Privacy Policy For Keto AI – Carb & Diet Tracker

App: Keto AI – Carb & Diet Tracker
Developer: Super Mobi Tools
Effective Date: 01 Jan 2025
Contact: support@simplifylifeapps.com

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.


Interpretation and Definitions

Interpretation

The words whose initial letter is capitalized have meanings defined under the following conditions. The following definitions have the same meaning whether they appear in singular or plural.

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for You to access our Service or parts of our Service.
  • Affiliate means an entity that controls, is controlled by or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
  • Application refers to the mobile application Keto AI – Carb & Diet Tracker and any related software or services provided by the Company.
  • Company (referred to as either "the Company", "We", "Us" or "Our") refers to Super Mobi Tools, Gujarat, India.
  • Country refers to India.
  • Data Controller means the natural or legal person who determines the purposes and means of the processing of Personal Data. For this Service, the Company is the Data Controller.
  • Data Processor means any natural or legal person who processes data on behalf of the Data Controller.
  • Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
  • EEA means the European Economic Area.
  • GDPR means the General Data Protection Regulation (EU) 2016/679.
  • Personal Data means any information that relates to an identified or identifiable individual.
  • Service refers to the Application and any online services accessible from the Application.
  • Service Provider means any natural or legal person who processes Personal Data on behalf of the Company.
  • Usage Data means data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
  • You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personal Data may include, but is not limited to:

  • Contact and account information such as name, email address, profile photo, username and password.
  • Profile and preference data such as dietary preferences, goals, target macronutrients, and display preferences.
  • Health and fitness entries such as food logs, meal logs, weight entries, body measurements and related notes that You provide.
  • AI input data such as images of meals, text descriptions, and voice notes submitted for meal scanning or recognition.
  • Support communications including messages, emails and attachments You send to support.
  • Payment metadata such as subscription status, receipts and entitlement records provided by Google Play and RevenueCat.

Usage Data

Usage Data is collected automatically when using the Service. Usage Data may include:

  • Device information such as model, operating system, unique device identifiers and advertising identifiers.
  • Connection information such as IP address, timezone and locale.
  • App usage information such as pages or screens visited, session duration, feature use and events.
  • Diagnostic and crash data, error logs and performance metrics.

Location Data

We may collect approximate location derived from IP address. Precise device location is collected only when You grant the App explicit permission for location access and enable features that require precise location.

Exercise Data

We may process step counts and exercise data to improve user experience and to help users reach fitness goals. Exercise data is processed on-device and is not stored on Our servers unless You explicitly enable cloud sync for that data.


Use of Your Personal Data

The Company uses Personal Data for the following purposes:

  • To provide and maintain the Service including account creation, authentication, meal logging, weight tracking, history and AI meal scanning.
  • To manage Your Account including registration, profile management and subscription entitlements.
  • For the performance of a contract to deliver features and services You request including purchases, subscriptions and paid features.
  • To communicate with You by email, push notifications, SMS or other electronic means regarding account activity, security alerts, updates and service messages.
  • To provide news and offers about similar goods, services and events if You opt in to receive such communications.
  • To manage Your requests such as support inquiries and bug reports.
  • For product improvement and analytics including usage analysis, error diagnosis and feature development.
  • To detect, prevent and investigate fraud or security issues and to protect rights, property or safety.
  • For business transfers such as mergers, reorganizations or asset sales.
  • For other legitimate business purposes including internal research, marketing analysis and service optimization.

Legal Bases for Processing (GDPR)

Where applicable under data protection law, including GDPR for users in the EEA and UK, We rely on one or more of the following legal bases to process Personal Data:

  • Consent (GDPR Article 6(1)(a)) when You have given clear permission for a specific purpose such as camera access, location access, AI meal scanning, and marketing communications.
  • Contractual necessity (GDPR Article 6(1)(b)) when processing is required to perform Our contract with You and provide the Service.
  • Legitimate interests (GDPR Article 6(1)(f)) for analytics, product improvement, fraud prevention and system security, provided those interests are not overridden by Your rights.
  • Legal obligation (GDPR Article 6(1)(c)) where processing is required to comply with laws, regulations or court orders.

For processing special categories of personal data (such as health data), We rely on:

  • Explicit consent (GDPR Article 9(2)(a)) when You provide health-related information such as dietary goals, weight logs and body measurements.

You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.


Third Party Service Providers

We engage third party Service Providers to facilitate the Service, provide the Service on Our behalf, perform Service-related services or assist Us in analyzing how Our Service is used. Service Providers have access to Personal Data needed to perform their functions and are contractually required to process Personal Data only on Our instructions and to implement appropriate technical and organizational measures.

The following third parties may process Your Personal Data:

Service Purpose Data Processed Privacy Policy
Google Play Services App platform services, sign-in and distribution Account data, device info https://policies.google.com/privacy
AdMob Advertising and ad measurement Device identifiers, usage data https://support.google.com/admob/answer/6128543?hl=en
Facebook Social features and analytics Account data, usage events https://www.facebook.com/about/privacy/update/printable
Google Analytics for Firebase Usage analytics and events Device info, app events https://firebase.google.com/support/privacy
Firebase Crashlytics Crash reporting and diagnostics Crash logs, device data https://firebase.google.com/support/privacy/
OneSignal Push notifications Device tokens, user IDs https://onesignal.com/privacy_policy
RevenueCat Subscription management and receipts Purchase data, user IDs https://www.revenuecat.com/privacy/
Superwall In-app paywalls and monetization Purchase events, user IDs https://superwall.com/legal/privacy-policy
Mixpanel Product analytics and funnels User behavior, events https://mixpanel.com/legal/privacy-policy/
Plunk Performance monitoring and insights Performance metrics https://www.useplunk.com/privacy
Fatsecret Nutrition database and food entries Food search queries https://mobile.fatsecret.com/Default.aspx?pa=priv&l=en
OpenFoodFacts Food product data and barcodes Product lookups https://world.openfoodfacts.org/privacy
OpenAI AI processing for meal scanning and text generation Meal images, text inputs https://openai.com/en-GB/policies/row-privacy-policy/

International Data Transfers: Some Service Providers are located outside the EEA. When We transfer Personal Data outside the EEA, We ensure appropriate safeguards are in place such as Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other lawful transfer mechanisms under GDPR Article 46.


When We May Disclose Your Personal Data

The Company may disclose User Provided and Automatically Collected Information:

  • As required by law such as to comply with a subpoena or similar legal process;
  • When We believe in good faith that disclosure is necessary to protect Our rights, to protect Your safety or the safety of others, to investigate fraud, or to respond to a government request;
  • With Service Providers and partners who work on Our behalf, do not have an independent use of the information We disclose to them, and have agreed to adhere to the rules set forth in this Privacy Policy;
  • In connection with business transactions such as a merger, acquisition, sale of assets or financing; Users will be notified and data will remain subject to contractual confidentiality protections;
  • To enforce Our terms and policies and to protect the security or integrity of the Service.

We do not sell Your Personal Data to third parties.


Retention of Your Personal Data

The Company retains Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. Retention periods include the following:

  • Account and profile data: retained while Your Account exists and for up to 30 days after account deletion for legal compliance and fraud prevention.
  • Health and fitness logs: retained until You delete them unless longer retention is required by law.
  • Usage Data and diagnostics: retained for a limited period for debugging and analytics, typically up to 90 days unless extended for security investigations.
  • Payment and billing records: retained for accounting and legal obligations, commonly up to seven years.
  • Marketing consent records: retained for as long as necessary to comply with legal obligations.
  • Aggregated or de-identified data: may be retained indefinitely as it can no longer identify You.

We delete or anonymize Personal Data when no longer needed, subject to legal and operational requirements.


Your Data Protection Rights

Depending on Your location, You may have the following rights regarding Your Personal Data:

Rights Under GDPR (EEA and UK Users)

  • Right of access (Article 15): You have the right to request copies of Your Personal Data.
  • Right to rectification (Article 16): You have the right to request correction of inaccurate or incomplete Personal Data.
  • Right to erasure (Article 17): You have the right to request deletion of Your Personal Data under certain conditions.
  • Right to restrict processing (Article 18): You have the right to request restriction of processing of Your Personal Data under certain conditions.
  • Right to data portability (Article 20): You have the right to request transfer of Your data to another organization or directly to You in a structured, commonly used, machine-readable format.
  • Right to object (Article 21): You have the right to object to Our processing of Your Personal Data under certain conditions, including for direct marketing purposes.
  • Right to withdraw consent (Article 7): Where We rely on consent, You have the right to withdraw consent at any time.
  • Right not to be subject to automated decision-making (Article 22): You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects You.

Rights Under California Privacy Laws (CCPA/CPRA)

California residents have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to know what Personal Data is collected, used, shared or sold
  • Right to delete Personal Data
  • Right to opt-out of the sale or sharing of Personal Data
  • Right to correct inaccurate Personal Data
  • Right to limit use and disclosure of sensitive Personal Data
  • Right to non-discrimination for exercising Your rights

Note: We do not sell Personal Data as defined under CCPA.


International Data Transfers

Your information, including Personal Data, is processed at the Company's operating offices in India and at locations where Our Service Providers are located. This means Your information may be transferred to and maintained on computers located outside Your state, province, country or other governmental jurisdiction where the data protection laws may differ from those in Your jurisdiction.

For users in the EEA, We ensure that international transfers of Personal Data are protected by appropriate safeguards including:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions by the European Commission
  • Binding Corporate Rules where applicable
  • Other lawful transfer mechanisms under GDPR Article 46

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.


Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data We have collected about You. Deletion options include:

  • In-App Deletion: Delete individual entries such as food logs, meal scans and weight logs from within the Application.
  • Account Deletion: Delete Your Account through the Account settings in the Application or by visiting https://ketocarbtrackerapp.blogspot.com/p/delete-account.html
  • Email Request: Submit a deletion request by contacting Us at support@simplifylifeapps.com

Deletion requests are processed within 30 days according to applicable law. Certain information may be retained to comply with legal obligations or for legitimate business purposes such as fraud prevention, accounting requirements, or to resolve disputes.


Disclosure for Law Enforcement and Other Legal Requirements

We may disclose Personal Data to public authorities or other third parties if We are required to do so by law or in good faith believe disclosure is necessary to:

  • Comply with a legal obligation or court order;
  • Protect and defend the rights or property of the Company;
  • Prevent or investigate possible wrongdoing related to the Service;
  • Protect the personal safety of Users of the Service or the public;
  • Protect against legal liability.

Security of Your Personal Data

The security of Your Personal Data is important to Us. We implement commercially reasonable administrative, technical and organizational measures to protect Personal Data from unauthorized access, disclosure, alteration and destruction. Those measures include:

  • Role-based access controls and authentication
  • Encryption in transit using HTTPS/TLS
  • Encryption at rest for sensitive data
  • Secure vendor contracts with Data Processing Agreements
  • Regular security monitoring and auditing
  • Employee training on data protection
  • Incident response procedures

No method of transmission over the Internet or electronic storage is completely secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Data Breach Notification: If We become aware of a data breach that is likely to result in a risk to Your rights and freedoms, We will notify You and the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach, as required by GDPR Article 33 and Article 34.


Children's Privacy

The Service is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect or retain Personal Data from children under these ages. If You become aware that Your child has provided Us with Personal Data without parental consent, please contact Us and We will take steps to delete the information.

If We must rely on consent to process Personal Data and Your country requires parental consent for children under a specified age, We will obtain verifiable parental consent where required before collecting Personal Data from children.


Automated Decision-Making and Profiling

We may use automated processing and profiling to:

  • Provide personalized meal recommendations based on Your dietary preferences and goals
  • Suggest foods based on Your eating patterns
  • Analyze nutrition data to help You track progress

You have the right to object to automated decision-making and profiling under GDPR Article 22. These automated processes do not produce legal effects or similarly significantly affect You. You may contact Us to request human intervention or to express Your point of view.


Marketing Communications

With Your consent, We may send You marketing communications about Our products, services, and promotions. You have the right to opt-out of marketing communications at any time by:

  • Clicking the "unsubscribe" link in marketing emails
  • Adjusting notification settings in the Application
  • Contacting Us at support@simplifylifeapps.com

Even if You opt-out of marketing communications, We may still send You non-promotional communications related to Your Account and use of the Service.


Links to Other Websites

Our Service may contain links to other websites or services that are not operated by Us. If You click a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.


Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify You of material changes by:

  • Posting the new Privacy Policy in the Application and on Our website
  • Updating the Effective Date
  • Sending an email notification for significant changes (where We have Your email address)
  • Displaying an in-app notification

Your continued use of the Service after changes indicates Your acceptance of the updated Privacy Policy. For material changes that require Your consent under applicable law, We will obtain Your consent before the changes take effect.

We encourage You to review this Privacy Policy periodically for any changes.


Contact Us

For questions about this Privacy Policy or to exercise Your rights, contact:

Super Mobi Tools
App: Keto AI – Carb & Diet Tracker
Email: support@simplifylifeapps.com
Country: India


Acknowledgement

By using the Service You acknowledge that You have read and understood this Privacy Policy and consent to the collection, use and transfer of Your Personal Data as described herein.

Last updated: 1st January 2025