security, and required legal or regulatory disclosures. Separately enabled developer-owned API logs may have a different configured retention period. See the AI Meal Scan Consent Disclosure for details.
6. Advertising
Ads help keep BiteBuddy’s plate and barcode scanning available without a subscription charge. BiteBuddy uses optional rewarded ads for non-cash, non-transferable features such as Cheat Day Tickets and brief interstitial ads after each user-reviewed AI plate log and every other successfully logged matched barcode. Interstitials are preloaded during scan processing and skipped when they are not ready; manual entries are ad-free. Automatic check-ins and Safe Mode pauses are not currently active, and BiteBuddy is not recording wellness-safety signals.
Google Mobile Ads may process IP-derived coarse location, ad interactions, diagnostics, and device identifiers to deliver, measure, and protect ads. BiteBuddy requests non-personalized ads, does not send food or health data to advertisers, and does not request iOS tracking authorization.
7. Retention and sharing
Service providers include Supabase for app hosting and authentication; Google Gemini for requested meal-image inference; Google Mobile Ads for ads; Cloudflare for the public website and encrypted off-site backups; GitHub Actions for running the encrypted backup workflow; Resend for account email delivery and support messages; and Google Workspace for support inboxes. Open Food Facts receives barcode lookups. Support messages can contain health details if you choose to include them; encrypted backup copies can contain account and health data. What each provider receives depends on the feature used and its configuration. Typical retention includes scan-job records for about 30 days; previously recorded wellness-safety signals are deleted at expiry, with no new signals recorded; and historical safeguard transition records or moderation evidence may remain for up to two years. Separate security and fraud records follow their applicable schedule. Account information is retained while the account is active. Battle, consent, reward, fraud, legal, and audit proofs may be retained longer or anonymized where integrity or law requires it.
8. Your privacy rights
Depending on where you live, you may request access, correction, deletion, portability, restriction, or withdrawal of optional consent. Washington residents may also have rights under the My Health My Data Act. EEA and UK residents may exercise applicable GDPR or UK GDPR rights.
Use Profile → Account & Privacy in BiteBuddy or our web deletion flow. If the web flow fails, email support@bitebuddyapp.online from your registered address to request a manually verified deletion; a support message alone does not start deletion. We request deletion from applicable service providers; their independent retention and narrow legal, fraud, safety, or transaction-integrity exceptions may continue to apply.
9. Age requirement
BiteBuddy is intended only for users who are at least 18 years old.
10. Changes
Effective October 11, 2026. We may update this policy as BiteBuddy evolves. Material changes receive a new version and effective date, and renewed consent is requested where required.