Privacy Policy

Introduction

MetriqBear ("we," "us," or "our") cares about keeping your personal information safe. This Privacy Policy explains what we do with your Personal Data, how we protect it, and what rights you have under applicable data protection laws.

1. We Don't Sell Your Data

We do not sell your Personal Data to third parties. Unlike many free apps, we do not share your data for cross-behavioral advertising purposes. We are a premium, subscription-based service.

2. Data We Collect

To provide our services, we collect the following categories of data:

• Account Data: Email address, password (hashed and salted), authentication tokens, and unique user ID.
• Profile Data: Name, age, sex, height, weight, target weight, goals (e.g., weight loss, muscle gain, PCOS, diabetes management), diet style, and allergies.
• Logs & Metrics: Food logs (including AI-parsed ingredients), water intake, workout sessions, weight logs, and 19 tracked micronutrients.
• Visual Data: Progress photos (only if you explicitly choose to save them; meal scan photos are processed and immediately discarded).
• Integration Data: Steps and sleep data from Health Connect (Android), synced only with your explicit permission.
• Technical Data: Device type, operating system, app version, push notification tokens, and anonymous crash diagnostics.

3. How We Use Your Data

We use your data strictly to:

• Calculate your personalized calorie and macro targets using clinical equations (e.g., Mifflin-St Jeor).
• Power our AI meal scanning and voice logging features.
• Sync your data across your devices and generate your daily Metriq Score.
• Send you subscription reminders and support responses.
• Improve the app using aggregated, fully anonymized trends (never identifying you personally).

4. Legal Bases for Processing

Under laws like the GDPR, we process your data based on: Contract (to provide the app you signed up for), Consent (for Health Connect syncing, progress photos, and push notifications), and Legitimate Interest (for security, fraud prevention, and anonymous analytics).

5. Third-Party Processors

We only share data with essential processors who help run the service. We never sell your data. Our core processors include:

• Supabase: Database, authentication, and secure file storage.
• Google LLC: Google Sign-In and Gemini AI (for meal image recognition).
• Resend / Zoho: Transactional email delivery (e.g., OTP codes, subscription alerts).
• RevenueCat / Apple / Google: Subscription and billing management (we never see your credit card numbers).

6. AI and Meal Photos

When you use our AI meal scanner, your photo is sent to Google's vision models to identify ingredients. We do not use your meal photos to train third-party AI models. Scan photos are processed in real-time and immediately discarded. They are only stored if you explicitly save them as a "Progress Photo" in your profile.

7. Storage & Security

Your data is encrypted in transit (TLS) and at rest. Progress photos are stored in private, access-controlled object storage. We implement strict access controls and monitor our infrastructure for security threats.

8. Data Retention

We only keep your data as long as necessary:

• Trial accounts: Deleted 38 days after trial start if you never subscribe.
• Lapsed paid accounts: Deleted 13 months after subscription ends (following a 30-day email warning).
• Active accounts: Retained until you request deletion.
• Support tickets: Archived and deleted within one year.

9. Your Privacy Rights

Depending on your location (including under the GDPR and CCPA), you have the right to:

• Access & Export: Download a full JSON copy of your data via Profile → Advanced Settings → Export My Data.
• Deletion: Permanently erase your account and all associated data via Profile → Advanced Settings → Delete Account.
• Rectification: Correct inaccurate profile information at any time.
• Withdraw Consent: Turn off push notifications or Health Connect sync in your device settings.

Billing Note: Deleting your MetriqBear account does not cancel your App Store / Play Store subscription, nor does it trigger a refund for past charges. You must cancel the subscription separately in your phone's store settings (see our Terms of Service, "Cancel Anytime").

10. International Transfers

Our service providers operate globally. When transferring data outside the European Economic Area (EEA) or UK, we rely on Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework (DPF) to ensure your data remains protected to EU standards.

11. Children's Privacy

The MetriqBear app is not directed at, or intended for use by, children under the age of eighteen (18). We do not knowingly collect Personal Data from individuals under 18. If we learn that we have collected data from a child under 18, we will take steps to remove that information from our servers.

12. Cookies & Analytics

Our website uses only essential session tokens and anonymous crash diagnostics. We do not use third-party advertising cookies or cross-site behavioral trackers.

13. Changes to This Policy

If we make material changes to this Policy, we will notify you via an in-app alert or email before the changes take effect.

14. Contact Us

If you have any questions about this Policy, wish to exercise your privacy rights, or need to contact our Privacy Lead, please email us at support@metriqbear.fit. We aim to respond to all legitimate requests within 30 days.