Privacy Policy — Protein Tracker

Effective date: September 1, 2026

Boorix AI Inc. ("we", "us") built the Protein Tracker app ("the App"). This policy explains what information the App collects, how it's used, and the choices you have.

Information we collect

Locally on your device (never sent to us)

• Your daily protein goal, body weight (if entered), and goal style
• Individual protein entries (name, grams, timestamp)
• Favorites you save
• App settings (notification preferences, install date, subscription status)

This data stays on your iPhone in the App's private storage. Deleting the App removes it.

Sent to our server when you scan a meal photo

• The image bytes you choose to scan
• Your RevenueCat subscriber identifier

Scanning is available to subscribers only, so each request includes an opaque subscriber identifier that lets our server confirm with RevenueCat that your subscription is active, and count your scans against the daily limit. This identifier is not your name, email, or a device identifier, and it is not linked to your protein log.

The image is transmitted over an encrypted connection (HTTPS/TLS) to our hosting provider (Supabase) and forwarded to Anthropic for AI protein estimation. It is processed to generate the estimate and is not written to our storage.

Handled by Apple and RevenueCat for subscriptions

• Apple processes your subscription purchase through the App Store. We never see your payment details.
• RevenueCat receives an anonymous subscriber identifier, your subscription status, and standard device/OS metadata to validate purchases and enable "Restore Purchases".

How we use information

• On-device data is used solely to run the App's core features (log, streak, history).
• Photos are used only to generate a protein estimate you can edit and log.
• Your subscriber identifier is used only to verify your subscription is active and to enforce the daily scan limit.
• Subscription data is used only to determine whether Pro features are unlocked.

We do not use any of this data for advertising, personalization, or resale.

Third-party services

We do not sell your data or share it with anyone beyond the providers listed here.

• Anthropic — receives meal photos for AI analysis. We use Anthropic's commercial API and do not permit your photos to be used for model training. anthropic.com/privacy
• Supabase — hosts the server that verifies your subscription and forwards photos to Anthropic. supabase.com/privacy
• RevenueCat — validates in-app purchases, manages subscription state, and answers our server's check that your subscription is active. revenuecat.com/privacy
• Apple — processes App Store subscription payments. apple.com/legal/privacy

We do not use analytics SDKs, advertising SDKs, or crash reporting SDKs beyond what Apple provides by default.

Data retention

• Data on your device is retained until you delete an entry or delete the App.
• Scanned photos are processed in memory and are not written to our storage.
• Scan counts are held in memory only, keyed to a subscriber identifier, and are discarded when the server process recycles. We keep no durable record of your scans.
• Subscription records are kept by Apple and RevenueCat for as long as your subscription is active plus any period required by tax and accounting law.

Your rights

We do not operate user accounts, and we do not store your protein log, goal, favorites, or scanned photos on our servers. Practically, this means most standard data-subject requests are satisfied by:

1. Deleting the App — removes all on-device data.
2. Cancelling your subscription in iOS Settings — stops future billing.
3. Contacting RevenueCat or Apple for records they hold.

If you would like us to delete the transient scan count associated with your subscriber identifier, or if you are an EU/UK resident exercising GDPR rights or a California resident exercising CCPA rights, contact us at the email below.

Canadian users

We are based in British Columbia, Canada and comply with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and the BC Personal Information Protection Act (PIPA). If you are a Canadian resident and would like to access, correct, or delete information we hold about you, contact us using the email below. Our privacy officer will respond within 30 days.

Some of our service providers (Anthropic, Supabase, RevenueCat, Apple) process data in the United States and elsewhere. By using the App, you consent to this cross-border transfer.

Children

The App is not directed at children. We do not knowingly collect personal information from anyone under 16, or under the minimum age of digital consent in their country of residence. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We may update this policy. The "Effective date" at the top will change when we do. Material changes will be surfaced in the App.