Privacy Policy

1. Introduction

BiteBrawl ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

2. Information We Collect

Information You Provide

• Account Data: Email address and display name when you create an account.
• Fridge Photos: Images you capture to identify ingredients. These are processed by AI and stored temporarily (30 days) for your scan history.
• Dish Photos: Images you submit during cooking duels, stored for up to 90 days.
• Preferences: Dietary restrictions, skill level, and cuisine preferences you set.

Information Collected Automatically

• Device Information: Device type, operating system, and a randomly generated device identifier for anonymous users.
• Usage Data: Scan counts, recipes generated, duel participation, and feature usage patterns.
• Performance Data: API response times and error logs (no personal data included).

3. How We Use Your Information

• Core Service: Identifying ingredients, generating recipes, and facilitating cooking duels.
• Personalization: Tailoring recipe suggestions to your preferences and past activity.
• Gamification: Tracking your Waste Warrior score, streaks, and leaderboard position.
• Improvement: Analyzing aggregate usage patterns to improve the Service (never individual behavior).
• Communication: Sending duel notifications, streak reminders, and service updates (you can opt out anytime).

4. AI Processing

Your fridge photos are sent to our servers and processed using Anthropic's Claude AI to identify ingredients. We do not use your photos or data to train AI models. Photos are processed in real-time and cached results are stored for 24 hours to reduce redundant processing. Original photos are automatically deleted after 30 days.

5. Data Sharing

We do not sell your personal information. We share data only with:

• Anthropic: Fridge photos for AI ingredient identification (subject to Anthropic's privacy policy).
• Supabase: Database hosting and authentication services.
• Cloudflare: Content delivery, image storage, and API hosting.

All service providers are contractually required to protect your data and use it only for providing their services to us.

6. Data Retention

• Fridge photos: 30 days, then automatically deleted.
• Dish photos: 90 days, then automatically deleted.
• Recipe cache: 24 hours.
• Account data: Until you delete your account.
• Anonymous session data: 30 days of inactivity.

7. Your Rights

You can:

• Access, update, or delete your account and all associated data at any time from the app's Profile settings.
• Export your data by contacting us.
• Opt out of non-essential notifications.
• Use the app anonymously with limited features (5 scans/day, no account required).

8. Security

We use industry-standard security measures including encrypted connections (TLS), row-level security policies on all database tables, and secure token-based authentication. Your API keys and credentials are never exposed to the mobile client.

9. Children's Privacy

BiteBrawl is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected data from a child under 13, we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes through the app or by email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy questions or data requests, contact us at privacy@bitebrawl.com.