Biteset Privacy Policy

This Privacy Policy explains how Bufound LLC, doing business as Biteset (“Biteset,” “we,” “us,” or “our”), handles information when you use the Biteset mobile application and related services. Biteset is a workout and nutrition tracking app available in the United States and Canada.

1. Information We Collect

Account and authentication information

When you create or use an account, we process your email address, Biteset user ID, authentication provider, and authentication session information. Biteset supports email verification codes, Google sign-in, and Apple sign-in.

Profile, goals, and preferences

You may provide a name, date of birth, height, sex, current and target weight, activity level, dietary preference, goal type, goal pace, calorie and macronutrient targets, units, notification preferences, and other app settings.

Workout and fitness information

Biteset stores the workout information you enter or generate in the app, including exercises, sets, repetitions, weight, duration, distance, rest times, workout history, templates, plans, notes, reminders, and related progress information.

Nutrition and food information

Biteset stores food logs, meals, serving amounts, calories, macronutrients, custom foods, saved meals, favorite foods, provider food records, barcode results, and related nutrition information. Food search terms may be normalized and cached by the search service without being linked to your Biteset user ID.

Weight and progress information

Biteset stores weight entries, dates, notes, goal progress, profile photos, and progress photos that you choose to add.

Photos and scans

If you choose to use photo features, Biteset processes images you take with the camera or select from your photo library. Profile and progress photos are used to display and track your progress. Nutrition-label and meal-photo scans are used to extract or estimate food and nutrition information. Biteset does not request microphone access.

Technical information

Biteset does not include a dedicated advertising, analytics, or crash-reporting SDK at launch and does not intentionally collect an advertising identifier. When the app communicates with our service providers, those providers may automatically process ordinary network and request information, such as IP address, timestamps, device or browser details, and diagnostic logs, to operate and secure their services. If you contact us, we also receive the information in your message and the contact information you use.

2. Where Information Is Stored

On your device

Biteset keeps local copies of app data in its private app storage so the app can work efficiently and support offline use. Local storage may include account session information, profile and goal information, workouts, nutrition logs, weight data, settings, and photos. Active workout drafts and a dashboard note are designed to remain only on the device. Temporary scan files may also be created during processing and are deleted on a best-effort basis after use.

The Workout Backup feature can create a temporary JSON file containing completed workout history, saved routines and folders, and exercise reminders. Biteset presents that file to your device’s share sheet so you can choose where to save or send it. Biteset does not automatically upload the exported backup, and the temporary export file is deleted on a best-effort basis after the share flow ends. Backup files you select for import are read on your device and replace the corresponding local workout data.

Cloud storage and synchronization

When you are signed in, Biteset synchronizes account, profile, goal, preference, weight, daily note, saved routine and folder, custom exercise, nutrition, and progress-photo records with Supabase. Profile and progress photos are stored in private Supabase storage associated with your account. Completed workout history, active workout drafts, exercise reminders, the built-in exercise library, and the dashboard note are designed to remain only on your device. Supabase also provides authentication, database, storage, and server-side function services for Biteset.

3. How We Use Information

We use information to:

• Create and authenticate your account.
• Provide workout, nutrition, weight, progress, planning, and reminder features.
• Synchronize your information across sessions and support offline use.
• Process nutrition labels and meal photos when you ask us to do so.
• Look up foods, barcodes, and nutrition information.
• Respond to support requests, troubleshoot problems, and protect the service.
• Comply with applicable law and enforce our Terms of Use.

4. Third-Party Services

Biteset uses the following services to provide launch functionality:

• Supabase provides authentication, hosted database, private file storage, and server-side functions.
• Apple provides Sign in with Apple when you choose that authentication method.
• Google provides Google account sign-in when you choose that option.
• Resend supports delivery of authentication emails through the Supabase authentication system.
• OpenAI processes nutrition-label and meal images to return structured nutrition information. Biteset requests that OpenAI not store the response as application state, although OpenAI may retain API content for limited abuse-monitoring or legal purposes under its own policies and account settings.
• The U.S. Department of Agriculture FoodData Central and Open Food Facts provide food, barcode, and nutrition data. Search terms or barcodes may be sent to these services through Biteset’s server-side search service.

These providers process information under their own terms and privacy practices. Their services may operate from locations outside your state.

5. How We Share Information

We share information only as needed to operate Biteset with the service providers described above, when you direct us to do so, or when disclosure is reasonably necessary to comply with law, protect rights or safety, or prevent fraud and abuse.

Biteset does not sell personal information. Biteset does not use personal information for targeted advertising, does not display third-party ads, and does not share personal information with data brokers.

6. Data Retention

We generally keep account and synced app information while your account is active, unless you delete particular content or delete your account. Local copies may remain on your device until they are deleted by the app, you clear the app’s data, or you uninstall the app.

Normalized food-search queries may be cached without a Biteset user ID for up to 30 days to improve search performance and reliability. Temporary scan files are deleted on a best-effort basis after processing. Service providers may retain operational, security, or abuse-monitoring records according to their own policies. Biteset does not maintain a separate backup system outside the infrastructure provided by its service providers.

7. Your Choices and Rights

You can edit or delete many workout, nutrition, weight, photo, and profile records in the app. You can also choose not to use camera, photo-library, barcode, nutrition-label, meal-photo, or Google sign-in features. You may revoke camera or photo access in your device settings, although related features will no longer work.

Depending on where you live, you may have legal rights concerning your personal information. To request access, correction, or deletion that is not available in the app, email privacy@biteset.app. We may need to verify your request before acting on it.

8. Account and Data Deletion

You can request account deletion from within Biteset. The deletion process removes your Biteset authentication account and associated cloud database records and attempts to remove your profile and progress photos from cloud storage. Database records associated with your user ID are configured to be deleted with the account.

After remote deletion, the app attempts to remove its local account data and files. Local cleanup is best-effort; if it cannot be completed, some information may remain in the app’s private storage on that device until later cleanup, the app’s data is cleared, or the app is uninstalled. Some limited information may remain for longer if a service provider must retain it for security, abuse prevention, or legal compliance.

9. Security

We use reasonable technical measures supported by the implementation, including encrypted network connections, authenticated access controls, database row-level access rules, and private cloud storage for user photos. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

10. Adults Only

Biteset is only for people who are at least 18. We do not knowingly offer the service to or collect personal information from anyone under 18. If you believe a minor has an account, contact privacy@biteset.app.

11. United States and Canada Service

Biteset is offered in the United States and Canada. Your information may be processed in the United States and in other locations where our service providers operate, under laws that may differ from those in your state, province, territory, or country.

12. Changes and Contact

We may update this Privacy Policy as Biteset changes. We will post updates at biteset.app/privacy, revise the effective date, and provide additional notice of material changes when reasonably appropriate. Email general questions to support@biteset.app or privacy requests to privacy@biteset.app.