Privacy Policy

We collect the information you give us directly:

We use your information exclusively to:

• Personalize recommendations: analyze your health conditions and lab results to suggest foods that suit your specific needs
• Track nutrition: help you monitor your dietary intake and your progress
• Improve our services: aggregate anonymized data to enhance our food database and our recommendation algorithms
• Communicate with you: send essential account notifications and optional health reminders
• Provide customer support: answer your questions and resolve issues

We apply comprehensive security measures:

• Encryption in transit: all data is transmitted over TLS 1.3
• Password storage: we hold a bcrypt hash, never the password itself
• Secure authentication: short-lived JWT tokens with a secure refresh mechanism
• Access controls: strict role-based access to user data
• Access trails: sign-ins, password changes and administrator actions are recorded and kept for 90 days
• Biometric protection: support for Face ID and Touch ID on mobile devices

We share your information only in these limited circumstances:

• With your explicit consent: when you authorize sharing with healthcare providers
• Service providers: trusted partners who help us operate the service (cloud hosting, for example), bound by strict confidentiality agreements
• Legal requirements: when required by law, subpoena, or court order
• Safety: to protect the rights, safety, and property of our users or the public

We may send you:

• Essential notifications: account security alerts, password resets, and important updates
• Optional notifications: meal reminders, health tips, and achievement celebrations (these can be turned off)
• Marketing (opt-in only): new features and product announcements

You can change your notification preferences in the app settings at any time.

You keep full control over your data:

• Access: view all the personal data we hold about you
• Correction: update inaccurate or incomplete data
• Deletion: request complete deletion of your account and your data
• Export: download your data in a portable format (JSON or CSV)
• Opt out: unsubscribe from marketing communications
• Restrict processing: limit how we use your data

To exercise these rights, open the Privacy section of your account settings, or email us at privacy@clapdiet.com.

7. Data Retention

We keep your data only as long as it is needed:

• Active account: data is kept while your account is active
• After a deletion request: data is permanently erased within 30 days
• Backups: removed from backup systems within 90 days
• Anonymized data: aggregated, de-identified data may be kept for research

8. Children’s Privacy

ClapDiet is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will tell you about any material change by posting the new policy on this page and updating the date above. We encourage you to review it periodically.

10. Contact Us

If you have any questions about this Privacy Policy or about how we handle data, please contact us: