Privacy Policy

When you use BetterBite, we may collect the following types of information:

• Account Data: If you register, we collect your name and email address to identify your account.
• Health Profile (optional, sensitive): If you choose to fill in your health profile, we store your declared allergens, health conditions (such as diabetes or pregnancy), age group, sex, diet type, and goal — solely to personalize warnings and insights for you. Every field is optional, editable, and deleted with your account. Because this is sensitive personal data under India's Digital Personal Data Protection Act, 2023, we process it only with your consent (you typing it in) and never share or sell it.
• Behavioral Data: We track your Consumption Intent (e.g., whether you plan to eat or have eaten a product) to build your nutritional log and personalize insights.
• Product Submissions: If you submit a product, we store the image, barcode, and product details you provide.
• Activity Data: When you are logged in and activity tracking is on, we record your in-app actions — products and ingredients you view, terms you search, and barcodes you scan — to improve our guidance and understand how the app is used. This stays in our own database; we do not use third-party analytics or tracking services, and we do not sell it. You can turn it off anytime under Dashboard → Health Profile → Activity tracking.
• Streak Day-History: If you use the scan-streak feature, we keep a record of the calendar days on which you scanned a product. This powers your streak count, streak calendar, and streak-reward reports. Because the feature cannot work without it, this day-history is kept even if you turn activity tracking off (the opt-out stops the detailed event log above — what you viewed or searched — not the fact that a day counted toward your streak). It is included in your data export and deleted with your account.
• Usage Data: Aggregate product view counts (not linked to your identity) and technical error reports (error message, page URL) when something goes wrong, so we can fix it.

We use your data strictly to run and improve BetterBite. Specifically:

• Your Consumption Intent and meal logs power your personal nutritional log, Health Score, and weekly/monthly health reports.
• Personalization: we store your health profile, meal logs, and streak history so BetterBite can act as your personalized nutrition companion — tailoring absorption estimates, condition-aware highlights, allergen notices, and your health reports to you. These are informational insights, not medical advice.
• Your activity data (searches, views, scans) helps us improve our guidance and the platform. It is never sold or shared, and you control it with the activity-tracking toggle.
• Your account data allows session persistence and syncs your preferences across devices.

We do not sell your personal health or dietary data to advertisers, insurance companies, or any third party.

We use an HttpOnly, Secure session cookie (tl_auth) to manage your login session. This cookie cannot be accessed by JavaScript, which protects you against cross-site scripting (XSS) attacks.

We also use browser Local Storage to temporarily save UI preferences (e.g., dismissing popups before login). You can clear this at any time via your browser settings.

We do not use advertising or tracking cookies of any kind.

We implement industry-standard security measures to protect your account and dietary data:

• Passwords are hashed using bcrypt — we never store your plaintext password.
• All traffic is encrypted over HTTPS with HSTS enforced.
• Session tokens are stored only in HttpOnly cookies, never in localStorage.
• API endpoints are rate-limited to prevent brute-force and abuse.
• Strict Content Security Policy headers are enforced in production.

No internet transmission is 100% secure, and we cannot guarantee absolute security. We will notify you promptly in the event of a data breach affecting your account.

You have the following rights regarding your personal data — and the first four are self-serve, no email required:

• Access & Portability: Download everything we hold about you as a JSON file — Dashboard → Health Profile → Your data → Download my data.
• Correction: Edit your profile and health data anytime from the same page.
• Deletion: Delete your account and all personal data instantly — Dashboard → Health Profile → Your data → Delete my account (web) or Profile → Delete account (app). See Section 7.
• Objection: Turn off activity tracking anytime — Dashboard → Health Profile → Activity tracking (web) or Profile → Activity tracking (app).
• Grievance: Raise any data-protection concern with our Grievance Officer (Section 6).

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, privacy questions, requests, and grievances may be addressed to:

Grievance Officer, BetterBite AI
Email: privacy@betterbite.ai (or grievance@betterbite.ai)

We acknowledge grievances within 48 hours and aim to resolve them within 15 days.

We retain your account data for as long as your account is active.

Deleting your account (Section 5) takes effect immediately: your profile, health data, nutritional history, saved products, health reports, and activity history are permanently erased in a single transaction. Product submissions you contributed to the public catalog are kept but permanently disconnected from your identity. Deletion is irreversible. If you cannot access your account, email us (Section 6) and we will complete deletion within 30 days after verifying your identity.

Anonymized, aggregate data derived from your usage (not linked to your identity) may be retained indefinitely to improve BetterBite.