Privacy Policy

1. Who We Are

BurnIQ is developed and operated by Samuel Sokan ("we", "our", "us"), an independent app developer. BurnIQ is a personal nutrition and calorie tracking application available on the Apple App Store.

2. Information We Collect

2.1 Account Information

• Full name — used to personalize your experience
• Email address — used for authentication, password reset, and account management
• Password — encrypted using bcrypt hashing, never stored in plain text
• Profile photo — optional, used for display purposes only

2.2 Health & Body Data

• Age — used for calorie and BMR calculations
• Gender — used for calorie and BMR calculations
• Height — used for BMI and calorie calculations
• Current weight — used for progress tracking and calorie goals
• Target weight — used to set personalized goals
• Start weight — used for progress percentage calculations
• Activity level — used for TDEE and calorie burn estimates
• Health conditions — optional, used to personalize AI coach responses
• Weight history — logged entries over time for trend analysis

2.3 Nutrition & Diary Data

• Food diary entries — all meals, foods, calories, and macros you log
• Meal categories — breakfast, lunch, dinner, snacks, extra
• Daily calorie goal — set during onboarding and adjustable in settings
• Macro goals — protein, carbs, and fat targets
• Water intake — daily glasses tracked
• Food scan images — photos taken for AI food identification (not stored after analysis)

2.4 Usage & Behavioral Data

• Streak data — consecutive days of logging
• Achievement progress — in-app milestone completions
• Goal hit history — days where calorie goals were met
• App session data — used to maintain your logged-in state

2.5 Device Information

• Device type and OS version — used for bug fixing and compatibility
• Push notification token — used to send reminders (only if you enable notifications)

2.6 Payment Information

BurnIQ does not collect or store any payment information. All subscription payments are processed directly by Apple through the App Store. We never have access to your credit card number, billing address, or payment details.

3. How We Collect Data

Data Type	How Collected
Account info	Provided by you during signup
Health & body data	Entered by you during onboarding and in settings
Food diary entries	Logged by you manually, via barcode scan, or AI recognition
Food scan images	Captured by your camera when you use the AI scanner
Weight history	Entered by you when you log your weight
Push notification token	Automatically generated by your device if you grant permission
Usage data	Automatically tracked within the app (streaks, achievements)

4. How We Use Your Data

We use your data solely to provide and improve the BurnIQ service. Specifically:

• Account management — to authenticate you, maintain your account, and enable password reset
• Personalized calorie goals — to calculate your daily calorie and macro targets based on your body data and goals
• Progress tracking — to display your weight trend, calorie history, streak, BMI, and achievements
• AI Nutrition Coach — to provide personalized nutrition advice (see Section 5)
• Food scanning — to identify food items and estimate nutrition from photos (see Section 5)
• Push notifications — to send optional daily logging reminders (only if you enable them)
• PDF progress reports — generated locally on your device for sharing
• App improvement — to fix bugs and improve performance based on crash reports
• Subscription management — to verify your subscription status via RevenueCat

5. AI Features & Third-Party Data Sharing Important

5.1 AI Nutrition Coach

5.2 AI Food Scanner

5.3 AI Food Search Fallback

5.4 User Consent for AI Features

Before using AI features for the first time, BurnIQ displays a clear consent dialog explaining:

• What data will be transmitted
• Who it will be sent to (Groq AI)
• That data is not stored after processing
• A link to this Privacy Policy

Users must tap "I Understand — Continue" to proceed. Users who decline are not required to use AI features — all other app functionality remains available.

6. Third-Party Services

Service	Purpose	Data Shared	Privacy Policy
Supabase	Database & authentication	All profile, diary, weight data	supabase.com/privacy
Groq AI	AI coach & food scanner	Chat messages, profile context, food images	groq.com/privacy-policy
RevenueCat	Subscription management	Subscription status, device ID	revenuecat.com/privacy
Apple Sign In	Social authentication	Name, email (if provided by user)	apple.com/legal/privacy
Google Sign In	Social authentication	Name, email, profile photo	policies.google.com/privacy
Open Food Facts	Food nutrition database	Search queries only, no personal data	openfoodfacts.org/privacy
USDA FoodData Central	Food nutrition database	Search queries only, no personal data	usda.gov/privacy-policy
Resend	Transactional email (password reset)	Email address only	resend.com/privacy
Expo / EAS	App build & delivery platform	Crash reports, device info	expo.dev/privacy

Each third-party service has its own privacy policy. We require that any service we use provides the same or equivalent level of data protection as described in this policy.

7. Medical Calculations & Citations

7.1 Calorie Estimation (BMR/TDEE)

BurnIQ estimates your daily calorie needs and calories burned using the Mifflin-St Jeor equation, which is the formula most widely recommended by dietitians and healthcare professionals for estimating resting metabolic rate.

7.2 BMI Calculation

Body Mass Index (BMI) is calculated using the standard WHO formula: weight (kg) ÷ height² (m²).

BMI Classifications (WHO standard):

BMI Range	Classification
Below 18.5	Underweight
18.5 – 24.9	Normal weight
25.0 – 29.9	Overweight
30.0 and above	Obese

7.3 Macronutrient Guidelines

7.4 Food Nutrition Data

Nutrition data is sourced from:

• Open Food Facts — community-maintained database of packaged food products worldwide. world.openfoodfacts.org
• USDA FoodData Central — official US government food composition database. fdc.nal.usda.gov
• Groq AI estimates — used as fallback when database results are unavailable. AI-generated nutritional estimates are approximations and may vary from actual values.
• Restaurant data — sourced from publicly available restaurant nutrition information.

8. Data Storage & Security

• All data is stored using Supabase, a SOC 2 Type II certified cloud platform hosted on AWS
• All data in transit is encrypted using TLS 1.2+
• Data at rest is encrypted using AES-256
• Passwords are hashed using bcrypt with a salt factor — never stored in plain text
• Row-level security (RLS) policies ensure each user can only access their own data
• API keys and secrets are never stored in the app binary — they are stored server-side
• BurnIQ undergoes regular security reviews and updates dependencies promptly

9. Data Retention

• Active accounts: Data is retained for as long as your account is active
• Account deletion: When you delete your account, all personal data is permanently deleted from our servers within 30 days
• AI processing: Chat messages and food images sent to Groq AI are not retained beyond the real-time request
• Backups: Supabase maintains encrypted backups for disaster recovery. These are purged on a rolling 30-day schedule
• Local cache: Some data is cached locally on your device in AsyncStorage for performance. This is cleared when you delete your account

To delete your account: Open BurnIQ → Profile → Settings → scroll to bottom → tap "Delete Account".

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to access — view all your data within the app at any time
• Right to rectification — correct inaccurate data through Profile settings
• Right to erasure — delete your account and all associated data
• Right to data portability — export your progress as a PDF report via the Progress screen
• Right to withdraw consent — you can stop using AI features at any time without affecting your account
• Right to object — you can opt out of push notifications in your device Settings at any time
• GDPR rights — if you are in the EU/EEA, you have additional rights under GDPR. Contact us at samuelsokan07@gmail.com
• CCPA rights — if you are a California resident, you have rights under CCPA. We do not sell personal data

11. Children's Privacy

BurnIQ is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at samuelsokan07@gmail.com and we will delete the information within 30 days.

Users between 13 and 17 should use BurnIQ only with parental supervision.

12. Cookies & Tracking

• BurnIQ does not use advertising cookies or cross-app tracking
• BurnIQ does not share data with advertising networks or data brokers
• BurnIQ does not use fingerprinting or device tracking for advertising
• BurnIQ uses Supabase session tokens to maintain your logged-in state — these are stored securely on your device

13. International Data Transfers

BurnIQ is operated from the United States. If you are accessing BurnIQ from outside the United States, your data may be transferred to, stored, and processed in the United States and other countries where our service providers operate.

By using BurnIQ, you consent to this transfer. We ensure that all data transfers comply with applicable privacy laws and that service providers maintain appropriate data protection measures.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Updating the "Last updated" date at the top of this policy
• Displaying an in-app notification for material changes
• Sending an email notification for significant changes that affect your rights

Continued use of BurnIQ after changes constitutes acceptance of the updated policy.

15. Contact Us