Privacy Policy for munchlog.ai

**Privacy Policy**

Effective Date: August 21, 2025

Welcome to munchlog.ai ("we", "us", "our"). We’re a voice‑first food & nutrition tracker available at **https://www.munchlog.ai**. This Privacy Policy explains what we collect, why we collect it, and how you can control your information.

**1) Information We Collect**
- **Account & Auth**: Name, email, and profile image (e.g., via Google OAuth) to create and secure your account.
- **Subscription & Payments**: Billing details and status processed by our payment provider(s) (e.g., LemonSqueezy). We do **not** store full card numbers.
- **Meal Data**: Text you enter about meals; AI‑generated nutrition estimates; optional goals/targets you provide.
- **Voice & Transcription**: If you record voice, the audio is streamed to our transcription/AI provider(s) to convert speech to text and to interpret foods. We do not retain raw audio longer than necessary for transcription.
- **Device & Usage**: Basic device info, approximate location from IP, timestamps, crash/diagnostic data, and analytics events to improve reliability and UX.
- **Cookies/Storage**: Cookies and local storage to keep you signed in, remember preferences, and measure usage.

**2) Legal Bases (GDPR)**
We process data based on:
- **Contract**: To provide core features (account, logging meals, subscriptions).
- **Consent**: For optional analytics/marketing and voice transcription where required.
- **Legitimate Interests**: To secure our service, prevent fraud, and improve performance.
- **Legal Obligations**: Tax/accounting and compliance.

**3) How We Use Data**
- Provide core features: sign‑in, voice transcription, food recognition, nutrition summaries.
- Personalize the app (e.g., show your history, goals, tips).
- Customer support and product communications (service emails only by default).
- Improve reliability, safety, and performance (debugging, anti‑abuse).
- Handle billing, trials, and receipts.

**4) Sharing with Service Providers (No Sale of Personal Data)**
We do **not** sell your personal information. We share limited data with vendors strictly to operate the service:
- **Authentication** (e.g., Google OAuth / NextAuth)
- **Payments** (e.g., LemonSqueezy)
- **Hosting/Infra** (e.g., Vercel, MongoDB Atlas)
- **Transcription/AI** (e.g., OpenAI) — audio/text sent for processing; providers may temporarily retain logs to operate and secure their systems
- **Email/Support** (e.g., Resend, email providers; optional live chat if enabled)
- **Analytics** (e.g., Plausible and/or Google Analytics)
Each provider has its own privacy policy and processes data on our behalf.

**5) Voice & AI Specifics**
- **Purpose**: Converting your speech to text and extracting food items for nutrition estimation.
- **Retention**: We store the resulting text and nutrition estimates in your account. Raw audio is kept only as long as needed to process the request.
- **Model Training**: We do not use your meal content to train our own public models. Third‑party AI providers may use transient logs to operate and secure their services, per their policies.

**6) Data Retention**
- **Account & Meal Logs**: Kept while your account is active and until you delete them or your account.
- **Billing Records**: Retained as required by law (e.g., up to 5–7 years depending on jurisdiction).
- **Support Emails**: Retained for troubleshooting and legal compliance.
- **Audio**: Not retained beyond processing unless we explicitly say otherwise in‑app.

**7) Your Rights**
Depending on your location, you may have the right to:
- **Access / Port**: Get a copy of your data.
- **Rectify**: Fix inaccurate information.
- **Delete**: Delete items or your whole account.
- **Restrict / Object**: Limit certain processing (e.g., analytics).
- **Withdraw Consent**: For optional features like marketing or certain analytics.
To exercise these rights, email **divyanthj@gmail.com**. We may need to verify your identity.

**8) Cookies & Analytics Choices**
- Manage cookies in your browser.
- If we present a consent banner, you can enable/disable optional analytics there.
- Some strictly necessary cookies (e.g., auth) cannot be disabled.

**9) Children’s Privacy**
munchlog.ai is **not intended for children under 13**. We do not knowingly collect data from children under 13 (or under 16 where applicable). If you believe a child has provided us data, contact us to delete it.

**10) Security**
We use industry‑standard safeguards, including encryption in transit (HTTPS), access controls, and routine monitoring. No method of transmission or storage is 100% secure, but we continuously work to protect your information.

**11) International Transfers**
Your data may be processed in countries other than where you live. We use reputable providers and appropriate safeguards to protect data during transfers.

**12) Changes to This Policy**
We’ll update this page when we make material changes and, where required, notify you in‑app or by email. The “Effective Date” above reflects the latest version.

**13) Contact**
Questions or requests? Email **divyanthj@gmail.com**.

By using munchlog.ai, you agree to this Privacy Policy.