ERASTHETIC PRIVACY NOTICE

1. Summary

2. Information we collect

2.1 Account information

• Email address and a password. The password is stored only as a salted hash by our authentication provider — we never see or store it in readable form.
• If you sign in with Google, we receive your Google account identifier, name and email address. We never receive your Google password.

2.2 Profile and onboarding answers

Name, sex, date of birth, height, current weight, target weight, activity level, weight goal, chosen pace, meal schedule and reminder preference, measurement units, how you heard about us, and prior calorie-tracking experience. These are what your calorie and macronutrient targets are calculated from.

2.3 Nutrition logs

Foods and quantities you record, the meal and time they belong to, water intake, barcode scans, and food searches. Food searches may query the public Open Food Facts database.

2.4 Body and progress data

Weight history, body-fat percentage, daily check-ins, and progress photos you choose to upload.

2.5 Photographs

• Meal photos submitted for AI analysis. These are transmitted for analysis and are not stored on our servers — see §4.
• Progress photos, held in a private storage bucket readable only by your own account.
• An optional avatar image for your social profile.

Camera and photo-library access are requested only when you use a feature that needs them, and you may decline.

2.6 Health and fitness integrations (optional)

If you connect Apple Health or Google Fit, we read activity data such as steps and active energy burned in order to show your energy balance. This is read-only, requires your explicit permission on the device, and can be revoked at any time in your device settings.

2.7 Social features (optional)

If you use friends or groups: your display name and social profile, friend connections, group memberships, messages you post in groups, and any meals or workout routines you choose to share. Anything you share or post is visible to the people you share it with — treat group messages as you would any other group chat.

2.8 Subscription information

Subscriptions are purchased through the Apple App Store or Google Play. We never receive your card details. We store only your entitlement status — whether a subscription is active, when it expires, and how many free AI scans you have used.

2.9 Technical information

App version, operating system, device type, crash and diagnostic information, and server logs that may include your IP address.

2.10 Moderation

If you report content, we store the report and the reported item so that we can act on it.

3. How we use your information

• To provide the App: calculating your targets, storing your logs, showing your progress.
• To operate the features you choose to use, including social features.
• To provide AI meal analysis (§4).
• To manage subscriptions and entitlements.
• To keep the service secure, prevent abuse, and moderate reported content.
• To diagnose crashes and improve reliability.
• To send notifications you have enabled, such as meal reminders. You control these in your device settings.

We do not use your health or fitness data for advertising.

4. The website waitlist

If you give us your email address on erasthetic.com, we store that address, which form you used, and the date, so that we can tell you when Erasthetic launches. That is the only thing it is used for; we do not add it to any other list, and we do not share it. Ask us at support@erasthetic.com and we will remove it.

The form is protected by Cloudflare Turnstile, which checks that a person rather than a bot is submitting it. Turnstile processes your IP address and limited browser signals for that check alone; it does not track you across sites and does not use the data for advertising.

You do not need an account to join the waitlist, and joining does not create one.

5. AI meal photo analysis

When you photograph a meal, the image is sent to Google's Gemini API so that the model can estimate the food and its nutritional content. The estimate is returned to the App and saved to your log; we do not retain the image after analysis. Google processes the image as our service provider under Google's applicable API terms.

Estimates are approximate. They are a convenience, not a measurement, and should not be relied on where accuracy matters medically.

6. Who we share information with

We do not sell your data. We share it only with providers who process it on our behalf:

We may also disclose information where required by law, to enforce our Terms, or to protect the rights and safety of our users.

7. Legal bases (EEA/UK users)

• Contract — providing the App you asked for.
• Consent — health integrations, camera and photo access, notifications, and the processing of health data as a special category under Article 9(2)(a). You may withdraw consent at any time.
• Legitimate interests — security, abuse prevention, reliability.
• Legal obligation — where law requires retention or disclosure.

8. International transfers

We are based in the United States, and our providers may process data in the United States and elsewhere. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

9. Security

Access is restricted at the database level so that records are readable only by the account that owns them, except where you deliberately share them through social features. Progress photos are held in a private bucket. Traffic is encrypted in transit. No system is perfectly secure, and we cannot guarantee absolute security.

10. Retention and deletion

We keep your data for as long as your account exists.

A waitlist address is kept until the launch it was given for, or until you ask us to remove it — whichever comes first.

You may delete your account and its associated data at any time from within the App, or by writing to support@erasthetic.com from your registered email address. Deletion is actioned within 30 days, except where we must retain records to comply with law or to resolve a dispute.

Two things survive deletion of your account, and you should know about them: content you posted into a group may remain visible to that group, and subscription records held by Apple, Google or RevenueCat are governed by their own retention policies.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete, port or restrict processing of your data, to object to processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right to know and to delete, and the right not to be discriminated against for exercising them. We do not sell personal information, and we do not share it for cross-context behavioural advertising.

To exercise any of these, write to support@erasthetic.com. EEA/UK users may also complain to their local supervisory authority.

12. Children

The App is not directed to children under 18, and we do not knowingly collect their data. If you believe a child has provided us with data, contact support@erasthetic.com and we will delete it.

13. Changes

We may update this policy. Material changes will be notified in the App or by email, and the "Last updated" date above will change. Continuing to use the App after a change means you accept the updated policy.

14. Contact

DevKonnect IT Consulting LLC
426 Puma Loop
Groveland, FL 34736-3506
support@erasthetic.com