Legal

Privacy Policy

Plain-language summary of what BearyEats collects, why, who we share it with, and the choices you have. Last updated July 11, 2026.

This Privacy Policy explains how BearyEats (“BearyEats”, “we”, “our” or “us”) handles personal information when you use the BearyEats mobile app for iOS (currently distributed as a TestFlight beta, with a planned Apple App Store release) and the website at bearyeats.com (together, the “Services”). BearyEats is operated from Romania.

We try to keep this policy short, specific and honest. If anything here is unclear, email bearyeatssupport@gmail.com and we will explain.

1. Quick summary

  • We do not sell your personal information, and we do not use advertising trackers or share your data for cross-context behavioral advertising.
  • You sign in with Apple or Google. We never receive your Apple or Google password.
  • When you take a meal photo or scan a label, the image (or text read from it) is sent to our processors to generate ingredient insights and calorie and macro estimates. Those estimates are informational only.
  • You can delete your account and associated data from inside the app, or by emailing bearyeatssupport@gmail.com. See our Delete Account page.

2. Information we collect

a. Account and sign-in information

  • Sign in with Apple / Sign in with Google.When you create an account, we receive a unique identifier and, if you allow it, your name and email address from Apple or Google. If you use Apple’s “Hide My Email”, we receive a relay address rather than your real one. We never see your Apple or Google password.
  • Authentication identifiers issued by our authentication provider (Supabase) so we can keep you signed in (an opaque user ID and session token).

b. Profile and preferences

  • Allergies, dietary preferences (for example vegan, keto, halal), and personal goals you choose to set inside the app.
  • These values are used only to personalize ingredient flags and informational insights for you.

c. Scans, photos and product data

  • Barcodes you scan, the product identifiers they map to, and the ingredient and nutrition results returned for that product.
  • Meal photos. When you photograph a meal, the image is processed (by us and our AI processors) to recognize the food and produce calorie and macro estimates.
  • Label images and ingredient text. When you scan a food label, we use optical character recognition (OCR) to read the text, then analyze the ingredients. You can also type or paste ingredient text yourself.
  • Scan and log history. Your scans, logged meals, and results are stored so you can review them. When you are signed in, this history is synced to our backend (Supabase) so it follows you across devices. You can clear it from inside the app.

d. Health-related metrics you add

  • Weight and steps and related progress figures you enter or allow the app to record, used to show your trends over time. We do not use this information for advertising.

e. AI and image analysis

  • To generate ingredient explanations and calorie and macro estimates, we send the relevant input — a meal photo, a label image or OCR text, a product identifier, and/or ingredient text, plus your allergy and diet preferences if you set them — to our processors, which include Google Cloud Vision (image recognition and OCR) and Google AI / Gemini (ingredient analysis and plain-language explanations).
  • We do not send your email address, your name or your account ID to these processors together with the image or ingredient text where it is not needed for the analysis.
  • We do not permit these providers to use your inputs to train their public models.
  • AI and image analysis can be inaccurate. All results are estimates for informational purposes only and are not medical advice.

f. Battles (challenges with others)

  • Battles are optional. If you join, we collect the username you choose, your challenge scores and progress, and interactions such as invites.
  • If you block another participant, we store that relationship so we can hide them from you. If you report someone, we store the report and related context so we can review it and take action, which may include removing a participant from Battles.
  • A username you choose for Battles may be visible to other participants. Do not use personal information you would not want others to see as your username.

g. Subscription and purchase data

  • Paid subscriptions are processed by the app store you install from — currently the Apple App Store. BearyEats does not see or store your full payment card or bank details.
  • We use RevenueCatas our subscription entitlement provider. RevenueCat receives a transaction identifier and store-level subscription status (for example, “in trial”, “active” or “expired”) so we can unlock your features and let you restore purchases across devices.
  • The relevant app store applies its own privacy policy to purchases.

h. Communications and support

  • When you contact bearyeatssupport@gmail.com or use the contact form on the website, we receive your name, email and the contents of your message so we can reply.

i. Device, app and diagnostic data

  • Device model, operating system version, app version, language and region, anonymized crash reports, and basic in-app event analytics (for example, “scan completed”).
  • These signals help us fix bugs, measure reliability and improve features. We do not link them to advertising profiles.

j. Website data

  • The bearyeats.com website uses privacy-respecting, aggregate analytics to count visits and improve the site. The website does not use advertising trackers.

k. Information we do not collect

  • We do not access your contacts, microphone audio recordings, precise location, or advertising identifiers.
  • We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising.

3. How we use your information

  • To provide scanning, image and ingredient analysis, and informational estimates.
  • To personalize results based on the allergies, diet and goals you set.
  • To run Battles, including keeping scores, honoring blocks, and reviewing reports to keep challenges safe.
  • To create and protect your account, including preventing fraud, abuse and security incidents.
  • To deliver, restore and renew subscriptions you purchase.
  • To diagnose problems, measure performance and improve the app.
  • To communicate with you about your account, support requests and important service changes. We do not send marketing email without your consent.
  • To comply with legal obligations.

4. Legal bases (EEA, UK and similar regions)

If you are in the European Economic Area, the United Kingdom or another region with similar laws, we rely on the following legal bases:

  • Performance of a contract — to provide the core Services you ask us for, including running scans, generating estimates and syncing data to your account.
  • Legitimate interests — to keep the Services secure, moderate Battles, prevent abuse, debug crashes and measure aggregate usage.
  • Consent — for optional analytics and any future marketing communications. You can withdraw consent at any time.
  • Legal obligation — when we are required to process information by law.

5. Subprocessors and providers

We share personal information only with the categories of recipients below, and only as needed to operate the Services. We do not sell personal information.

  • Supabase — backend, database, authentication and secure storage for accounts and synced history.
  • Google Cloud Vision — image recognition and OCR for meal photos and label scans.
  • Google AI / Gemini — ingredient analysis and plain-language explanations.
  • RevenueCat — subscription entitlement management and cross-device restore.
  • Apple (Sign in with Apple, and the App Store for payments) and Google (Sign in with Google) under their own terms.
  • Crash reporting and analytics providers that help us diagnose bugs and understand aggregate, non-identifying usage.
  • Email and support tooling that helps us respond to your messages.
  • Legal and safety — we may disclose information when required by valid legal process, to protect users, or to enforce our Terms.
  • Business transfers — if BearyEats is involved in a merger, acquisition or asset sale, information may be transferred to the successor entity, which must continue to honor this policy or notify you of changes.

All providers act as our processors under written agreements that limit their use of your information to operating the Services for us.

6. Data retention

  • Account data is kept while your account is active and for a short period afterwards to handle backups and disputes.
  • Scans, meals and estimates synced to your account are kept until you clear them or delete your account. Data held only on your device is removed when you clear it or uninstall the app.
  • Weight and steps you add are kept until you remove them or delete your account.
  • Battles data — your username, scores and block/report records — is kept while relevant to active or recent challenges and for safety and abuse-prevention purposes. Reports may be retained after your account is deleted where needed to enforce our rules or comply with law, in a form no longer linked to your identity where possible.
  • Support emails are kept for up to 24 months so we can follow up on past tickets.
  • Crash and diagnostic logs are kept in aggregated, anonymized form for up to 13 months.
  • We may keep a limited subset of records longer when required for tax, accounting or legal compliance.

7. How to delete your account and data

You can delete your BearyEats account and the personal data associated with it in two ways:

  1. Inside the app: open BearyEats → Profile → Settings → Delete account. This removes your account and synced data. Local data on your device is removed when you uninstall the app.
  2. By email: write to bearyeatssupport@gmail.com from the email address on your account, with the subject “Delete my account”. We will confirm and complete deletion within 30 days.

See the Delete Account page for full details of what is deleted and what may be retained.

8. Your choices and rights

  • Access and export — request a copy of the personal data we hold about you.
  • Correction — ask us to fix data that is inaccurate.
  • Deletion — see section 7.
  • Object or restrict — object to or restrict certain processing, including profile-based personalization.
  • Withdraw consent — turn off optional analytics in the app at any time.
  • Camera and photos access— revoke or re-enable in your device’s system settings. Without camera access, scanning and meal photos will not work.
  • Complaint — if you are in the EEA, UK or another region with a privacy regulator, you have the right to lodge a complaint with your local authority. In Romania, the supervisory authority is the National Supervisory Authority for Personal Data Processing (ANSPDCP).

To exercise any of these rights, email bearyeatssupport@gmail.com. We may need to verify your identity before acting on a request. We respond within 30 days, or sooner where required by law.

9. California privacy rights (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, the right to delete it, the right to correct it, the right to limit use of sensitive information, and the right to opt out of any sale or sharing for cross-context behavioral advertising. BearyEats does not sell or share personal information for cross-context behavioral advertising. To exercise California rights, email bearyeatssupport@gmail.com. We will not discriminate against you for exercising these rights.

10. Children

BearyEats is a general-audience product and is not directed to children under 13. Children under 13 may use BearyEats only with the verifiable consent and supervision of a parent or legal guardian, and only where permitted by local law (some jurisdictions require a higher minimum age, for example 14, 15 or 16 in parts of the EEA).

We do not knowingly collect personal information from children without appropriate parental or guardian consent. If you are a parent or guardian and believe a child has provided us personal information without your consent, contact bearyeatssupport@gmail.com and we will delete the relevant information.

11. International data transfers

BearyEats is operated from Romania (European Union). We and our service providers may process information in countries other than the one you live in, including the European Union, the United Kingdom and the United States. Where required by law, we use appropriate transfer safeguards such as the European Commission’s Standard Contractual Clauses.

12. Security

We use industry-standard technical and organizational measures to protect your information, including encryption in transit, access controls and regular review of who can access what. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. If we ever experience a personal data breach that affects you, we will notify you and the relevant authorities as required by law.

13. Informational use only

BearyEats is provided for general informational and educational purposes only. It is not a medical device, and the ingredient explanations, calorie and macro estimates, and informational scores are not medical advice. Do not rely on BearyEats to diagnose, treat, cure or prevent any condition, and do not use it to manage allergies in place of reading the physical packaging and consulting a qualified professional.

14. Changes to this policy

We may update this Privacy Policy from time to time. If changes are material, we will notify you in the app or by email before they take effect. The “last updated” date at the top of this page reflects the latest revision.

15. Contact us

For privacy questions, data requests, account deletion or any other support topic, email bearyeatssupport@gmail.com. You can also use the form on our contact page. BearyEats is operated from Romania.