Privacy Policy EatCoach

When you use the App we may collect the following data:

• Account data: email address, user name
• Health and nutrition data: height, weight, target weight, sex, date of birth, activity level, nutrition goals
• Meal data: food names, portion weights, calories, macronutrients (protein, fat, carbohydrates)
• Meal photos: photos you upload for nutrition analysis
• Conversations with the AI assistant: text messages used for personalised guidance
• Telegram data: ID and username (if you connect the Telegram bot)
• Data from connected services: calendar, trackers and the Health app — if you connected them (details in section 6)

You may voluntarily upload lab results to the App (photos of forms or PDF reports), as well as wearable data (sleep, heart rate, energy expenditure). By uploading such data you consent to its processing.

• Markers are used only to personalise nutrition guidance — for example, less saturated fat when cholesterol is elevated
• The App's guidance is educational and is not medical care, diagnosis or a prescription; for medical questions, see a doctor
• Medical data is stored as securely as everything else, is not shared with third parties for marketing, and is never used for advertising
• You can delete individual markers or all your data at any time (the «Profile» section) — deletion is permanent

We use your data solely to:

• Work out personal calorie and macro plans
• Track food and progress
• Provide AI nutrition guidance
• Build reports and analytics
• Run the Telegram bot (if connected)

Your data is stored on secure Supabase servers (a cloud platform with data encryption). Meal photos are kept in encrypted storage. We apply standard security measures to protect your data.

We do not sell or share your personal data with third parties for marketing. Data may only be shared with:

• Anthropic (Claude AI): message text, photos and profile data to generate the AI assistant's replies
• Supabase: for data storage (under a data processing agreement)

The App can read data from external services — only after you explicitly allow it in the «Profile» section. Each connection is turned on by hand and turned off in the same place with one tap.

• Google Calendar (read-only access): we read the title and time of today's events to tell whether it's a training day or an ordinary one and to work out the day's calorie plan. We do not read attendees, attachments or event descriptions, and we do not create, change or delete anything in your calendar
• WHOOP and Oura: sleep, recovery, resting heart rate, workouts and energy expenditure — so the day's plan follows your real load
• Apple Health: steps, active and basal energy, workouts and sleep from your phone or watch

You have the right to:

• Request a copy of your personal data
• Correct inaccurate data
• Delete your account and all related data
• Withdraw consent to data processing

To exercise these rights, send a request to: rohovv@gmail.com

We use:

• Encryption of data in transit (TLS/SSL)
• Encryption of data at rest
• Authentication through Supabase Auth
• Access separation (Row Level Security)

The App is not intended for people under 16. We do not knowingly collect children's data.

We may update this Policy. We will notify you of material changes through the App. Continuing to use the App after changes means you accept the updated Policy.

The subscription is bought and paid for through the App Store (Apple). Payment details — card number, bank details — are never passed to us and are not visible to us: Apple handles the payment entirely. We store only a technical transaction identifier and the subscription status (active, cancelled, expired) so that paid features can be unlocked. You manage and cancel the subscription in your Apple ID settings; entries and history stay available whatever the subscription status.

For privacy questions: rohovv@gmail.com