Privacy Policy

Who we are

Daily Portion Buddy ("the app") is operated by Bell Cyberworks LLC ("we", "us"). This policy explains what we collect when you use the app and how we handle it. Questions? Email [email protected].

What we collect

• Account info: email address (and, if you use Google sign-in, the name and identifier provided by Google) so you can sign in.
• Tracking data you enter: categories you create, servings you log, mood entries, and any notes you write.
• Family / Social Circle: invites you send or accept, and the membership records that result.
• Plate photos (optional): if you choose to snap a photo of a plate to log a meal, that photo is used to run the analysis described under "AI-assisted features" below.
• Voice or text meal descriptions (optional): if you use voice or typed meal logging, what you say or type is used the same way.
• Sex, age, and weight (optional): if you use "AI Setup of Categories and Servings," what you enter is used to run the analysis described under "AI-assisted features" below and is not saved to your account — it's discarded once that response comes back, the same as plate photos and voice recordings.
• Basic technical logs: standard request logs kept by our hosting provider to keep the service running and secure, rotated on a 14-day cycle.

How we use it

• To let you sign in and sync your data across devices.
• To show you your own tracking history, mood entries, and reports.
• To deliver features you opt into — sharing selected mood/portion data with people you add to your Family or Social Circle.
• To send invitation emails to addresses you enter.

We do not sell your personal information, and we do not use your tracking data or notes for advertising.

Sharing and privacy of notes

Mood notes are always private to you. When you mark a mood entry as shared, only the mood value and its date become visible to your Social Circle — never the note. Parents in a family can log private observations about children; those observations are never visible to the child. You can change these choices at any time.

AI-assisted features

Some features are optional and only run when you choose to use them. Before the first time any of them would send data off your device, we show an in-app prompt naming Google's Gemini API and what will be sent, and ask you to allow it — the feature won't run otherwise. You can review or change that choice anytime from the account menu under "AI data sharing." When you do allow it, we send the relevant information below to Google's Gemini API to generate a result, which we return to you. We use a paid, billed Gemini API project for this — as of this policy's last-updated date, under Google's Gemini API terms, content sent through a paid project is not used by Google to train or improve its models. We don't add the photo, recording, or their contents to your permanent account record — they're used to generate a live response and then discarded on our side, though Google may briefly retain API content under its own terms for abuse monitoring and legal compliance, separate from our retention practices.

• Plate photo analysis: the photo you take, plus your food category and serving-size settings, so the model can match what's on the plate to your categories. If you're logging a shared meal for your Family or Social Circle, the display names, internal member IDs, and category/serving settings of the members you select are also included, so the model can split the plate across everyone in the photo.
• Voice or text meal logging: your recording or typed description, plus your category and serving-size settings.
• AI Setup of Categories and Servings: the sex, age, and weight you enter, plus your current category and serving-size settings, so the model can suggest servings for your categories. Nothing you suggest is applied to your account until you review it and choose to save it.
• Mood & behavior insights: the portion history, category targets, and mood scores for the person the report is about. If a parent is viewing insights about a child, the parent's own private observation notes and trigger notes about that child (see "Sharing and privacy of notes" above) are also sent, so the insight can take them into account — this exists so a parent can put together a clear, doctor-ready summary. These notes are sent only to generate that parent's own report — they remain invisible to the child and are not shared with anyone else. Because this involves a child's private information, we show a confirmation before generating a child's insight or doctor-ready PDF, explaining what will be sent to Google's Gemini API; you can cancel there instead of proceeding.

Who processes your data for us

We use trusted infrastructure providers to run the app — including our cloud hosting, database, authentication, and transactional email services — plus Google, which processes the AI requests described under "AI-assisted features" above. These providers process data on our behalf under their own security and privacy commitments.

International data transfers

Bell Cyberworks LLC is based in the United States, and the infrastructure providers described above may process and store your data in the United States or other countries where they operate. Wherever your data is processed, we require our providers to protect it consistent with this policy and, where applicable law requires it (for example, for users in the European Economic Area, the UK, or Switzerland), through appropriate safeguards such as Standard Contractual Clauses.

In-app purchases and subscriptions

Subscriptions (User, Family) and AI token top-offs are sold as in-app purchases through the Apple App Store or Google Play. Payment itself is handled by Apple or Google — we never see your card details.

We use RevenueCat to manage subscription entitlements and to tell our backend when a purchase, renewal, cancellation, or refund happens. To do this, RevenueCat receives a pseudonymous app user id we generate for your account, along with purchase metadata from the store (product id, transaction id, purchase and expiration timestamps, platform, country, and similar fields). RevenueCat does not receive your email address, tracking entries, mood entries, notes, or family data from us.

RevenueCat processes this information as our service provider to deliver the subscription and receipt-validation service. Their handling is described in the RevenueCat Privacy Policy. Apple and Google also collect information under their own privacy policies to process the purchase itself.

Retention and deletion

Your data is kept while your account is active. Plate photos, voice recordings, and typed meal descriptions you submit for AI analysis are not kept — only the resulting tracking entries you choose to save are stored in your account. Basic technical request logs are rotated on a 14-day cycle. If you'd like your account and its associated data deleted, email [email protected] from the address on the account and we'll take care of it.

Your choices

• Edit or delete your categories, servings, and mood entries in the app.
• Leave a Family or Social Circle at any time.
• Contact us to request access to or deletion of your account data.

Your privacy rights (EEA, UK, and similar laws)

If data protection laws like the EU or UK GDPR apply to you, our lawful basis for the processing described above is: performance of our contract with you (running the app and your account), your consent (for optional sharing features like Family and Social Circle), and our legitimate interests (keeping the service secure and working). Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data, or restrict or object to certain processing.
• Receive a copy of your data in a portable format.
• Lodge a complaint with your local data protection supervisory authority, in addition to contacting us directly.

To exercise any of these rights, email [email protected].

California privacy rights (CCPA/CPRA)

We do not sell or share your personal information for cross-context behavioral advertising, and we do not use your tracking data or notes for advertising of any kind. The categories of personal information we collect are described above under "What we collect." If you're a California resident, you have the right to know what personal information we hold about you, request its deletion, and not be discriminated against for exercising these rights. Contact [email protected] to make a request.

Children

The App is intended for adult account holders and is not directed at children. You must be at least 18 years old (or the age of digital consent in your country, if higher) to create an account.

A parent or guardian may track a child within their own Family — the child does not need and should not create their own account, and any observations a parent logs about a child stay private to that parent (see "Sharing and privacy of notes" above), and are never visible to the child even when used to generate that parent's mood/behavior insights (see "AI-assisted features" above). If you believe a child has created their own account without a parent's consent, contact us and we will remove it.

Changes

If we make material changes to this policy, we'll update the "Last updated" date above and, where appropriate, notify you in the app.