Privacy Policy

1. Introduction

Chat to Lose Weight is an iOS application designed to help users track their weight loss journey through conversational AI coaching. We take your privacy seriously. This policy describes what information we collect, how we use it, who we share it with, and your rights regarding your data.

2. Information We Collect

2.1 Information You Provide Directly

When you create an account and use the app, we collect:

Account & Profile Data:

• Apple Sign-In identifier (used to link your account across sessions)
• First and last name
• Age, gender, height (in centimeters)
• Current weight and target weight
• Unit system preference (metric or imperial)
• Dietary preferences (e.g., vegetarian, vegan, gluten-free)
• Dietary restrictions (e.g., allergies, intolerances)

Chat Messages:

• All text messages you send to the AI coach
• Timestamps of each message
• Chat history and conversation context

Food Logging Data:

• Meal entries and timestamps
• Food item names and portions
• Nutritional information (calories, protein, carbohydrates, fat)
• Tags and categories you assign to meals

Weight Tracking & App Settings:

• Weight entries and dates with associated notes
• Target weight goals
• Coaching style preferences
• Notification preferences and timezone settings

2.2 Information Collected Automatically

Device Information:

• Device type, model, and OS version (iOS identifier)
• App version and usage patterns
• Error logs and crash reports

App Attestation (iOS Security):

Device attestation tokens to verify you're using a legitimate iOS app. These tokens do not identify you personally but verify the app's integrity.

3. Information We Do NOT Collect

We explicitly do not collect or request:

• Location data (GPS, IP geolocation)
• Contacts or calendar data
• Advertising identifier (IDFA)
• Biometric data (fingerprints, Face ID)
• Payment information (handled by Apple App Store only)

4. How We Use Your Information

4.1 Core App Functionality

We use your data to:

• Provide AI Coaching: Your chat messages and logs are sent to Claude AI to generate personalized coaching responses
• Track Progress: Calculate statistics, display charts, and show trends in your weight and nutrition
• Personalize Experience: Use your profile data and history to provide context-aware coaching
• Generate Summaries: Create daily and periodic summaries of your progress

4.2 What We Don't Do

• We do not use your data for marketing or advertising
• We do not sell your data to third parties
• We do not profile you for purposes unrelated to weight loss coaching

5. Third-Party Services & Data Sharing

Your data is shared with the following third parties only as necessary to operate the app:

5.1 Claude AI (Anthropic)

What: Chat messages, meal data, weight entries, and user profile

Why: To generate personalized coaching responses and meal analysis

When: Every time you chat or request meal/food analysis

Privacy: For more information, see Anthropic's Privacy Policy

5.2 Supabase (Backend Database)

What: All user data including profiles, messages, meals, weight logs, settings

Why: To store your data persistently and enable syncing across sessions

Privacy: See Supabase's Privacy Policy

5.3 Railway (Cloud Hosting)

What: Your backend requests pass through Railway's infrastructure

Why: The app's backend server is hosted on Railway

5.4 Apple (App Store & DeviceCheck)

What: App Store review, in-app purchase billing, device attestation

Privacy: See Apple's Privacy Policy

5.5 No Other Sharing

We do not share your data with analytics companies, ad networks, data brokers, or social media platforms.

6. Data Storage & Security

6.1 Local Storage (On Your Device)

What: SwiftData database stored locally on your iPhone

Protection: Encrypted by iOS's built-in encryption (Data Protection), only accessible by the app

6.2 Backend Storage (Supabase)

What: Duplicate copy of your data stored in our backend database

Protection:

• Encrypted in transit (HTTPS only)
• Encrypted at rest (Supabase database encryption)
• Row Level Security (RLS) policies restrict access to your data

6.3 Security Measures

• Encryption in transit: All data transmitted over HTTPS/TLS
• Secure authentication: Apple Sign In ensures only you can access your account
• Access controls: Backend data protected by row-level security policies
• Request verification: App Attest ensures requests come from your legitimate app
• Rate limiting: Prevents API abuse while allowing legitimate use

7. Data Deletion & Your Rights

7.1 How to Delete Your Account

You can permanently delete your account and all associated data by:

1. Opening the app → Settings → Account
2. Tap "Delete Account"
3. Confirm the deletion (requires two confirmations)

What Gets Deleted:

• ✅ All chat messages and coaching history
• ✅ All meal and weight log entries
• ✅ Your user profile and preferences
• ✅ Daily summaries and memory facts

Deletion Timeline: Deleted immediately from both your device and our servers (cannot be undone).

7.2 Data Export

Before deleting your account, you can export your data:

1. Settings → Data Management → "Export Chat & Meals"
2. Choose where to save the JSON file

7.3 Your Data Rights

You have the right to:

• Access: Request a copy of all data we hold about you
• Export: Download your data in machine-readable format (JSON)
• Deletion: Delete your account and all data permanently
• Correction: Update your profile information

7.4 Responding to Data Requests

For requests to exercise these rights, contact: hello@chattoloseweight.com. We will respond within 30 days.

8. Health & Medical Disclaimers

Who Should NOT Use This App

Do not use this app if you have or suspect:

• Eating Disorders: Anorexia, bulimia, binge eating, or other restrictive eating patterns
• Pregnancy or Breastfeeding: Calorie and macro recommendations may not be appropriate
• Serious Medical Conditions: Diabetes, heart disease, kidney disease requiring medical supervision
• Medication Interactions: If weight loss may interact with your medications
• Mental Health Crises: If experiencing suicidal thoughts or severe depression

Age Restrictions

This app is intended for users 18 years and older only. By using this app, you confirm that you are at least 18 years of age.

Your Responsibility

By using this app, you acknowledge that you have read these disclaimers and are not using the app for a prohibited condition. If in doubt, consult a doctor. This app is a tool for self-directed wellness, not medical treatment.

9. Data Retention

How Long We Keep Your Data

Active Account: Data is stored as long as your account is active and syncs between your device and backend.

After Account Deletion: All data is removed from your device and our database immediately. No archival or backups of deleted data are kept.

System Backups: Supabase may retain encrypted backups for disaster recovery (typically 7-30 days), but these become inaccessible after deletion.

10. International Compliance

GDPR (European Users)

If you are in the EU, you have rights under the General Data Protection Regulation:

• Right of Access and Data Portability
• Right of Erasure (delete your account)
• Right of Rectification (correct inaccurate data)
• Right to Withdraw Consent

To exercise GDPR rights, contact: hello@chattoloseweight.com

CCPA (California Users)

California residents have rights to know what data is collected, delete data, and opt-out of sales (we don't sell data). Contact: hello@chattoloseweight.com

11. Policy Changes

We may update this privacy policy to reflect changes in our practices, technology, or legal requirements.

How We'll Notify You: We'll post updates to this policy in the app or via email. Continued use after changes constitutes acceptance of the updated policy.

12. Contact & Questions

For questions or concerns about this privacy policy or your data:

Email: hello@chattoloseweight.com

Response Time: We will respond within 30 days.