1. Introduction
Welcome to FoodToru ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our app. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.
By using FoodToru, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information You Provide
- API Keys: If you choose to use your own Claude API key, it is stored securely in your device's Keychain and is never transmitted to our servers.
- Biometric Data: Height, weight, age, and exercise preferences are stored locally on your device.
- Meal Photos: Photos you take of your meals are stored locally on your device.
2.2 Automatically Collected Information
- Usage Data: We may collect information about how you use the app, such as the number of meal analyses performed.
- Device Information: Device type, operating system version, and app version may be collected for analytics and support purposes.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process meal analysis requests through Claude AI
- Personalize your experience with calorie burn calculations
- Store your meal history locally on your device
- Respond to your support requests
- Monitor and analyze usage patterns
4. Data Storage and Security
4.1 Local Storage
All your data, including meal photos, nutritional information, and biometric data, is stored locally on your device using Core Data. This data is never automatically transmitted to our servers.
4.2 CloudKit Sync (Optional)
If you have iCloud enabled, your meal data may sync across your devices using Apple's CloudKit service. This sync is controlled by Apple's privacy policies and your iCloud settings.
4.3 API Key Security
If you provide your own Claude API key, it is stored securely in your device's Keychain using iOS security features. We never have access to your API key.
5. Third-Party Services
5.1 Claude AI (Anthropic)
When you analyze a meal, we send the photo to Anthropic's Claude API for processing. The photo is sent as a base64-encoded image. Please review Anthropic's privacy policy for information about how they handle your data.
Note: If you use your own API key, the data is sent directly from your device to Anthropic's servers, not through our servers.
5.2 Apple Services
We use Apple's CloudKit for optional data synchronization. Your use of CloudKit is subject to Apple's privacy policy.
6. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With Your Consent: We may share your information when you explicitly consent to such sharing.
- Legal Requirements: We may disclose your information if required by law or in response to valid requests by public authorities.
- Service Providers: We may share information with third-party service providers who perform services on our behalf, such as analytics providers.
7. Your Rights and Choices
You have the following rights regarding your personal information:
- Access: You can access all your data stored in the app at any time.
- Deletion: You can delete individual meals or all your data through the app settings.
- API Key Management: You can add, update, or remove your API key at any time through the app settings.
- Biometric Data: You can update or delete your biometric information at any time.
- CloudKit Sync: You can disable CloudKit sync through your device's iCloud settings.
8. Children's Privacy
FoodToru is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
9. Data Retention
Your data is stored locally on your device until you choose to delete it. If you uninstall the app, all local data is removed. If you have CloudKit sync enabled, your data may remain in your iCloud account according to Apple's data retention policies.
10. International Data Transfers
If you use your own Claude API key, your meal photos are sent directly to Anthropic's servers, which may be located outside your country of residence. By using the app, you consent to the transfer of your information to these servers.
11. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us:
- Email: privacy@foodtoru.com
- Support: support@foodtoru.com
13. California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:
- The right to know what personal information is collected
- The right to delete personal information
- The right to opt-out of the sale of personal information (we do not sell personal information)
14. GDPR Rights (European Users)
If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR), including:
- The right to access your personal data
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object to processing
To exercise these rights, please contact us at privacy@foodtoru.com.