Privacy Policy

End-to-End Encrypted + Never Sold + Delete Anytime

Your privacy is our priority. We believe your health data belongs to you. That's why ProteinLoop is built with privacy at its core.

1. Information We Collect

Information You Provide Directly

• Account Information: Email address, username, and password for secure access to your account
• Profile Data: Avatar selection and any optional profile details you choose to share
• Health & Habit Data: Protein intake goals, dietary preferences, meal logs, and progress tracking information
• Community Content: Posts, replies, and reactions you share in community features
• Support Communications: Messages and feedback sent to our support team for assistance

Information Collected Automatically

• Usage Data: Features used, screens viewed, actions taken, and session duration to improve your experience
• Device Information: Device model, operating system, app version, and unique device identifiers for technical support
• Performance Data: Crash reports, error logs, and app performance metrics to maintain service quality
• Analytics Data: Aggregated usage patterns and feature engagement to enhance our services

Information We Don't Collect

• Precise location data - We don't track your location
• Contacts or address book - We don't access your contacts
• Photos or media - We don't access your photos unless you explicitly share them
• Biometric data - We don't collect fingerprints, face scans, or other biometric information

2. How We Use Your Information

To Provide Core Services

• Create and maintain your account - Secure authentication and profile management
• Generate personalized nutrition plans - Based on your habits and goals for maximum effectiveness
• Track your progress and health improvements - Monitor your journey and celebrate milestones
• Enable community features and connections - Connect with others on similar health journeys

To Improve ProteinLoop

• Analyze usage patterns - To enhance features and improve user experience
• Debug technical issues - To improve app performance and stability
• Develop new tools and content - To provide more effective nutrition support

To Communicate With You

• Send important account and security updates - Keep you informed about your account and security
• Provide progress milestones and encouragement - Celebrate your achievements (if you've enabled notifications)
• Respond to support requests - Help you with any questions or issues you encounter

3. Legal Basis for Processing (GDPR)

We process your data based on:

• Consent: For optional features like marketing emails and push notifications that you can disable anytime
• Contract: To provide the core services you've requested, like account creation and progress tracking
• Legitimate Interests: For security, fraud prevention, service improvement, and app functionality that benefits all users
• Legal Obligation: When required by law, such as responding to valid legal requests or court orders

4. Data Sharing and Third Parties

We integrate with the following trusted third-party services to provide our app functionality:

• Supabase (Database & Authentication): Stores your account information and app data securely.
• Google Analytics: For understanding app usage and improving user experience.
• Google Play Services & Apple App Store: If you downloaded our app from these stores, they may collect certain device and usage information.

These services operate under their own privacy policies and security standards. We carefully select partners who meet our high standards for data protection and user privacy.

5. Data Security

Technical Safeguards

• Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
• Access Controls: Role-based access with multi-factor authentication
• Regular Testing: Security audits and penetration testing
• Secure Infrastructure: SOC 2 compliant hosting providers

Organizational Measures

• Limited access on need-to-know basis
• Employee confidentiality agreements
• Regular security training
• Incident response procedures

6. Your Privacy Rights

Universal Rights

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Delete your account and associated data
• Portability: Export your data in machine-readable format
• Opt-Out: Disable non-essential data collection

California Residents (CCPA)

• Right to know what personal information we collect
• Right to delete personal information
• Right to opt-out of data "sales" (we don't sell data)
• Right to non-discrimination for exercising rights

EU/UK Residents (GDPR)

• Right to object to processing
• Right to restrict processing
• Right to lodge complaints with supervisory authorities
• Right to withdraw consent

7. Data Retention

We retain your personal information only as long as necessary to provide our services and fulfill the purposes outlined in this policy. When you delete your account, your personal data is removed from our active databases.

8. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: