This Privacy Policy describes how Starlight Nutrition UG ("we", "us", or "our") collects, uses, and discloses your information when you use our mobile application and related services (the "App"). We are committed to protecting your privacy and handling your data in a transparent manner, in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. Data We Collect
We collect several types of information to provide and improve our services.
1.1 Information You Provide to Us
Account and Profile Data: When you create an account, you provide us with your name, email address, phone number, date of birth, gender, country, and physical attributes such as height, weight, and body fat.
Health and Fitness Data: You provide us with information about your dietary preferences, allergies, dietary forms (e.g., vegan, vegetarian), and personal health goals (e.g., weight loss, gain, or maintenance; activity goals, sleep data, and fitness information).
User-Generated Content: You may upload photos, custom foods, recipes, and diary entries. We collect all data and metadata associated with this content.
Social Interactions: When you interact with social features, we collect the content of your comments, streaks, and data related to your participation in leaderboards and challenges, including your unique user ID (UID).
Communications: If you contact us directly, we may receive additional information about you, such as the content of your message.
1.2 Information Collected Automatically
Activity and Usage Data: We automatically collect data on how you interact with the App, including your search history, recipes viewed, foods logged, recipes saved, shopping list items, and time spent on specific features.
Technical and Device Information: We collect information about the device you use to access the App, including your IP address, device brand and model, operating system, orientation (portrait/landscape), RAM, and disk space.
Analytics and Performance Data: We collect crash logs and performance metrics to identify bugs and improve the App's stability and performance.
1.3 Data from Third-Party Services
We receive data from third-party services that we use to provide our services:
OpenFoodFacts: We use this service for our food search API.
Firebase/Google Cloud: These services provide our backend infrastructure, including Firestore (database), Crashlytics (crash reporting), Analytics, Authentication, Storage Bucket, and more. We collect and process data as required by these services for the App's functionality.
App Store & Google Play: We receive transaction details from these platforms, such as subscription start and end dates. We do not have access to your full payment card details.
Google Ads/AdMob: We share device data with these services to track app usage, flows, and bugs.
2. How We Use Your Data
We use the information we collect for the following purposes:
Service Delivery and Personalization: To provide you with a personalized user experience. Your data is used to calculate your macros, calories, and nutrition information, and our AI/ML algorithms adjust recipe discovery and suggestions based on your past interactions, goals, and demographic data.
App Improvement: We use usage and analytics data to understand how the App is used, identify popular features, and enhance the overall user experience. This data helps us fix bugs and optimize user flows.
Communication: We use your contact information to send you essential, non-promotional communications like account updates and security alerts. With your consent, we may also send you promotional emails and push notifications, which you can opt out of at any time in the App settings.
Social Features: We use your data to manage social features like leaderboards, streaks, and comments. Please note that certain information, such as streaks, published recipes, and leaderboard activity, may be publicly visible within the App with your explicit consent.
3. Data Sharing and Disclosure
We may share your data in the following circumstances:
With Your Consent: We will share your data with third parties when you give us your explicit consent to do so, such as when you choose to share your activity in a public leaderboard.
Third-Party Service Providers: We share your data with third-party service providers, such as Firebase, Google Cloud, and Google AdMob, to facilitate our services. This includes sharing device data with analytics services to track usage and bugs.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you via a prominent notice on our website and/or a message within the App of any such change.
Legal Compliance: We may disclose your data if required by law or to respond to valid legal requests, such as a court order or subpoena. We may also share data to protect our rights, prevent fraud, or address security risks.
4. Your Rights and Choices
As a user located in the EU, you have specific rights under the GDPR:
Right to Access: You can access and review your personal data through the App's settings.
Right to Rectification: You can correct inaccurate or incomplete data directly in the App's settings.
Right to Erasure (Right to be Forgotten): You can request the deletion of your account and all associated personal data from the App's settings. We will remove all unimportant personal data. However, some metadata may be retained for a limited time to track potential violations or for legal purposes, such as financial records as required by German tax law.
Right to Data Portability: You can request a copy of your personal data in a CSV format, which will be sent to your registered email address within a few days.
Right to Object: You can object to the processing of your data for specific purposes, such as marketing or AI training, both at the time of sign-up and at any time in the App's settings.
5. Data Security and Storage
We use security measures to protect your data. All data stored on Firebase servers is protected by security access rules and is encrypted using the encryption standards provided by Firebase (which may change over time).
5.1 Data Retention
We retain your personal data for as long as necessary to fulfill the purpose for which it was collected.
Personal Information: Your personal information is retained as long as your account is active. We may delete inactive accounts or those that violate our Terms of Service.
Public Content: Publicly posted content (e.g., recipes, public comments) may be retained for as long as we deem appropriate, even after account deletion, but this content will be anonymized so it cannot be linked back to you personally (except for a unique, non-personal UID).
Analytics Data: We retain anonymous, user-unrelated data for a period necessary to analyze trends and improve the App.
6. Children's Privacy
Our App is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will take steps to delete it immediately.
7. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us at:
Starlight Nutrition UG
Email: maximfoussier@outlook.com