This Privacy Policy explains how Velatrix App Studio ("we", "us", or "our") collects, uses, and protects your information when you use the FitScan AI mobile app (the "App"). FitScan AI is a nutrition-tracking app: you create an account, log meals (including by photo), and receive AI-generated estimates and coaching. Please read this policy carefully. If you do not agree with it, please do not use the App.

1. Who We Are

The data controller is Velatrix App Studio. For any privacy request or question, contact us at [email protected].

2. Information We Collect

We collect the following to provide the App. Account and saved tracking data is stored in our secure cloud database:

Account information — your email address, an optional first name, and a securely hashed password. If you sign in with Apple or Google, we receive a unique identifier from that provider (and, where you permit it, your email); we do not receive your third-party password.
Onboarding information — before registration, incomplete onboarding answers may be kept temporarily on your device so you can finish setup. They are not a permanent guest account.
Profile & goals — details you provide such as your goals, target and starting weight, activity/pace, and your calorie, macro (protein, carbs, fat), and water targets.
Food & nutrition logs — meals you save, including name, calories, macros, meal type, dates, saved meals, recipes, and grocery items.
Food photos for analysis — photos you choose to scan are sent to the App for analysis, but uploaded meal photos are not saved to your FitScan food history. Food history may include an approved representative catalog thumbnail for a barcode item where available.
Health-related logs — weight logs and water-intake logs you enter, and streak/activity information.
Apple Health (optional, iOS only) — if you turn on Health sync, the App reads active energy burned from Apple Health on your device to adjust your displayed daily calorie budget. This access is optional and read-only. FitScan does not write weight, nutrition, workouts, or other records to Apple Health, and it does not sync your meal log to Apple Health.
Subscription & purchase data — records needed to manage your subscription, including the transaction and subscription identifiers we receive from Apple In-App Purchase, and your premium status. Payment itself is handled entirely by Apple; we never receive or store your card number.
Usage analytics — first-party events about how features are used (e.g. logging a meal), stored in our own database to improve the App. We do not use third-party advertising or cross-app tracking SDKs.
Crash and diagnostic data — if the App fails, we may send technical crash reports (app version, device model, OS version, and stack traces) to Sentry so we can fix bugs. This does not include your food logs, photos, chat text, or account password. Sentry is configured not to collect default personal identifiers.
Communications & marketing preference — whether you opted in to marketing emails, and the content of any support email you send us.

3. How We Use Your Information

To create and secure your account and authenticate you (including sign-in with Apple/Google);
To provide core features: logging meals, estimating calories/macros from your entries and photos, tracking goals, generating AI coaching, and (if you enable it) adjusting your calorie budget from Apple Health active energy;
To process and manage subscriptions and restore purchases;
To send transactional emails (e.g. password resets) and, only if you opted in, occasional product/marketing emails;
To maintain, secure, debug, and improve the App;
To comply with legal obligations.

4. AI Processing of Your Meals and Photos

To estimate nutrition and generate coaching, the App sends relevant inputs — including food photos you scan and the coaching messages you write — to our AI processing provider (OpenAI) over an encrypted connection. OpenAI processes this data to return a result to the App. Under our API terms, this data is not used to train OpenAI's models. The FitScan API processes uploaded meal photos in memory for the request and does not retain them in your account. AI output is an estimate and may be inaccurate; see the App's Terms of Service.

5. How Your Information Is Shared

We do not sell your personal data. We share it only with service providers who process it on our behalf, under contract, to run the App:

OpenAI — AI analysis of food photos and coaching messages;
Sentry — crash and diagnostic reports as described above;
Apple — to process and verify In-App Purchase subscriptions. If you enable Health sync, Apple Health stays on your device; FitScan reads active energy there and does not send HealthKit samples to our servers as a separate dataset;
Cloud hosting & storage providers — to run our database and, where applicable, store private representative catalog thumbnails (not your uploaded meal photo);
Email provider — to deliver account and support emails.

We may also disclose information if required by law or to protect our rights, users, or the public.

6. International Transfers

Our providers may process data in countries other than yours. Where required (e.g. for transfers out of the EU/EEA or UK), we rely on appropriate safeguards such as Standard Contractual Clauses.

7. Data Retention

We keep your account and nutrition data while your account is active. Uploaded meal photos are processed for the request and are not retained in your FitScan account. Coaching messages and saved tracking data are kept while your account is active. When you delete your account, we delete or anonymise your personal data, except where we must retain limited records (for example, purchase records for tax/legal purposes).

8. Deleting Your Account and Data

You can delete your account and its associated data at any time from Profile → Delete Account inside the App. This removes your profile, logs, and related records from our systems (subject to the limited legal retention noted above). You can also email [email protected] and we will action your request.

9. Your Rights

Depending on where you live (including the EU/EEA and UK under GDPR, and California under CCPA/CPRA), you may have the right to access, correct, delete, export, or restrict processing of your personal data, and to withdraw consent (e.g. to marketing) at any time. To exercise these rights, email [email protected]; we respond within the time required by law.

10. Children's Privacy

FitScan AI is not intended for children under 13 (or the higher minimum age in your country), and we do not knowingly collect their data. Calorie tracking is not appropriate for young children. If you believe a child has provided us data, contact us and we will delete it.

11. Security

Passwords are stored hashed, connections use TLS encryption, and access to our database is restricted. No system is perfectly secure, but we design the App to protect your data and limit what we collect.

12. Changes to This Policy

We may update this policy from time to time. We will post changes here with a new "Last updated" date and, for material changes, notify you in the App.

13. Contact

Questions or requests about your privacy in FitScan AI? Email [email protected].

FitScan AI Privacy Policy