Privacy Policy

1. Introduction and Scope

This Privacy Policy describes how AgentEats ("we," "us," or "our") collects, uses, and protects your personal information when you use our web app (the "App"). The App is a health tracking service that allows users to sign in with an email code, enter meal descriptions, and receive nutritional analysis. We are committed to protecting your privacy and handling your data responsibly. This policy applies to all users of the App.

By using the App, you consent to the practices described in this policy. If you do not agree, please do not use the App.

2. Information We Collect

We collect the following categories of information:

• Personal Identifiers: Your email address and profile name. New accounts initially use the part of your email before the @ as your name, which you can edit. Existing accounts retain their profile information from earlier sign-ins.
• Health-Related Data: Age, weight, height, sex, meal descriptions (prompts), and derived nutritional data, which you provide directly when using the App's features.
• Usage Data: Automatically collected information such as IP address, device type, and app interactions to improve functionality.

Email sign-in uses temporary codes rather than an account password. We share your email address with Resend to deliver sign-in codes and service messages. We collect account information directly from you or via integrated third-party services.

2.5 Existing Google Sign-In Data

Accounts created using Google, and older versions that still offer Google sign-in, may include the following information received from Google:

• Email Address: We use your Google email address to create and identify your Agent Eats account, send you service-related notifications (such as meal summaries and account updates), and provide customer support when you contact us.
• Profile Name: We use your Google profile name to personalize your in-app experience and greet you when you use the App.
• Profile Picture (optional): Existing account records may include a picture previously provided by Google. Updated versions display initials avatars and do not request a profile picture during email sign-in.

How We Use Google User Data

We use information received from your Google account exclusively to:

• Authenticate your identity and create your Agent Eats account
• Enable you to sign in to our application
• Send you service-related emails about your meals, nutritional summaries, and account notifications
• Provide customer support when you contact us
• Comply with legal obligations

We do NOT use your Google user data for:

• Marketing, promotional purposes, or newsletters (unless you explicitly opt in)
• Advertising of any kind (targeted, personalized, retargeted, or interest-based)
• Selling to data brokers, information resellers, or third parties
• Determining credit-worthiness or lending purposes
• Training AI models on your personal identity (note: we do use AI to analyze your meal descriptions for nutritional analysis, which is a core feature of the App)
• Any purpose unrelated to providing or improving the Agent Eats service

Google User Data Sharing and Transfer

We do NOT sell, rent, trade, or share your Google user data (email address, name, profile picture) with third parties for marketing, advertising, or any other commercial purposes.

We may share your Google user data only in these limited circumstances:

• Service Providers: We share your Google email and name with trusted cloud infrastructure providers (Convex for database hosting, Vercel for web hosting, and Resend for service email delivery) who help us operate the App. These providers are contractually bound to protect your data and are prohibited from using it for any purpose other than providing services to Agent Eats.
• Legal Compliance: We may disclose your information if required by law, such as in response to valid legal requests, court orders, or subpoenas.

Google User Data Security

Your Google user data is protected using industry-standard security measures, including:

• Encryption in transit using TLS/SSL protocols
• Encryption at rest in our database
• Access controls limiting data access to authorized personnel only
• Regular security audits and monitoring

Google User Data Retention and Deletion

We retain your Google-provided email address and name for as long as your Agent Eats account remains active. If you delete your account, we will permanently remove all data received from Google (email, name, profile picture) within 45 days, except where retention is required by law for security or fraud prevention purposes.

To request deletion of your account and all associated Google user data, please email [email protected] from the email address associated with your account. See Section 7 below for detailed deletion instructions.

Limited Use Disclosure

Agent Eats' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only request access to the specific Google user data necessary to provide the Agent Eats service.

3. How We Use Your Information

We use your information solely for the purposes necessary to provide and improve the App.

Google User Data Usage

When you sign in with Google, we use your Google-provided email address and name exclusively for:

• Creating and managing your Agent Eats account
• Authenticating your identity when you sign in
• Sending you service-related notifications about your meals and account
• Providing customer support when you contact us

We do NOT use your Google user data for:

• Marketing or promotional purposes
• Advertising (targeted, personalized, retargeted, or interest-based)
• Selling to third parties or data brokers
• Training AI models on your personal identity
• Any purpose unrelated to providing or improving the Agent Eats service

Other Data Uses

We use your health-related data and usage data to:

• Analyze meal descriptions to provide nutritional values and tracking
• Maintain and enhance App features, such as personalized health insights
• Respond to support requests
• Comply with legal obligations

We do not use your data for marketing, advertising, or any purposes unrelated to the App's functionality. For health-related data, we process it only with your explicit consent through App usage.

4. Sharing and Disclosure of Information

Google User Data Sharing

We do NOT sell, rent, trade, or share your Google user data (email address and name) with third parties for marketing, advertising, or any other commercial purposes.

We may share your Google user data only in these limited circumstances:

• Service Providers: We share your Google email and name with trusted cloud infrastructure providers (Convex for database hosting, Vercel for web hosting, and Resend for service email delivery) who help us operate the App. These providers are contractually bound to protect your data and are prohibited from using it for any purpose other than providing services to Agent Eats.
• Legal Compliance: We may disclose your information if required by law, such as in response to valid legal requests, court orders, or subpoenas.

Your Google user data is NEVER:

• Sold to data brokers or advertisers
• Used for targeted or personalized advertising
• Shared with marketing platforms
• Used to train AI models (except for the meal analysis AI which processes your meal descriptions, not your identity)

Other Data Sharing

For other categories of personal information we collect, we do not sell, rent, or trade your data. We may share it with:

• Service providers (e.g., cloud hosting) who assist in operating the App, bound by confidentiality agreements
• Legal authorities if required by law, such as in response to subpoenas

We do not share your data with OAuth providers (Google, Facebook) beyond what is necessary for the initial authentication process.

In the event of a merger or acquisition, your data may be transferred as part of business assets. We will notify you of any such change.

5. Data Security

We implement reasonable security measures, including encryption, access controls, and regular audits, to protect your data from unauthorized access, alteration, disclosure, or destruction. However, no method is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your information only as long as necessary for the App's functionality or legal requirements. Account data is kept while your account is active. Upon deletion request, we will remove your data within a reasonable timeframe, except where retention is required by law.

7. Data Deletion Rights

We respect your right to have your personal information deleted from our systems. If you would like to permanently delete your account and all associated data, you can request deletion at any time.

What Data Will Be Deleted

When you request account deletion, we will permanently remove all personal information associated with your account, including:

• Profile Data: Your name, email address, age, weight, height, sex, and any other profile information.
• Meal Data: All meal descriptions, nutritional analysis results, and meal history.
• Goal Data: Your health goals, preferences, and tracking information.
• Account Information: All authentication records and account settings.

How to Request Data Deletion

To request deletion of your account and all associated data:

1. Send an email to [email protected] with the subject line "Account Deletion Request."
2. The email must be sent from the same email address that was used to sign up for your account.
3. Include your account details to help us verify your identity and locate your account.

Important: For security purposes, deletion requests will only be processed if they come from the email address associated with your account. This verification step protects your account from unauthorized deletion requests.

Deletion Timeline

Once we receive and verify your deletion request, we will:

• Confirm receipt of your request within 3 business days.
• Complete the deletion of your data within 45 days of your request, in compliance with CCPA and GDPR regulations.
• Send you a confirmation email once the deletion process is complete.

Legal Retention Requirements

In some limited cases, we may be required to retain certain data for legal, regulatory, or security purposes, such as:

• Information necessary to comply with legal obligations or resolve disputes.
• Data required for fraud prevention and security purposes.
• Records stored in backup systems, which are deleted according to our standard backup rotation schedule.

Any data retained for these purposes will be stored securely and will be permanently deleted once the legal retention period expires.

Note: Account deletion is permanent and cannot be undone. Once your data is deleted, you will not be able to recover your account, meal history, or any other information associated with your account.

8. Your Rights and Choices

Depending on your location (e.g., California under CCPA, EU under GDPR), you may have rights including:

• Access: Request a copy of your data.
• Correction: Update inaccurate information.
• Deletion: Request removal of your data.
• Opt-Out: Of any data sharing (though we do not sell data).
• Portability: Receive your data in a transferable format.
• Non-Discrimination: We will not penalize you for exercising rights.

To exercise these rights, contact us at [email protected]. We will respond within the legally required timeframe (e.g., 45 days under CCPA). For health data, you can withdraw consent at any time by deleting your account.

9. International Data Transfers

If you are outside the United States, your data may be transferred to and stored in the US. We use appropriate safeguards, such as standard contractual clauses, to ensure compliance with laws like GDPR.

10. Children's Privacy

The App is not intended for children under 13 (or 16 in some jurisdictions). We do not knowingly collect data from children. If we learn of such collection, we will delete it promptly. Parents can contact us for assistance.

11. Third-Party Services and Authentication

Email Sign-In

We use Convex to manage sign-in codes and sessions, and Resend to deliver codes to your email address. Codes expire after 15 minutes and can be used once. Sign in with the email linked to your existing account to keep your meals and settings.

Earlier Google Sign-In

If an older app version offers Google sign-in, you authenticate directly with Google, and Google shares your email address and profile name with us. Google's privacy practices govern how Google collects and uses your information during the sign-in process. After authentication, Agent Eats handles your data according to this privacy policy.

For information about how Google manages your data during authentication, see the Google Privacy Policy.

Earlier Facebook Sign-In

If an older app version offers Facebook sign-in, you authenticate directly with Facebook, and Facebook shares your email address and profile name with us. Facebook's privacy practices govern how Facebook collects and uses your information during the sign-in process. After authentication, Agent Eats handles your data according to this privacy policy.

For information about how Facebook manages your data during authentication, see the Facebook Privacy Policy.

Important: Once we receive your information from Google or Facebook, we handle it according to this privacy policy, not theirs.

12. Changes to This Policy

We may update this policy to reflect changes in practices or laws. We will notify you via email or in-app notice. Continued use after changes constitutes acceptance.

13. Contact Us

For questions, rights requests, or concerns feel free to Contact Us.