Privacy Policy

CarbSmart AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web application (collectively, the "App").

Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the App.

This policy is designed to comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Apple App Store Review Guidelines, and the Google Play Developer Policy.

Information You Provide Directly:

• Diabetes type (Type 1 or Type 2) — stored locally on your device only

• Daily carb goal and insulin-to-carb ratio — stored locally on your device only

• Target blood sugar range — stored locally on your device only

• Meal photos you choose to scan — transmitted to our AI analysis service (see Section 3) and not stored on our servers

• Meal log entries including food names, carb counts, and timestamps — stored locally on your device only

Information Collected Automatically:

• Anonymous usage analytics (screen views, feature usage frequency) via Umami Analytics — no personally identifiable information is collected

• Device type and operating system version — collected anonymously for crash reporting

• App version — used to ensure compatibility

Information We Do NOT Collect:

• We do not collect your name, email address, or any contact information unless you voluntarily contact us

• We do not collect precise GPS location data

• We do not create user accounts or profiles

• We do not collect payment card information (all payments are processed by Apple or Google)

AI Food Recognition (OpenAI API):

When you use the AI meal scan feature, the photo you take is transmitted securely (via HTTPS) to the OpenAI API for food recognition and nutritional analysis. The image is processed in real time and is not stored by OpenAI beyond the duration of the API request, in accordance with OpenAI's data usage policies for API customers. We do not store your meal photos on our servers.

Open Food Facts:

When you use the barcode scanner or food search features, product queries are sent to the Open Food Facts public database (openfoodfacts.org). No personally identifiable information is transmitted. Open Food Facts is an open-source, non-profit food database.

RevenueCat (Subscription Management):

If you purchase a premium subscription, RevenueCat processes your purchase receipt to verify your subscription status. RevenueCat may collect a device identifier and purchase receipt data. RevenueCat does not receive your health data. See RevenueCat's Privacy Policy at https://www.revenuecat.com/privacy.

Umami Analytics:

We use Umami, a privacy-focused, GDPR-compliant analytics platform, to understand how the App is used. Umami does not use cookies, does not track users across websites, and does not collect personally identifiable information.

The vast majority of your data — including your diabetes settings, meal logs, and carb history — is stored exclusively on your device using browser localStorage (web) or native device storage (iOS/Android). This data never leaves your device and is not accessible to us.

When you uninstall the App, all locally stored data is permanently deleted from your device.

We do not operate a cloud database that stores your personal health information.

We use the information described above solely to:

• Provide the core carb tracking and meal analysis features of the App

• Verify and manage your premium subscription status

• Improve the App's performance and user experience through anonymous analytics

• Respond to your support requests if you contact us

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

CarbSmart AI is a dietary tracking and wellness tool. It is NOT a medical device and is NOT intended to diagnose, treat, cure, or prevent any disease or medical condition.

The carbohydrate estimates, insulin suggestions, and nutritional information provided by the App are approximations for informational purposes only. Always consult your healthcare provider, endocrinologist, or registered dietitian before making changes to your diabetes management plan.

On iOS, the App does not integrate with Apple Health (HealthKit) unless explicitly enabled by you in a future update. On Android, the App does not integrate with Google Fit or Health Connect unless explicitly enabled.

The App is not directed to children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children under these ages.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] and we will take steps to delete such information.

For all users:

• You can delete all locally stored App data at any time by clearing the App's data in your device settings or by uninstalling the App.

For EU/EEA residents (GDPR):

• Right of access — you may request a copy of any personal data we hold about you

• Right to erasure — you may request deletion of your personal data

• Right to data portability — you may request your data in a machine-readable format

• Right to object — you may object to processing of your personal data

• Right to lodge a complaint with your local data protection authority

For California residents (CCPA):

• Right to know what personal information is collected, used, shared, or sold

• Right to delete personal information

• Right to opt-out of the sale of personal information (we do not sell personal information)

• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at [email protected].

Premium subscriptions are processed entirely by Apple (App Store) or Google (Google Play). We do not receive or store your payment card information.

Subscriptions automatically renew unless cancelled at least 24 hours before the end of the current billing period. You can manage or cancel your subscription in your device's subscription settings:

• iOS: Settings → [Your Name] → Subscriptions

• Android: Google Play Store → Profile → Payments & subscriptions → Subscriptions

Refund requests must be submitted through Apple or Google directly.

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last Updated" date at the top of this policy and, where required by law, by providing a more prominent notice within the App.

Your continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]

Website: https://carbsmart-ihateke2.manus.space/privacy

We will respond to all requests within 30 days.