Privacy Policy | BiteCount

Before We Get Into It

Privacy policies have a reputation for being long, confusing, and written to protect the company rather than the user. This one is written differently. We want you to understand what happens to your data when you use BiteCount - because you deserve to know, and because we think transparency is just good practice.

BiteCount is a calorie and nutrition tracking app with optional social features for adults. To help you reach your goals, we need some information about you - things like your height, weight, and what you eat. That data is yours, and we treat it that way.

Here is the short version of our entire policy:

We do not sell your personal data. Ever.
We do not use your data for advertising or to build ad profiles.
We only collect what we actually need to run the app.
Your progress photos, food logs, and measurements are never shown to other users. Your weight is shown only if you choose to include it on a goal card you share, and we ask for your consent first.
If you use social features, only your username, display name, profile photo, and bio are visible to other users by default. Everything else stays private until you choose to share it.
Social features are only for users 18 and older.
You can download, edit, or permanently delete your data at any time.
We will tell you plainly who else touches your data and why.

The longer version follows. It covers everything in detail, including your legal rights depending on where you live.

Who We Are

Floyd Technologies LLC, doing business as BiteCount ("BiteCount," "we," "us," or "our"), is the company responsible for the BiteCount app and website. We are the data controller for the purposes of this policy, meaning we decide how your personal information is collected and used.

Privacy contact: privacy@bitecountapp.com

What This Policy Covers

This Privacy Policy applies to your use of the BiteCount mobile app (iOS), our website at bitecountapp.com, the share-link pages we host, your communications with BiteCount (such as support emails and reports), and any other services we operate under the BiteCount name.

It does not cover third-party apps, websites, or services you connect to BiteCount - like Apple Health - and it does not cover what other people do with content you choose to share outside BiteCount. Those services have their own privacy policies, and we encourage you to read them.

How You Accept This Policy

When you create a BiteCount account, and before you enter any health information, we will ask you to agree to our Terms of Service, including our Health Disclaimer and Community Guidelines, and to acknowledge this Privacy Policy. We collect and use your health information only as needed to provide the features you use, and we ask for your consent before sharing it with other users. We keep a record of which version of each document you accepted, when, and where in the app you accepted it. If you do not agree, please do not create an account or use the app.

If we make material changes to this policy, we will notify you and may ask you to accept the updated policy in the app before you can keep using BiteCount, as described in Changes to This Policy.

Information We Collect

We collect information in two ways: what you give us directly, and what we collect automatically when you use the app.

Information You Give Us

When you create an account and use BiteCount, you may provide:

Your email address and a password. Passwords are hashed, so we cannot read them.
Basic profile details: name, date of birth, and biological sex.
Physical stats: height, weight, and body metrics.
Your goals: whether you want to lose, maintain, or gain weight, and your activity level.
Diet preferences and allergies: any dietary restrictions, allergies, or eating patterns you choose to set, such as low carb, keto, or high protein.
Food logs: everything you track, including meals, calories, macros, and custom foods you create.
Progress photos, if you choose to upload them. We remove location and device information from progress photos before we store them. Each photo is saved with the date it was taken (which you can change) and your weight on that date, both visible only to you.
Health data from Apple Health, but only if you explicitly give BiteCount permission. You can revoke permission at any time in your phone's settings. Revoking access stops BiteCount from collecting new health data but does not automatically delete data already imported. To remove that data, contact us at privacy@bitecountapp.com.
Support requests, feedback, appeals, and removal requests you send us.

"Social Features" are the parts of BiteCount that let you interact with other users or share content beyond your private account, such as profiles, following, posts, comments, high fives, recipe sharing, search, and share links. If you are 18 or older and use Social Features, you may also provide:

Your username (along with a history of usernames you have used), display name, profile photo, and bio.
Your social settings, including whether your account is public or private, which parts of your profile and which recipes are visible, and to whom.
The people you follow, the people who follow you, follow requests you send and receive, your friends (people you follow who also follow you), and the people you block.
Posts, including any photos or recipes attached to them, plus your comments and high fives.
Recipes you share, save, or remix.
Goal cards you share in BiteCount, and your consent choices for sharing them.
Reports you submit about other users' content or profiles, including the reason and any note you add.
Messages you send and receive.

Information We Collect Automatically

When you use the app, we automatically collect a limited amount of technical information to keep things running smoothly:

Device type, operating system, and app version.
Crash reports and error logs, so we can fix problems quickly.
Your general region or country (not your precise location).
A push notification token for your device, if you allow notifications.
Age information provided by Apple, such as an age range, where available.

Usage Analytics

We use PostHog to understand how people use BiteCount, such as which features are used and how often. PostHog records the screens you open, such as Profile or Feed, and the actions you take, such as logging a food, completing an onboarding step, following someone, or sharing a post. Each event is linked to an account identifier, not your name or email, and includes basic device and app details: device model, operating system, app version, language and time zone settings, screen size, and whether you are on Wi-Fi or cellular.

Some events include a few details about the action itself, such as the name of the onboarding step you completed, how many people you followed during setup, the type of post you shared and the audience you chose, the reason category of a report you filed, or the kind of item you logged. These details come from fixed options in the app, never from text you type. Events never include what you log or write, such as food names, amounts, or calories, your weight or measurements, photos, search terms, captions, comments, chat messages, or feedback, and they never identify other users you view or interact with. PostHog receives nothing from Apple Health, and session recording is turned off.

RevenueCat, our subscription provider, sends PostHog an event each time your subscription changes, such as when a trial starts, a purchase or renewal goes through, or a subscription is canceled or expires. These events include the plan, price and currency, store, purchase and expiration dates, any offer code used, App Store transaction identifiers, RevenueCat's identifier for your account, and your device's app-tracking permission status. They do not include your name, email, or payment details.

When someone visits our website or opens a share link, our hosting provider receives their IP address and basic request information, as any website does.

What We Do Not Track

We do not use fingerprinting, track you across other companies' apps or websites, or use any technique designed to build a profile of you for advertising. We do not allow third parties to collect information about your activity across other websites through the BiteCount app. We do not use facial recognition or collect face geometry or other biometric identifiers from your photos. We do not use your location for Social Features, and we do not access your phone's contacts.

If you sign in with Apple or Google, we may receive your name, profile picture, email address, and a unique identifier from that service, depending on your settings with that service (for example, Apple lets you hide your email address). We never show the name or picture from these services on your BiteCount social profile. We do not receive your passwords or any other data from those accounts.

How We Use Your Information

We use your information to operate BiteCount and to make it work well for you. Specifically, we use it to:

Create and manage your account, and confirm your age so we can keep Social Features limited to adults.
Calculate your personalized calorie targets, macro recommendations, and progress trends.
Display your food logs, goals, and history back to you.
Power food search, including the custom foods you create.
Sync data with Apple Health, if you have turned that on.
Run Social Features: show your profile and the content you choose to share to the people you choose, let others find you in search, and suggest people you may know. Suggestions are based only on mutual BiteCount connections (friends of your friends) - never on your contacts, your location, or your health data.
Show you the Discover feed. In the future, we may personalize Discover using your goals, diet preferences, and allergies. If we do, you will be able to turn personalization off in settings.
Keep BiteCount safe: automatically check text and photos when they are posted, review reports and removal requests, enforce our Terms and Community Guidelines, prevent abuse, and meet our legal obligations, including reporting child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC).
Send you transactional emails, such as password resets and subscription confirmations.
Respond to your support requests, feedback, and appeals.
Detect and prevent fraud, abuse, and security incidents.
Improve the app by analyzing usage trends - for example, which features people use most.
Send you optional product updates or tips, if you have opted in. You can opt out at any time.
Send you push notifications - such as reminders to log your meals, updates on your progress, or social activity like new comments - but only if you allow notifications when your device asks. You can turn off notifications at any time in your device settings. We do not use push notifications for third-party advertising.

We do not use your data to build advertising profiles, sell it to advertisers, or train AI models - ours or anyone else's.

What Other Users Can See

Social Features are optional and available only to users 18 and older. Here is exactly what other BiteCount users can see.

Your username, display name, profile photo, and bio. Other users can find you in search, and you may appear as a suggested user to friends of your friends.

Visible Only If You Choose

Each of these is private by default. You decide whether each one is visible to no one, your followers, or your friends:

Your streaks.
Your logging this week, shown only as colors indicating how close you came to your target each day - never as numbers.
Badges you have earned.
Your recipes. Each recipe can also have its own visibility setting.

Streaks and weekly logging are off by default. Because they relate to your health habits, turning either one on is your consent to share it with the people you choose, and we keep a record of that choice. You can withdraw your consent at any time by turning the setting off.

Your account is private by default, which means you approve each person who asks to follow you. If you make your account public, anyone can follow you without asking, so anything you share with your followers can be seen by anyone who follows you. You can switch back to private at any time, and people who already follow you will keep following you.

Your posts are visible to the audience shown in the app when you post, and comments and high fives are visible to anyone who can see the post they belong to. When someone remixes one of your recipes, their remix shows your username as the original creator.

Never Visible to Other Users

Your progress photos, food logs, body measurements, calorie targets, birthday, email address, Apple Health data, and AI coaching conversations. Your weight and goals are never visible unless you include them on a goal card you share.

If you turn off Social Features, other users cannot see your profile or content in any way, and you will not appear in search or suggestions. If your subscription ends, your profile and shared content stay visible according to your settings until you change them, turn off Social Features, or delete your account.

Goal Cards

When you reach a goal, you can create a goal card to share in BiteCount or outside the app. You choose which details it shows, such as your starting and ending weights, weight change, time frame, or username. Because weights are health information, the first time you share a goal card that includes them, we will ask for your separate consent and keep a record of it. You can withdraw that consent at any time in settings, and we will then hide the goal cards you shared in BiteCount.

When you create a share link to your profile, a recipe, or a food, people who have the link can open it. What they can see depends on your privacy settings. A profile link shows your username, display name, and profile photo. If your account is public, your profile also has a public web page that shows these and your bio. A recipe or food link shows its name, photo, calories, macros, and creator. Apps where you paste a link may create their own preview of the page, which we do not control.

Once you share a link or goal card outside BiteCount, we cannot control, recall, or delete the copies that other people or apps keep, even if you later delete the original or withdraw your consent.

Your Health Data Deserves Extra Care

BiteCount handles information that qualifies as "consumer health data" under U.S. state law. This includes your body weight and body composition, caloric intake, diet preferences, allergies, progress photos, and any data pulled from a health platform.

Our commitments regarding health data are firm:

We never sell it.
We never share it for marketing or advertising.
We share it with our service providers only to the extent necessary for the app to function.
We show it to other users only when you choose to, such as by sharing a goal card that includes your weights, and we ask for your consent first. Your measurements, food logs, and progress photos are never shown to other users.
Your progress photos are kept only in our secure database storage. They are never sent to any other service, including our AI and moderation providers.
We store it securely, with encryption at rest and in transit.
You can delete all of it at any time, directly from the app.

These protections apply to every BiteCount user, wherever you live. If you live in Washington or Nevada, our Consumer Health Data Privacy Policy explains your additional rights.

Who Else Has Access to Your Data

We do not sell your data, and we do not share it with advertisers, brands, or partners. We share it only with the service providers that make BiteCount work, with other users when you choose to share through Social Features, and in the limited legal and business situations described at the end of this section. Each provider is bound by contract or by its terms of service to use your data only to provide services to us and to protect it with the same or equal protection as this policy describes.

These are the providers we currently use:

Cloud Infrastructure and Database

All BiteCount data - including your account, food logs, profile, progress photos, social content, and any messages - is stored on Supabase, a secure cloud database platform based in the United States. Supabase encrypts data at rest and in transit and does not use your data for any purpose other than powering BiteCount.

Food Search

Our food search system runs on Railway, a cloud hosting platform. Railway processes our food catalog, including the custom foods you create and the account identifier they belong to, so that your search results can include your own foods.

Our website and share-link pages are hosted by Hostinger. Hostinger receives the content shown on a share-link page when you create one, and the IP address and request information of anyone who visits our website or opens a share link.

Subscription Management

BiteCount uses RevenueCat to track your subscription status - whether it is active, when it renews, and which plan you are on. Your subscription itself is managed entirely through the Apple App Store. To cancel, change, or manage it, go to your iPhone Settings > [your name] > Subscriptions. BiteCount does not store your payment card details and cannot process charges directly. RevenueCat also sends your subscription events to PostHog, as described under Usage Analytics.

Customer Support, Feedback, and Reports

If you contact BiteCount for help at support@bitecountapp.com, the BiteCount team handles your request directly. Support emails are delivered through Resend, which receives your email address solely for that purpose. We access only the account data needed to resolve your issue, and we do not use support conversations for any other purpose.

We use monday.com to organize support tickets, app feedback, and content reports. For a content report, monday.com receives the reason for the report, the type and identifier of the reported item, the reporter's account identifier, and any note the reporter adds. For support tickets and feedback, it receives what you send us. It does not receive photos or health data from your account.

Email Delivery

BiteCount sends transactional emails - such as account confirmations, password resets, and subscription notifications - through Supabase, and support emails through Resend. Each provider receives your email address solely to deliver messages on our behalf. Neither receives your health data, food logs, or any other app data.

Marketing and Optional Emails

If you have opted in to product updates, tips, or newsletters, we send them through Mailchimp. Mailchimp receives your email address and basic engagement data (such as whether you opened an email) solely to deliver these emails on our behalf. It does not receive your health data, food logs, or any other app data. You can unsubscribe at any time using the link in any of these emails or by contacting privacy@bitecountapp.com.

Push Notifications

Push notifications are delivered through the Apple Push Notification service. To deliver a notification, Apple receives your device token and the notification content, which may include the username of the person who interacted with you, a short preview of a comment, food or recipe names, or streak counts. Depending on your device settings, notification previews may appear on your lock screen.

Analytics

PostHog receives the usage events described under Usage Analytics above.

Crash Reporting

BiteCount relies on Apple's built-in crash reporting for iOS diagnostics. Apple collects and processes crash data under its own privacy policy, and we use it to find and fix technical problems. We do not receive personally identifiable information through Apple crash reports.

AI Coaching

BiteCount's AI coaching features are powered by OpenAI. When you use the AI chat or coaching features, your messages and relevant nutritional context are sent to OpenAI to generate responses. We do not send OpenAI your name or account details. The AI coach cannot see Social Features content. OpenAI processes this data under its API data policies and does not use it to train its models. Our AI features run on a cloud hosting platform that does not access your personal data beyond what is needed to operate the server.

When you import a recipe from a photo or a link, the photo or the text of the linked page is sent to OpenAI to read the recipe, and ingredient names may be sent to estimate nutrition for ingredients we can't match to a food in our database. We do not send your name or account details with them, and OpenAI does not use them to train its models.

Photo and Text Moderation

Before a profile photo, post photo, or recipe photo is saved, OpenAI's moderation service checks it for content that breaks our rules, such as sexual or violent imagery. A photo that fails the check is not saved. OpenAI receives only the photo - not your name, account details, or health data - and does not use it to train its models. Progress photos are never sent to OpenAI.

Post captions (including the name of any recipe or food you share), comments, and bios are also checked by OpenAI's moderation tools right after you post them, for content that breaks our rules, such as harassment, hate, or content that promotes disordered eating. Text that fails the check may be hidden and reviewed by our team. OpenAI receives only the text (and, for a comment, the post it replies to) - not your name, account details, or health data - and does not use it to train its models.

Other Users

Other BiteCount users can see the content you choose to share through Social Features, as described in What Other Users Can See.

Legal and Safety Disclosures

We may share your information with law enforcement or other authorities if required by a valid court order, subpoena, or other legal process, or if we believe disclosure is necessary to prevent imminent harm to someone. We report apparent child sexual abuse material to NCMEC as federal law requires, and we preserve related content and account information as the law requires or allows.

Business Transfers

If BiteCount is acquired, merges with another company, or sells its assets, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy, and you will have the option to delete your account.

How Long We Keep Your Data

We keep your data for as long as your account is active, except as described below.

When You Delete Content

When you delete a post, comment, profile photo, or recipe photo, or replace a photo, it is removed from our database and storage immediately, along with its thumbnails. Deleting a post also deletes its comments and high fives. Temporary copies in caches may remain for a short time, and copies in our backups are deleted automatically within 7 days. Link previews created by other apps, and notifications already delivered to someone's device, are outside our control.

When You Delete Your Account

When you request account deletion, your Social Features are turned off and your profile and content are hidden from other users right away. Within 30 days, we permanently delete your personal data, including your profile, username history, social settings, posts (with the comments and high fives on them), your comments and high fives on other people's posts, follows, friend connections, blocks, notifications, the reports you filed, your push tokens, your progress photos, and any messages you sent. Deleted data is removed from our backups within 7 days after that.

We keep some information after you delete your account:

Reports other users filed about you, related moderation records, and any reported conversations, for up to 1 year, so we can handle safety issues and repeat abuse.
Remixes other users made of your recipes. These belong to the people who made them, and their credit changes to "a BiteCount user."
Support tickets and feedback you sent us, for as long as we need them to resolve your request and keep accurate business records.
Analytics events linked to an account identifier, and subscription history in RevenueCat linked to an anonymous identifier. Once your account is deleted, these can no longer be connected to you.
Billing and other records we must keep for tax or legal reasons, and any information we are legally required to preserve.

Content Removed by Moderation

When we remove content for breaking our rules, we keep a hidden copy for up to 1 year in case of appeals, repeat violations, or legal requirements, and then delete it - unless we are required to keep it longer for a legal matter.

Inactive Accounts

If your account has been inactive for 24 consecutive months - meaning no logins and no food logs - we will email you at the address on your account. If we do not hear back within 60 days, we will send a final notice. Only after that will we consider any action on your account, and we will notify you again before anything happens. You will always have the chance to reactivate or delete your account on your own terms.

Anonymized Data

We may keep anonymized or aggregated data derived from your usage indefinitely for app improvement, internal research, and analytics. This data cannot be linked back to you and is not subject to deletion requests.

How We Protect Your Data

We take security seriously. Your data is encrypted in transit (TLS) and at rest through Supabase's infrastructure. Private content, such as your progress photos and anything you have set to private, is protected by access rules in our database that are designed to keep other users from reaching it. Access to production systems is limited to authorized personnel, and our team accesses reported or private content only when needed for support, safety, moderation, or legal reasons. We conduct regular security reviews.

No system is perfectly secure. If a data breach affects your personal information, we will notify you promptly, as required by law, and tell you what happened, what data was involved, and what we are doing about it.

We recommend keeping the BiteCount app updated to the latest version. We cannot guarantee the same level of security on outdated versions of the app.

If you suspect unauthorized access to your account, change your password immediately and contact us at privacy@bitecountapp.com.

Direct Messages

Messages will be stored on our servers so we can keep people safe, and our team may review a conversation when it is reported, when our safety systems flag it, or when needed for legal reasons.

Your Rights Under U.S. Privacy Laws

BiteCount respects your privacy rights no matter which state you live in. Many states now have their own consumer privacy laws - for example, California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Oregon (OCPA), and Montana (MCDPA) - and more pass similar laws every year. These are examples, not a checklist: the rights below apply to every BiteCount user in the United States, whether or not your state is named here.

Access Your Data

You can request a copy of all personal data we hold about you, including your food logs, goals, profile data, and social data such as your posts, comments, followers, and recipes. In the app, go to Menu > Data Export, or email privacy@bitecountapp.com.

Correct Your Data

If anything we have on file is wrong, you can update it directly in the app or email privacy@bitecountapp.com. If you are under 18 and need to correct your birthday, contact support@bitecountapp.com.

Control What Others See

You can change who sees each part of your profile and each recipe, block users, or turn off Social Features entirely in settings at any time.

Delete Your Data

You have the right to permanently delete your account and all associated data. In the app, go to Menu > Account & Data Deletion, or email privacy@bitecountapp.com. Deletion is irreversible. Your data is deleted within 30 days, and from our backups within 7 days after that, as described in How Long We Keep Your Data. Deleting your BiteCount account does not cancel your App Store subscription; manage that separately in iPhone Settings > [your name] > Subscriptions.

Opt Out of Marketing

You can unsubscribe from non-essential emails at any time using the unsubscribe link in the email or by emailing privacy@bitecountapp.com. You will still receive transactional emails about your account.

Non-Discrimination

We will never treat you differently for exercising any of your privacy rights, and your access to BiteCount will not be affected.

BiteCount does not sell your personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of. If this ever changes, we will update this policy, notify you in advance, and give you a clear way to opt out before any such sharing begins.

Browser Privacy Signals

Because we do not track you across other websites or sell or share your data for advertising, browser "Do Not Track" and similar signals do not change how we handle your data.

How to Submit a Request

Email privacy@bitecountapp.com or use the in-app controls. We will respond within 30 days, or sooner where the law requires. We may ask you to verify your identity before fulfilling a request. If we deny your request, you may appeal by replying to our email with "Appeal" in the subject line.

Washington and Nevada Residents

If you live in Washington or Nevada, our Consumer Health Data Privacy Policy explains how we handle your consumer health data and your additional rights under those states' laws. It is available in the app and on our website.

Children's Privacy and COPPA Compliance

BiteCount is not designed for or directed at children under 13. We do not knowingly collect personal data from children under 13, and we do not market to children.

If we discover that a user is under 13, we will immediately:

Suspend access to the account.
Delete all personal data associated with the account.
Notify the parent or guardian, if we have their contact information.

If you are a parent or guardian and believe your child has created a BiteCount account or given us personal data, please contact us immediately at privacy@bitecountapp.com. We will investigate and delete the account within 5 business days of verification.

BiteCount does not use any data collected through the app to target advertising at children, and we do not share data relating to minors with third parties for commercial purposes.

Users between 13 and 17 may use BiteCount only if a parent or legal guardian accepts our Terms of Service and acknowledges this Privacy Policy on the minor's behalf. By allowing a minor to use BiteCount, the parent or guardian takes full responsibility for the minor's compliance with these terms, and for any data the minor provides and any subscription actions the minor takes in the app. If you are under 18, please review this policy with your parent or guardian before creating an account.

Users under 18 cannot use Social Features. They do not have a public profile, cannot be found in search or suggestions, cannot follow or be followed, cannot post, comment, or give high fives, cannot create share links or share goal cards, cannot send or receive messages, and cannot save or remix other users' recipes. Their data is never visible to other users. They may view posts that BiteCount itself publishes on Discover.

We determine age using the birthday entered at sign-up and, where available, age information provided by Apple. A birthday cannot be changed in the app if you are under 18; corrections go through our support team. If we believe a user with Social Features is under 18, we will turn off Social Features for that account and hide its content while we review it.

Cookies and Tracking on Our Website

Our website uses cookies for basic functionality, performance analysis, and remembering your preferences. We do not use cookies to serve ads or to track you across other websites.

You can manage cookie preferences through the banner on our website or in your browser settings. Disabling cookies may affect how some parts of the site work.

Changes to This Policy

We will update this policy when our practices change or when the law requires it. When we make material changes, we will notify you in the app or by email at least 14 days before the changes take effect, and we may ask you to accept the updated policy in the app before you can keep using BiteCount. If you accept the updated policy in the BiteCount app before then, it applies to you from the moment you accept. The "Last Revised" date at the top of this document always reflects the most recent update.

If you disagree with a change, you can delete your account before it takes effect.

Contact Us

Have a question or concern, or want to exercise one of your rights? We are here.

Email: privacy@bitecountapp.com

Company: Floyd Technologies LLC dba BiteCount

Website: bitecountapp.com