EatSmart Privacy Policy

Effective Date: January 12, 2026

1. Introduction

Welcome to EatSmart ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Please read this Privacy Policy carefully. By using EatSmart, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

Data Type	Description	Purpose
Login Credentials	Email, phone number, authentication tokens from Google, Apple, or Firebase	Account creation and authentication
Profile Information	Name, profile picture (from login provider)	Personalization and identification
Phone Number	Phone number for SMS verification	Account security and verification

2.2 Information Automatically Collected

Usage Data: Download history, materials accessed, timestamps
Device Information: Device type, operating system version, app version
Log Data: IP address, access times, error logs

3. How We Use Your Information

We use the collected information for the following purposes:

Service Delivery: To provide and maintain our App functionality
Authentication: To verify your identity and secure your account
Communication: To send you notifications, updates, and support messages
Analytics: To understand how users interact with our App and improve our services
Compliance: To comply with legal obligations and enforce our Terms of Service

4. Third-Party Services

EatSmart integrates with the following third-party services:

4.1 Firebase (Google)

Purpose: Authentication, phone verification, cloud messaging
Data Shared: Email, phone number, authentication tokens
Privacy Policy: Firebase Privacy Policy

4.2 Google Sign-In

Purpose: User authentication
Data Shared: Email, name, profile picture
Privacy Policy: Google Privacy Policy

4.3 Apple Sign-In

Purpose: User authentication
Data Shared: Email (optional), name (optional), Apple ID token
Privacy Policy: Apple Privacy Policy

4.4 Google Drive API

Purpose: Content storage and delivery
Data Shared: Download requests (no personal data)
Privacy Policy: Google Privacy Policy

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information:

Encryption: Data in transit is encrypted using HTTPS/TLS
Database Security: SQLite database with access controls
Authentication: JWT tokens with expiration for secure sessions
Server Security: Regular security updates and monitoring

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to:

Provide you with our services
Comply with legal obligations
Resolve disputes and enforce our agreements

When you delete your account, your personal information is immediately removed as described in Section 7 below.

7. Account Deletion and Data Anonymization

What Happens When You Delete Your Account:

Immediate Actions:

All login methods (Google, Apple, Phone) are permanently removed
Personal information (name, email, phone, profile picture) is permanently deleted
All identity records are deleted from our database
You are immediately logged out and cannot log back in

Data Anonymization:

Your historical usage data (downloads, activity) is anonymized using SHA-256 cryptographic hashing
The anonymization process is irreversible - we cannot link the data back to you
Anonymized data is retained for system integrity and analytics purposes only
If you create a new account, it will be completely separate with no connection to previous data

Timeline: Account deletion is processed immediately and cannot be reversed.

8. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your account and personal information (see Section 7)
Objection: Object to certain processing of your personal information
Data Portability: Request transfer of your data to another service (where technically feasible)

To exercise these rights, please contact us at the email address provided in Section 11.

9. Children's Privacy

EatSmart is not intended for children under the age of 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

Posting the new Privacy Policy on this page
Updating the "Effective Date" at the top
Sending you a notification through the App (for material changes)

Your continued use of EatSmart after any changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@eatsmart.app
Support Email: imusdad@gmail.com
App: EatSmart
Last Updated: January 12, 2026

For Data Deletion Requests: You can delete your account directly through the App settings, or contact us at privacy@eatsmart.app for assistance.

12. International Users

If you are accessing EatSmart from outside the country where our servers are located, please be aware that your information may be transferred to, stored, and processed in a different country. By using our App, you consent to such transfer and processing.