Privacy Policy

MyCalorieCoach ("MyCalorieCoach", "we", "us", or "our") is operated by Dinanjana Gunaratne, an individual sole proprietor based in Sri Lanka. This Privacy Policy explains what personal information the MyCalorieCoach mobile application and website (together, the "Service") collect, how we use it, who we share it with, and the choices and rights you have.

By creating an account or using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.

The Service is intended only for adults aged 18 or over. We do not knowingly collect information from anyone under 18.

Who we are and how to contact us

MyCalorieCoach is operated by an individual (Dinanjana Gunaratne). For any privacy question, to exercise your rights, or to make a data request, contact us at dinanjanagunaratne@gmail.com. We are the data controller for the personal information described in this policy.

Information we collect

We collect only what we need to run the coaching Service.

Account and authentication. Your email address and authentication identifiers. If you sign in with Apple, we receive the identifier Apple provides and, if you allow it, your name and relay email. Authentication is handled by our infrastructure provider (Supabase).

Profile and coaching information you provide. During onboarding and ongoing use you give us information such as your goals, dietary preferences, cuisines, your declared non-negotiable foods, and body metrics including height, weight, age, and sex. Some of this is health-related information and we treat it as sensitive.

Activity and content. The food and meals you log, food photos you submit, your weigh-ins, and the messages you exchange with the AI coach. This content is stored to your account so the Service can function and show your history.

Purchase information. Your subscription and trial status. Payments are processed by Apple through the App Store and by our subscription manager (RevenueCat). We never receive or store your card or payment-account details. Apple handles the transaction.

Device, usage, and diagnostic data. Basic device and app-usage events (collected in anonymised form through PostHog) and crash and error reports (through Sentry) so we can keep the app working and improve it. We do not use this to build advertising profiles.

Advertising measurement (iPhone, only if you allow tracking). We advertise the app on Meta (Facebook and Instagram). To learn which ads bring people to the app, the app asks for your permission through Apple's "Allow tracking" prompt. Only if you tap Allow, the app shares with Meta: the fact that you installed and opened the app, finished setting it up, started your free trial and logged your first meal (only that these happened, never what you ate), your device's advertising identifier and basic device information, and your subscription events (subscription started or renewed, and their price), which our subscription manager RevenueCat sends to Meta. We never share your meals, food photos, weight, body metrics, coach messages, or anything else you log. If you tap "Ask App Not to Track", nothing is sent to Meta. Your answer does not change anything else in the app.

How we use your information

We use your information to:

• provide the coaching Service: compute your calorie and macro targets, generate coach responses, estimate the nutrition of the foods you log, and show your history and progress;
• operate your account, subscription, and free trial, and provide customer support;
• keep the Service secure, debug problems, and prevent abuse; and
• improve the Service and understand, in aggregate, how it is used.

We rely on the following legal bases where the GDPR or similar laws apply: performing our contract with you (to deliver the Service), your consent (for optional data such as health metrics and food photos, which you can withdraw), our legitimate interests (security, diagnostics, and improvement), and compliance with legal obligations. Advertising measurement with Meta relies on your consent, given through Apple's tracking prompt.

How your information is processed by AI and other providers

The Service uses artificial intelligence to power the coach and to estimate nutrition. To do this, the content you submit (including your messages, food descriptions, and food photos) is sent to our AI providers, OpenAI and Google (Gemini), purely to generate a response or an estimate for you. We do not sell your personal information, and we do not permit these providers to use your content to train their models beyond what is necessary to process your request.

AI-generated results (calorie counts, macros, and coaching suggestions) are estimates and may be inaccurate. See our Terms of Use for the full disclaimer.

Who we share information with

We do not sell your personal information. We share it with service providers ("subprocessors") who process it on our behalf, under contract, to run the Service, and with Meta only if you allow tracking (see below):

• Supabase: database, authentication, and file storage;
• OpenAI: the AI coach;
• Google (Gemini): nutrition grounding and food-photo analysis;
• RevenueCat and Apple: subscription management and payment processing;
• Upstash: caching and rate limiting;
• Resend: transactional email;
• PostHog: anonymised product analytics; and
• Sentry: crash and error reporting.

Meta (only if you allow tracking on iPhone). Meta Platforms receives the advertising-measurement data described above, so we can see which of our ads work. Meta processes it under its own terms and privacy policy as an independent party, not as our processor.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, or property of our users or others.

Cookies on the website

The website sets one cookie, NEXT_LOCALE, and only when you choose a language with the DE / EN switcher. It remembers that choice for one year, so the site opens in the language you picked. It holds only the letters de or en. We set no tracking or advertising cookies, and the website's analytics do not use cookies. Visiting the site without clicking the language switcher stores nothing in your browser.

International transfers

We operate from Sri Lanka and use providers located in other countries, including the United States and the European Union. When your information is transferred internationally, we rely on appropriate safeguards where required by law.

Data retention

We keep your information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or anonymise your personal information within a reasonable period, except where we must retain limited records to comply with legal obligations or resolve disputes.

Your rights and choices

You can access, export, and delete your data from within the app under Settings → Privacy, which lets you download a copy of your data and permanently delete your account.

To stop advertising measurement, turn tracking off for MyCalorieCoach in your iPhone's Settings → Privacy & Security → Tracking. From then on nothing more is sent to Meta. Everything in the app keeps working the same.

Depending on where you live, you may also have the right to access, correct, delete, restrict, or object to our processing of your personal information, to data portability, and to withdraw consent. If you are in California, you have the right to know, delete, and correct your personal information and not to be discriminated against for exercising those rights. We do not sell your personal information. If you allow tracking on iPhone, the advertising-measurement data we share with Meta may count as "sharing" under California law; you can stop it at any time as described below. To exercise any right, email dinanjanagunaratne@gmail.com. You may also lodge a complaint with your local data-protection authority.

Security

We use reasonable technical and organisational measures to protect your information, including access controls and encryption in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

The Service is for adults 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of the Service after an update means you accept the revised policy.

Contact

Questions about this policy or your data? Email dinanjanagunaratne@gmail.com.