Privacy Policy

1. Introduction

At Lumen, we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our nutrition tracking application and related services (collectively, the "Service").

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using the Service:

• Account Information: Email address, name, password (encrypted)
• Profile Information: Age, gender, height, weight, activity level, dietary goals
• Meal Data: Photos of meals, meal descriptions, voice recordings, nutritional information
• Health Data: Weight measurements, body metrics, progress tracking data
• Preferences: Dietary restrictions, food preferences, notification settings

2.2 Automatically Collected Information

When you use the Service, we automatically collect certain information:

• Usage Data: Pages viewed, features used, time spent, click patterns
• Device Information: Device type, operating system, browser type, IP address
• Location Data: Approximate location based on IP address (not precise GPS)
• Cookies and Similar Technologies: Session identifiers, preferences, analytics data

2.3 Information from Third Parties

We may receive information from third-party services:

• Authentication Providers: If you sign in using third-party authentication
• Analytics Providers: Aggregated usage statistics and demographics

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 To Provide the Service

• Process and analyze your meal photos using AI
• Calculate nutritional information and macro tracking
• Generate personalized nutrition insights and recommendations
• Track your weight and progress over time
• Maintain and authenticate your account

3.2 To Improve the Service

• Train and improve our AI models for better accuracy
• Analyze usage patterns to enhance features
• Conduct research and development
• Identify and fix bugs and technical issues

3.3 To Communicate with You

• Send important service updates and notifications
• Respond to your inquiries and support requests
• Send promotional emails (you can opt out at any time)
• Request feedback and conduct surveys

3.4 For Security and Legal Compliance

• Protect against fraud, abuse, and security threats
• Enforce our Terms of Service
• Comply with legal obligations and government requests
• Protect our rights, property, and safety

4. Data Storage and Security

We take the security of your data seriously and implement industry-standard security measures:

• Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest
• Secure Storage: Data is stored on Supabase, a secure PostgreSQL database platform
• Access Controls: Strict access controls limit who can access your data
• Regular Backups: Your data is regularly backed up to prevent loss
• Security Monitoring: We monitor for security threats and vulnerabilities

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We share data with third-party service providers who help us operate the Service:

• Supabase: Database hosting and authentication
• Groq / OpenRouter: AI model providers for nutrition analysis
• Cloud Storage: Secure storage for meal photos
• Analytics Providers: Usage analytics and performance monitoring

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Legal processes (subpoenas, court orders)
• Government or regulatory requests
• Protection of our rights and safety
• Prevention of fraud or illegal activity

5.3 Business Transfers

If Lumen is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

5.4 Aggregated Data

We may share aggregated, anonymized data that cannot identify you individually for research, analytics, or marketing purposes.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for authentication and basic functionality
• Analytics Cookies: Help us understand how you use the Service
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features. See our Cookie Policy for more information.

7. Your Privacy Rights

Depending on your location, you may have the following rights under privacy laws like GDPR and CCPA:

7.1 Access and Portability

• Request a copy of your personal data
• Export your data in a machine-readable format

7.2 Correction and Update

• Update or correct inaccurate information
• Complete incomplete data

7.3 Deletion

• Request deletion of your personal data
• We will delete your data within 30 days, subject to legal retention requirements

7.4 Opt-Out

• Unsubscribe from marketing emails
• Opt out of certain data collection practices
• Disable cookies through browser settings

7.5 Object and Restrict

• Object to certain data processing activities
• Request restriction of processing under certain circumstances

To exercise these rights, please contact us at privacy@sharpened.cc. We will respond to your request within 30 days.

8. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy:

• Account Data: Retained while your account is active
• Meal and Health Data: Retained while your account is active or as needed for analytics
• Usage Data: Typically retained for 12-24 months
• Legal Requirements: Some data may be retained longer to comply with legal obligations

After you delete your account, we will delete or anonymize your data within 30 days, except where we are required by law to retain it.

9. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@sharpened.cc, and we will delete such information.

Users between 13 and 18 must have parental consent to use the Service.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from your country.

By using the Service, you consent to the transfer of your information to the United States and other countries. We take steps to ensure that your data is treated securely and in accordance with this Privacy Policy, regardless of where it is processed.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@sharpened.cc.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

You also have the right to lodge a complaint with your local data protection authority.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting a prominent notice in the Service
• Sending you an email notification
• Updating the "Last Updated" date at the top of this policy

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: