Privacy Policy

Account information: Email address (for sign-up and password reset), name (optional).

Body metrics you provide: Body Stats (height, weight, age, sex, body fat %), goals (cut, maintain, bulk), activity level, body measurements (chest, waist, hips, arms, thighs), weight log history, water intake log, and progress photos (if you upload them).

Meal and food data: Photos of meals you snap with the camera (used for AI analysis only), manually logged food entries, macro and calorie data, and meal history.

Usage data: Which features you use (AI Coach, Snap a Meal, Morning Briefing, and others), daily usage counts (for free-tier limits), and app preferences.

• Information you enter directly in the app
• Photos you take or upload through the app
• Automatic usage tracking inside the app

We do NOT track your location.

We do NOT use third-party advertising trackers.

• Provide app features (track macros, generate briefings, AI coaching)
• Analyze meal photos via AI to identify foods and estimate nutrition
• Personalize recommendations based on your goals
• Calculate daily totals, streaks, and trends
• Maintain your account and authentication
• Improve our service
• Send you transactional emails (email verification, password reset)

We do NOT sell your data. We do NOT use it for advertising.

We use these services to make the app work:

• Google Gemini AI — analyzes meal photos to identify foods and estimate macros. Photos are sent to Google's servers for processing. Subject to Google's privacy policy.
• Anthropic Claude — used as a backup AI when Gemini is unavailable. Subject to Anthropic's privacy policy.
• Supabase — secure database and authentication. Stores your account and app data.
• Resend — sends transactional emails (verification, password reset).
• Sentry — error monitoring for app stability.

These services process your data on our behalf and follow their own privacy commitments. We never share your data for advertising or sell it to third parties.

• Your data is stored securely in Supabase databases
• Photos are stored in Supabase Storage with restricted access
• Data is retained as long as your account is active
• When you delete your account, your data is removed within 30 days

You have the right to:

• Access your data — see everything we have about you
• Correct your data — update inaccurate information
• Delete your data — request account deletion
• Export your data — get a copy in a portable format
• Withdraw consent — stop using the app anytime

For California residents (CCPA):

• You have the right to know what personal information we collect
• You have the right to request deletion
• You have the right to opt out of any sale of personal information (we don't sell)
• You have the right to non-discrimination for exercising these rights

For EU residents (GDPR):

• You have full data access, correction, deletion, and portability rights
• You can lodge a complaint with your local data protection authority
• Our legal basis: contract (providing the service you signed up for) and your consent

To exercise any rights, email hello@lumexforge.com.

• ProteinSnap is intended for users 13 years and older
• We do not knowingly collect data from children under 13
• If you believe a child has signed up, contact us and we will delete the account

• All data encrypted in transit (HTTPS) and at rest
• Strong authentication via Supabase
• Regular security monitoring via Sentry
• We follow industry best practices

But no system is 100% secure. If a breach occurs that affects you, we will notify you promptly.

ProteinSnap is available globally.

By using the app, you understand your data may be processed in the United States (Google, Anthropic), the EU (Supabase), or other countries where our service providers operate.

We apply the same privacy protections regardless of where you are.

• We may update this policy occasionally
• Material changes will be highlighted with a notice in the app
• The "Last updated" date at the top will always show when changes were made

This policy is governed by the laws of the jurisdiction where LumexForge is established. For US residents, your privacy rights under CCPA, COPPA, and other applicable US laws still fully apply. For EU residents, your GDPR rights still apply.

Questions? Reach us at:

Email: hello@lumexforge.com

LumexForge