Privacy Policy

The Service is operated by Niel Nishant Wostan(trading as Track My Bite). For the purposes of the EU and UK GDPR, we are the "data controller" of your personal information. You can reach us at wostanniel@gmail.com.

Information you provide directly.

• Account information. When you sign in with Google, we receive your name and email address from your Google account.
• Food and nutrition data. The foods you log, your saved foods, serving sizes, and your daily calorie and protein goals. Because this relates to your diet, we treat it as health-related (sensitive) information and handle it with additional care.

Information collected automatically. When you use the Service, our hosting provider automatically records technical information such as your IP address, browser and device information, and interactions with the app (for example, pages viewed and searches run). We use this to operate, secure, and improve the Service. We also use strictly necessary cookies to keep you signed in; see our Cookie Policy.

Payment information.When you purchase a paid plan, payments are processed by Stripe. Your card details are entered through Stripe's secure systems and handled directly by Stripe under its own privacy policy. We do not collect or store your full payment card numbers, though we may retain records of your transactions (such as plan, date, and status).

Google API. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not knowingly collect biometric data, precise geolocation, audio or visual recordings, or information about your characteristics (such as age, gender, race, or religion).

We use your personal information to:

• Deliver and maintain the Service (log your food, calculate totals against your goals, and show your history);
• Create and manage your account;
• Process and manage your subscription and payments;
• Respond to your inquiries and provide support;
• Send you administrative messages about your account, security, or the Service;
• Protect the Service, diagnose problems, and prevent fraud or abuse;
• Understand usage trends so we can improve the Service;
• Comply with our legal obligations and enforce our Terms.

We do not sell or share your personal information for advertising or third-party marketing, and we do not use it to build profiles or make automated decisions about you.

Where the GDPR applies, we rely on the following legal bases:

• Performance of a contract — to provide the Service you sign up for and fulfill your subscription.
• Legitimate interests — to secure and improve the Service and prevent fraud, where not overridden by your rights.
• Consent — to process your health-related (dietary) information, which you provide by choosing to log it. You may withdraw consent at any time by deleting the data or your account.
• Legal obligation — to comply with applicable laws, for example retaining transaction records.

We disclose personal information only to service providers who help us run the Service, and only as needed:

• Authentication: Google (sign-in);
• Hosting, cloud computing, and data storage: our hosting and database providers;
• Payment processing: Stripe.

These providers process your information on our behalf under agreements that require appropriate safeguards. We may also disclose information where required by law, to protect our rights, or in connection with a business transfer (such as a merger, financing, or sale of assets).

We and our service providers are located in or may transfer data to the United States and other countries outside the EEA and UK. Where we transfer EEA/UK personal information internationally, we rely on the European Commission's Standard Contractual Clauses (and the UK equivalent), as implemented by our service providers, to keep your information protected.

We keep your personal information for as long as you maintain an account with us. When you delete your account (or ask us to delete your data), we delete your personal information, except where we are required to retain certain records — for example, Stripe transaction records kept for tax and accounting purposes.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, object to or restrict certain processing, withdraw consent where we rely on it, and appeal a decision we make about your request.

To exercise any of these rights, email us at wostanniel@gmail.com or use our request form at https://nielwostan.com/#contact. We honor these rights to the extent your applicable privacy law grants them, and we will respond as required by law. If we decline to act, you may appeal by emailing us at the same address. You also have the right to lodge a complaint with your local data protection authority.

The Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

We use appropriate technical and organizational measures to protect your personal information, including encrypted connections (HTTPS) and authentication through Google (we never store your password). No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated Policy.

If you have any questions about this Privacy Policy or our handling of your information, email us at wostanniel@gmail.com or write to us at: