Your record.
Handled carefully.

1. Who is responsible

BiteSyncd is operated under the MacroLog project (collectively, “BiteSyncd”, “we”, “us” or “our”). BiteSyncd determines why and how personal data is processed for the service. Privacy questions and rights requests can be sent to support@bitesyncd.com.

2. Information we process

• Account data: email address, optional name, authentication identifiers and account timestamps. If you use Google sign-in, we receive the basic identity information Google and Supabase provide for authentication, such as your Google account identifier, email, name and profile image where available.
• Nutrition data you choose to enter: foods, quantities, meals, dates, calories, macronutrients, micronutrients, goals, saved foods, recipes and corrections.
• Profile and accountability data: username, display name, avatar, timezone, sharing preferences, friend relationships and reactions. Raw diary entries are not disclosed through friend cards.
• AI connection data: the connected client, approved read or write scope, connection and revocation times, last use, and a bounded audit record of tool actions. OAuth authorization codes and refresh tokens are stored only as hashes; raw access tokens are not stored in the application database.
• Waitlist data: email, selected persona, AI tools, goal, consent and signup timestamps when you join integration early access.
• Technical data: essential session cookies, security and request information needed to authenticate users, prevent abuse and operate the service. BiteSyncd does not currently use advertising cookies or third-party behavioural advertising analytics.

3. Why we use it

We process account and service data to create and secure your account, save and calculate your nutrition record, provide goals and progress, fulfil actions you request, maintain optional social features, support users and protect the service. Nutrition data is processed only when you choose to provide it and, where applicable law treats it as health data, on the basis of your explicit consent. You can withdraw that consent for future processing by stopping use and requesting deletion.

We process early-access contact data with your consent. You may withdraw marketing consent at any time by replying to an update or contacting us. We may process limited security records where necessary for our legitimate interests in preventing fraud, abuse and unauthorized access, subject to your rights.

4. Food searches and external data

Food names, search terms or barcodes may be sent from our server to Open Food Facts or USDA FoodData Central to return matching nutrition information. We do not intentionally send your BiteSyncd account identity with those searches. Those sources may receive ordinary network information from our server and operate under their own terms.

5. AI assistants and user-directed sharing

If you connect ChatGPT, Claude or another compatible assistant, BiteSyncd shares only the data required for the tool action and permission scope you approve. Read access does not permit diary changes. Write access can create or modify records and is recorded in your activity history. You can revoke a connection from BiteSyncd.

The assistant provider independently processes prompts, responses and data it receives under its own privacy terms. Do not connect a provider unless you are comfortable with those terms. BiteSyncd does not control how an external assistant retains information outside BiteSyncd.

6. Service providers and disclosures

We use service providers to operate BiteSyncd, including Supabase for authentication and database services and Vercel for application hosting and delivery. Google processes identity information when you choose Google sign-in. These providers process data under their own contractual and security commitments. We may also disclose information when required by law, to protect users or the service, or as part of a business transaction subject to appropriate safeguards.

We do not sell or rent personal information. We do not disclose raw nutrition records to advertisers.

7. International processing

Our providers may process information outside your country. Where required, transfers are made using recognized safeguards supplied by the relevant provider, such as adequacy decisions or standard contractual clauses.

8. Retention

Account and nutrition data is generally retained while your account remains active so the diary and history continue to work. Waitlist information is retained until you unsubscribe, request deletion or the relevant program ends. Short-lived OAuth authorization codes expire quickly; connection and action history is retained while needed to provide security, transparency and support.

After a verified deletion request, we remove account-linked information from active systems unless retention is required for security, legal claims or law. Residual copies may remain temporarily in restricted backups until overwritten through the ordinary backup cycle.

9. Security

We use HTTPS, account-scoped database access controls, row-level security, permissioned integrations, hashed OAuth credentials and restricted administrative access. No online service can guarantee absolute security. Contact us promptly if you believe your account or information has been compromised.

10. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent and complain to a data protection authority. You can edit or delete individual diary entries in the app, control friend sharing and revoke AI connections. Until self-service account export and deletion are available, send a request from your account email to support@bitesyncd.com. We may verify your identity before completing it.

11. Children

BiteSyncd is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has created an account, contact us so we can investigate and delete it.

12. Changes

We may update this policy as the service or applicable requirements change. Material changes will be dated here and, when appropriate, communicated through the service or by email. Continued use after an update is subject to the revised policy, but we will request new consent where the law requires it.

13. Contact

Questions, privacy requests and complaints can be sent to support@bitesyncd.com. You may also lodge a complaint with the data protection authority responsible for your country or region.