Privacy Policy

FitScan AI ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website, and related services (collectively, the "App" or "Services").

1. Information We Collect

We collect information that you provide directly to us, information automatically collected when you use the App, and information from third-party sources.

a. Personal Data You Provide

• Account Information: Name, email address, password, and profile photo when you register.
• Health and Fitness Data: Age, gender, height, weight, activity level, dietary goals, allergies, body goals, body measurements, exercise or daily activity records, and similar wellness data you choose to provide. This may be considered sensitive personal data in some jurisdictions, and we process it with your consent or another valid legal basis where required by law.
• User Content: Photos of food you upload for scanning, meal logs, daily activity logs, progress notes, and related entries you save in the App.

b. Information Collected Automatically

• Device Information: Device model, operating system version, app version, general device identifiers, and mobile network information.
• Usage Data: Information about how you use the App, such as features used, time spent, and crash reports.
• Location Data: General location data (based on IP address) to provide localized food databases. We do not track precise GPS location without your permission.

c. App Permissions

To function, the App may request access to your device's:

• Camera/Gallery: To take or upload photos of food for AI analysis.
• Push Notifications: To send reminders for meal logging, activity tracking, and goal progress.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide Service: processing food images via our AI algorithms to calculate nutrition data.
• To Improve AI Models: Using de-identified (anonymized) food images and related nutrition analysis data to train and refine our machine learning algorithms for better accuracy.
• Personalization: Tailoring meal recommendations and calorie goals based on your health data.
• Communication: Sending you administrative information, updates, and marketing communications (which you can opt-out of).
• Analytics: Analyzing usage trends to improve user experience.

3. Data Sharing & Disclosure

We will share personal information only in the following limited circumstances:

• Service Providers: Trusted third-party vendors (e.g., hosting, analytics, payments) who process data on our behalf and under contractual obligations.
• Legal Requirements: When required by law, regulation, or valid legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets — users will be notified if personal data is transferred.
• With Consent: Other disclosures only with your explicit permission.

We do not sell your personal information to advertisers.

We currently work with the following third-party partners:

Partner	Purpose	Policy Link
Google Firebase	Analytics, crash reporting, and app performance monitoring.	Privacy Policy
AppsFlyer	Marketing attribution and mobile campaign analysis.	Privacy Policy

4. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

If you delete your account, we generally delete your personal data within 30 days, though some anonymized or de-identified data used for analytics, model improvement, or legal compliance may be retained.

5. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

6. Your Data Rights

Depending on where you live, the laws of your country, state, or province may grant you certain privacy rights over how your personal information is collected, stored, used, and shared, including:

a. Rights Available to All Users

• Right to Access / Know: You have the right to confirm whether we are processing your personal data and to request a copy of the data we hold about you.
• Right to Rectification (Correction): You can edit your profile information, such as weight, height, allergies, meal logs, activity records, and body goals, directly within the App. If you find other data to be inaccurate or incomplete, you may request that we correct it.
• Right to Erasure (Deletion): You have the right to delete your account and personal data at any time. You can find a "Delete Account" option within the App settings. Once confirmed, we will remove your personal identifiers from our active systems.
• Right to Withdraw Consent: Where we rely on your consent to process your data, such as certain health metrics integrations or marketing communications, you may withdraw that consent at any time.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format to transfer to another service, where applicable.

If you are located in the EEA or UK, you may also have the following rights:

• Right to Restrict Processing: You may ask us to suspend the processing of your personal data in certain scenarios, such as while a correction request is being verified.
• Right to Lodge a Complaint: You have the right to complain to a Data Protection Authority (DPA) about our collection and use of your personal data.

If you are a resident of certain U.S. states, you may also have the following protections:

• Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Opt-Out Rights: We do not sell your personal data for money. Where applicable law treats certain analytics or attribution disclosures as "sharing," you may request to opt out by contacting us.
• Authorized Agent: You may designate an authorized agent to make a request on your behalf, subject to verification requirements.

7. Children's Privacy

Our Services are not intended for users under 16 years old. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without valid authorization, we will take steps to remove that information from our servers.

8. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those from your jurisdiction.

If you are located outside the primary region where our services are hosted and choose to provide information to us, please note that we may transfer personal data to the United States, Hong Kong, or other service locations and process it there, subject to appropriate safeguards where required by law.

9. Health Connect / Apple HealthKit

If you choose to integrate the App with Apple HealthKit or Google Health Connect:

• We only read/write data that you explicitly authorize.
• We do not use data obtained through HealthKit/Health Connect for advertising purposes or sell it to third parties.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Little Grass Co. Limited
Email: [email protected]