Privacy Policy for SnapEatKnow

Our Commitment to Privacy

SnapEatKnow is committed to protecting your privacy. We believe in transparency and simplicity. This privacy policy explains what data we collect, why we collect it, and how we use it.

What We Collect

To provide our food tracking service, we collect:

• Email address - For account authentication and login
• Meal photos - Photos you take of your food for nutrition analysis
• Nutrition data - AI-generated estimates of calories and macronutrients from your meal photos
• Basic device info - Device type and OS version for app stability and support

How We Use Your Data

Your data is used exclusively to provide and improve our service:

• AI Processing - Your meal photos are sent to OpenAI (specifically their GPT-4 Vision API) to identify foods and estimate nutrition. OpenAI's data handling includes:
  • No training on your data: OpenAI does not use your photos or data to train or improve their AI models
  • 30-day retention: OpenAI retains abuse monitoring logs (which may contain your photos and prompts) for up to 30 days to prevent harmful uses of AI and enforce usage policies
  • Secure transmission: All data is encrypted in transit using TLS 1.2+
  • You own your data: You retain ownership of your meal photos and any AI-generated nutrition information
  • Limited to functionality: Photos are only sent to OpenAI when you explicitly capture or select a meal for analysis
• Personal History - We store your meal data on Amazon Web Services (AWS) so you can track your nutrition over time
• Service Improvement - We analyze aggregated usage patterns to fix bugs and improve the app

Data Storage & Security

Your data is stored securely on Amazon Web Services (AWS) servers in the United States:

• Encryption - All data is encrypted in transit (HTTPS/TLS) and at rest
• Access Control - Your data is protected by authentication and access controls
• Secure Authentication - We use AWS Cognito for secure account management

Data Retention

We only keep data long enough to serve our features.

• Active accounts - We retain your data as long as your account is active
• Deleted accounts - When you delete your account, your photos are permanently deleted within 30 days
• Backup systems - Some data may remain in backup systems for up to 90 days before final deletion

Third-Party Services

We use the following trusted services to operate our app:

• Amazon Web Services (AWS) - Cloud hosting, data storage, and user authentication. Your account data and meal photos are stored on AWS servers in the United States.
• OpenAI - AI-powered food recognition and nutritional analysis using their GPT-4 Vision API. When you take a photo of a meal, that image is sent to OpenAI for processing. OpenAI does not use your data to train their models. However, OpenAI retains abuse monitoring logs (which may contain your photos and prompts) for up to 30 days to prevent harmful uses of AI. After 30 days, this data is permanently deleted from OpenAI's systems. For more information, see OpenAI's Enterprise Privacy Policy.

These services have access to your data only to perform their specific tasks and are obligated to protect your information. Both services provide privacy protections that meet or exceed our own standards.

We do not share your data with any other third parties. No advertising networks, analytics services, or data brokers receive your personal information.

Camera & Photo Permissions

Why we need camera access: SnapEatKnow is a food tracking app that uses your device's camera to take photos of your meals. This is the core feature of our app.

What happens to your photos:

• Photos are uploaded to secure cloud storage (AWS S3)
• Photos are analyzed by AI to identify foods and estimate nutrition
• Photos are stored in your private account
• You can delete your photos at any time

Your Rights

You have complete control over your data:

• Access - View all your data through the app
• Edit - Modify your meal logs and account information
• Delete - Delete individual meals or your entire account
• Data portability - Request a copy of your data by contacting us
• Revoke permissions - Disable camera access in your device settings anytime

Your Legal Rights (United States)

Under US law, you have the right to:

• Access your data - Request a copy of all data we have about you
• Correct your data - Update inaccurate or incomplete information
• Delete your data - Request deletion of your account and all associated data
• Opt-out - Stop processing of your data (note: this may limit app functionality)
• Non-discrimination - We won't treat you differently for exercising these rights

To exercise any of these rights, email us at privacy@snapeatknow.com. We will respond within 30 days.

Governing Law & Dispute Resolution

This Privacy Policy is governed by the laws of the United States and the State of Arizona, without regard to conflict of law principles.

Informal Resolution: If you have a concern about our privacy practices, please contact us first at privacy@snapeatknow.com. We'll work with you to resolve the issue.

Legal Action: Any disputes that cannot be resolved informally will be subject to the exclusive jurisdiction of the courts in Arizona.

Children's Privacy

SnapEatKnow is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with their information, please contact us and we will delete it immediately.

International Data Transfers

Our servers are located in the United States. By using SnapEatKnow, you consent to the transfer of your information to the United States for processing and storage.

Changes to This Policy

We may update this privacy policy from time to time. We'll notify you of significant changes by updating the "Last Updated" date at the top and sending you an email notification.