Privacy Policy

DietPulse AI ("we", "us") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the rights you have over your data.

1. Information We Collect

• Account data: name, email, password hash.
• Health & nutrition profile: age, sex, height, weight, goals, dietary preferences, medical conditions and medications you choose to share.
• Usage data: meals logged, activity entries, chat messages with the AI coach, weight history.
• Technical data: IP address, browser type, device identifiers, log data.

2. How We Use Your Data

• Provide personalized nutrition guidance and AI coaching.
• Operate, maintain and improve the Service.
• Process subscriptions and payments.
• Send transactional and (with consent) marketing communications.
• Comply with legal obligations and prevent abuse.

3. Data Storage & Security

Data is stored on secure, encrypted infrastructure provided by reputable cloud vendors. We use industry-standard safeguards including encryption in transit (TLS), encryption at rest, access controls and audit logs. No system is 100% secure; we cannot guarantee absolute security.

4. Cookies & Tracking

We use strictly necessary cookies for authentication and session management. With your consent, we may use analytics cookies to understand product usage. You can control cookies through your browser settings.

5. Third-Party Services

We rely on trusted sub-processors including cloud hosting, authentication, payment processors (e.g. Stripe, Paddle, Lemon Squeezy, PayPal), email delivery and AI model providers. These parties only process data on our behalf under contractual safeguards.

6. Your Rights (GDPR & Similar)

• Access, correct or update your personal data.
• Request deletion ("right to be forgotten").
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent at any time.
• Lodge a complaint with your local data protection authority.

7. Data Deletion Requests

You may delete your account and associated personal data at any time from your account settings, or by emailing support@yourdomain.com. We will process verified deletion requests within 30 days, subject to legal retention obligations.

8. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal data from children.

9. International Transfers

Where data is transferred outside your country, we use appropriate safeguards such as Standard Contractual Clauses.

10. Contact

For privacy questions or to exercise your rights, contact support@yourdomain.com.