# Privacy Policy
**Nutrition Tracker - MyFitMate**
Effective Date: 28 December 2025
Last Updated: 26 May 2026

## 1. Who We Are
This Privacy Policy explains how **Yury Tomachinskiy** ("MyFitMate", "we", or "our") handles information when you use the MyFitMate mobile application, website, or related services (the "Services").

**Controller:** Yury Tomachinskiy
**Email:** contact@myfitmate.app

## 2. Privacy Summary
MyFitMate does not collect personal account data and does not track users for advertising. We do not require Apple Sign In, email sign-in, names, phone numbers, profiles, contacts, precise location, or advertising identifiers.

The App only processes the limited data needed to provide its features, protect the Services, and respond to requests you choose to make. Uploaded meal images are temporary. If you upload an image for meal analysis, it is deleted from our upload storage within **10 minutes** after upload.

We do not sell user data. We do not use third-party advertising SDKs. We do not use your uploaded images for advertising.

## 3. Personal Data We Do Not Collect
MyFitMate does not collect any personal data.

## 4. Limited Data We May Process
The Services may process limited information needed to make the App work, provide requested features, protect the Services, process subscriptions, or respond to support messages:

| Category | What it means | Retention |
|----------|---------------|-----------|
| **Temporary meal uploads** | Meal photos or text you submit for AI nutrition analysis | Uploaded images are deleted from our upload storage within **10 minutes** |
| **AI analysis output** | Estimated meal title, ingredients, calories, and nutrients generated from your request | Returned to the App; saved data is controlled locally by you where applicable |
| **Local app data** | Meals, preferences, images, and nutrition history saved on your device or in your own iCloud storage | Controlled by your device, App, and iCloud settings |
| **App security data** | App Attest or DeviceCheck challenges, assertions, key identifiers, abuse-prevention counters, and technical security logs | Kept only as needed for security, abuse prevention, and service integrity |
| **Subscription status** | Apple App Store purchase or subscription status needed to unlock paid features | Handled mainly by Apple; we may receive limited receipt/status information |
| **Support messages** | Information you voluntarily send us by email | Kept as needed to respond and maintain records |

## 5. Uploaded Images
When you upload a meal image:
1. The image is used to provide the meal analysis you requested.
2. The image may be temporarily passed to an AI processing provider to generate the result.
3. The image is deleted from our upload storage within **10 minutes** after upload.
4. New meal drafts are not intentionally linked to a personal account.
5. The App may keep a local copy on your device or in your own iCloud storage if you save it or if your device settings do so.

## 6. Apple Sign In, Apple Payments, and App Attest
We do **not** use Apple Sign In.

Apple may still process information when you:
- download the App from the App Store;
- buy or manage a subscription through Apple In-App Purchase;
- use platform security features such as App Attest or DeviceCheck.

App Attest and DeviceCheck help us verify that requests come from a genuine copy of the App and help prevent abuse. They are not used by us as Apple Sign In.

## 7. AI Processing
The App uses AI to estimate meals, calories, and nutrients from images or text you choose to submit. AI results can be inaccurate.

We use submitted images or text only to provide the requested feature, protect the Services, and enforce our Terms. We do not use uploaded meal images for advertising.

## 8. Sharing and Disclosure
We may share limited information only where needed:

| Recipient | Purpose |
|-----------|---------|
| **Apple** | App Store download, subscription payment, refund handling, and platform security |
| **AI processing provider** | Meal image or text analysis requested by you |
| **Service infrastructure providers** | Hosting, storage, security, and operation of the Services |
| **Authorities** | Only if required by law or necessary to protect rights, safety, or security |

We do not sell user data and we do not integrate third-party advertising SDKs.

## 9. Security
We use technical safeguards such as TLS encryption in transit, access controls, short-lived upload URLs, temporary upload storage, App Attest/DeviceCheck verification, and rate limits.

No system is perfectly secure, but the App is designed to minimize the amount of information stored on our servers.

## 10. Children
The Services are not directed to children under **16**, and we do not knowingly collect personal data from children under 16.

## 11. Your Choices
You can:
- stop using the App at any time;
- delete local App data from your device;
- manage or delete iCloud data through your Apple/iCloud settings;
- manage subscriptions through Apple;
- contact us at **contact@myfitmate.app** with privacy questions.

Because we do not require personal account registration, we may not be able to identify or recover data stored only on your device or in your iCloud account.

## 12. International Transfers
Service providers may process limited technical data in countries outside your own. Where required, we rely on appropriate safeguards such as contractual protections or adequacy decisions.

## 13. Changes to This Policy
We may update this Privacy Policy from time to time. If changes are material, we will provide notice in the App or by another reasonable method.

## 14. Contact
For privacy questions or requests:
**Email:** contact@myfitmate.app

Some nutrition data may be sourced from **OpenFoodFacts** and made available under the Open Database License (ODbL):
https://opendatacommons.org/licenses/odbl/1.0/