Privacy Policy

Introduction

BiteLytic ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use the BiteLytic iOS application.

By using BiteLytic, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the application.

Information We Collect

We collect the following categories of information:

• Profile information — your first name, nutritional goal (e.g. weight loss, muscle gain), dietary regime (e.g. omnivore, vegan), and activity level. This is entered voluntarily during onboarding and stored locally on your device.
• Meal photos — photos you take within the app are temporarily transmitted to our AI service for analysis only. They are not stored on our servers after the analysis is complete.
• Usage data — meal scan history, daily nutrition scores, streaks, XP points, and activity patterns. This data is stored locally on your device via SwiftData and optionally synced to your private iCloud account via CloudKit.
• Apple Account identifier — if you use Sign in with Apple, we receive an anonymized user identifier. We do not receive your Apple ID email address unless you choose to share it.
• Subscription status — whether you hold an active subscription, managed entirely through Apple's in-app purchase system. We do not handle or store payment information.

How We Use Your Information

We use the information we collect for the following purposes:

• Providing the service — to analyze your meals, generate personalized nutrition scores, and deliver AI-powered advice.
• Personalizing your experience — to tailor coaching, streak tracking, and recommendations to your specific goals and dietary preferences.
• Improving the app — to understand usage patterns and fix issues. We do not use individual meal photos to train AI models.
• Processing subscriptions — to verify your subscription status with Apple and unlock premium features accordingly.

We never sell, rent, or trade your personal information to third parties.

Data Storage

BiteLytic is designed with a local-first architecture:

• Device storage — all profile data, scan history, scores, and streaks are stored locally on your iPhone using SwiftData. This data never leaves your device unless you use iCloud sync.
• iCloud sync (optional) — if enabled, your progress data is synced to your personal iCloud account via CloudKit. Apple manages this storage under their own privacy guarantees. We cannot access your iCloud data.
• Meal photo processing — photos are transmitted over an encrypted HTTPS connection to our AI proxy for analysis. Images are processed in real time and immediately discarded. No photos are retained after analysis.
• AI analysis proxy — we use a secure intermediary server (Cloudflare Workers) that forwards meal images to Anthropic's Claude API. This proxy does not log image content.

Third-Party Services

BiteLytic works with the following third-party services:

• Anthropic (Claude API) — processes meal photos to identify foods and generate nutrition scores. Anthropic's privacy policy applies to data processed by their API: anthropic.com/privacy
• Apple — manages authentication (Sign in with Apple), in-app purchases, and optional iCloud sync. Apple's privacy policy applies: apple.com/privacy
• Cloudflare — our API proxy infrastructure. Cloudflare may process network metadata in accordance with their privacy policy.

We do not use advertising networks, analytics SDKs, or social media trackers.

Data Security

We take security seriously. All data transmitted between the app and our servers uses TLS/HTTPS encryption. Locally stored data benefits from iOS device encryption. Subscription and payment information is handled exclusively by Apple — we never see your payment details.

Your Rights

Under the General Data Protection Regulation (GDPR) and French data protection law, you have the following rights:

• Right of access — you can request a copy of all data we hold about you.
• Right to erasure — you can request deletion of your account and all associated data. You can delete all local data by deleting the app from your device. For any server-side data, contact us at the address below.
• Right to data portability — you can request your data in a machine-readable format.
• Right to object — you can object to certain processing of your data.
• Right to rectification — you can correct inaccurate personal data via the app's settings.

To exercise any of these rights, please contact us at: qandreu@icloud.com

Children's Privacy

BiteLytic is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of the app after changes are posted constitutes acceptance of the updated policy.

Contact

For any privacy-related questions or requests, please contact:

Applicable Law

This Privacy Policy is governed by French law. Any disputes relating to this policy shall be subject to the exclusive jurisdiction of the competent French courts.