Legal

Privacy policy

Last updated: August 2026

What we collect

This site no longer collects any personal data — the waitlist signup form was retired once the app went live on Google Play. If you joined the earlier waitlist, we stored your email address together with basic attribution data (UTM parameters, referring page, browser user-agent, page variant). We do not collect names, payment details, or precise location.

How we use it

Your email is used solely to send launch updates and early-backer perks. Attribution data is used in aggregate to understand which marketing channels work. We do not sell your data, share it with advertisers, or send unrelated marketing.

Meal data & AI

ProteinPilot uses Google's Gemini AI for meal analysis and end-of-day Rescue suggestions. A scan sends your meal photo through our Supabase Edge Function to estimate protein and calories; Rescue sends your protein goal and up to 20 recent dish names to generate relevant suggestions. ProteinPilot does not retain meal photos after analysis, sell this data, or use it for advertising. The current unpaid Gemini service may use submitted content and responses to improve Google products, and human reviewers may process them, under the Gemini API Terms and Google Privacy Policy. The app asks for explicit consent before either AI feature can send data, and you can withdraw it anytime in Settings.

Analytics, diagnostics & abuse prevention

This site uses Cloudflare Web Analytics, a privacy-first, cookie-free tool that does not track you across sites. The app uses Firebase Analytics (pseudonymous usage events) and Sentry (crash and error diagnostics) to improve reliability and the product. These collect usage events, an app-instance identifier, and crash logs — not your meal photo, dish name, protein amount, bodyweight, target, profile values, or contact details. They are never used for advertising. To rate-limit abusive AI requests, our backend converts the connecting IP address into a salted one-way hash; the raw address is not stored and stale hashes older than seven days are purged as the limiter receives traffic.

Storage & retention

Your profile and meal history stay in app-private storage on your device and are excluded from Android backup. Raw Firebase Analytics events exported to our BigQuery project are automatically deleted after 60 days. App-instance identifiers are not joined to names, contact details, or participant interview notes. Earlier waitlist data is stored with Supabase (hosted Postgres) until the waitlist program ends or you ask us to remove it, whichever comes first.

Your rights

Want your email removed or a copy of what we hold? Write to [email protected] and we'll handle it within 7 days. Every email we send includes an unsubscribe link.

Not medical advice

ProteinPilot provides AI-generated nutrition estimates for informational purposes only. It is not a medical device and does not provide medical or dietary advice.