Privacy Policy

1. Who We Are

Crunch is a calorie tracking app developed by James Moncla (“we,” “us,” or “our”). This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. By using Crunch, you agree to this policy.

2. Data We Collect

We collect only what is necessary to provide the service:

• Account information: your email address and password (hashed, never stored in plain text) when you create an account.
• Food log data: food descriptions, calorie estimates, and timestamps that you enter manually.
• Calorie goal: your daily calorie target and activity level, if set.
• Usage count: a count of how many AI-powered estimates you have made, to enforce free-tier limits.
• Subscription status: whether your account has an active subscription, managed via RevenueCat.

We do not collect your name, phone number, location, health metrics, or any other personal information beyond what is listed above.

3. How We Use Your Data

• To authenticate your account and keep your data private.
• To generate AI-powered calorie estimates from your food descriptions using Anthropic’s Claude API. Your food descriptions are sent to Anthropic to generate the estimate and are not stored by us beyond your log.
• To show you personalised insights and analysis based on your food log history.
• To enforce usage limits and manage your subscription.

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in Section 4.

4. Third-Party Services

Crunch uses the following third-party services:

• Supabase — our backend and database provider. Your account credentials and food log data are stored on Supabase's infrastructure. See Supabase Privacy Policy.
• Anthropic (Claude API) — processes your food descriptions to generate calorie estimates and nutritional analysis. Food descriptions are sent to Anthropic's servers for processing. See Anthropic Privacy Policy.
• RevenueCat — manages in-app purchases and subscription status. See RevenueCat Privacy Policy.
• Apple App Store / Google Play Store — handle app distribution and payments for subscriptions on their respective platforms.

5. Data Storage and Security

Your food log data is stored locally on your device (using AsyncStorage) and, for account-linked data, on Supabase's cloud infrastructure. Supabase enforces Row-Level Security so that only your authenticated account can access your data. We use industry-standard HTTPS encryption for all data in transit.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, your food log data and account information will be deleted from our servers within 30 days. Local device data can be cleared by deleting the app.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Export your food log data.

To exercise any of these rights, contact us at jamesmoncla@gmail.com. We will respond within 30 days.

8. Children’s Privacy

Crunch is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the “Last updated” date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact

If you have any questions about this Privacy Policy, please contact us at:
jamesmoncla@gmail.com