Privacy Policy Addendum

Effective Date: November 2025
Last Updated: November 2025

This Addendum supplements PeakWatch's main Privacy Policy by describing how we collect, use, store, and allow deletion of data specifically related to the Food Log, AI Food Recognition, and Custom Recipes & Food Items features.

1. Data Collected

When you use the Food Log or Custom Recipe features, PeakWatch may collect and process:

• Food Images: Photos you upload for recognition and analysis.
• Meal Descriptions / Text Input: Text you enter describing meals or ingredients.
• Derived Data: AI-generated nutrition estimates (calories, macronutrients, food categories).
• User-Generated Content: Custom recipes and food items you create (names, ingredients, serving sizes, notes).
• Metadata: Timestamps, device/app version, and other technical metadata necessary to operate the service.

2. Purpose of Processing

We process the above data to:

• Provide AI-based nutrition analysis and return estimated nutritional values.
• Save and display your food log history and custom recipes for future use.
• Calculate energy balance, macro trends, and other user-facing analytics.
• Improve model accuracy and service reliability using aggregated, anonymized data.

We do not sell your food log, recipe data, or derived nutrition data to third parties. We do not use food log or recipe data for advertising or profiling.

3. Retention Policies

• Food Images: Temporarily stored and deleted automatically after AI processing (typically within 24 hours).
• Derived Nutrition Data: Stored in your account until you delete the associated log or delete your account.
• Custom Recipes & Food Items: Persist on PeakWatch's servers for reuse until you manually delete them or delete your account.
• Aggregated / Anonymized Data: May be retained long-term for analytics and product improvement without personal identifiers.

4. Security Measures

• Transport-level encryption (HTTPS) for all uploads and API calls.
• Encryption at rest for stored content.
• Role-based access controls; only authorized systems and personnel may process data.
• Third-party service providers must meet contractual security obligations.

5. Third-Party Processors

PeakWatch may use third-party cloud and AI providers to perform recognition and analysis. These processors:

• Are bound by contract to process data only for PeakWatch's purposes.
• Must provide adequate technical and organizational measures to protect data.

6. User Rights and Controls

You have the right to:

• Access: Request a copy of your food log and custom recipes.
• Export: Request an export of your food log and recipes in a common machine-readable format.
• Delete: Delete individual entries or request complete deletion of your account and all associated data via Settings → Privacy → Delete My Data or by contacting privacy@peakwatch.app.
• Rectify: Edit or correct user-generated recipes and entries.
• Restrict Processing / Object: Where applicable under local law, you may request restriction or object to certain processing activities.

Compliance requests will be handled in accordance with applicable law. We may require identity verification before processing certain requests.

7. Data Transfers & Storage Locations

• Data may be stored in region-specific cloud infrastructure. Where data is transferred across borders, PeakWatch will rely on legal transfer mechanisms and safeguards required by applicable data protection laws.

8. Children

• The Food Log and Custom Recipes features are intended for users who meet the minimum age required by local law. If you believe your child has created an account in violation of our policy, contact privacy@peakwatch.app to request deletion.

9. Changes to This Addendum

• We may update this Addendum to reflect changes in processing or features. The latest version will be posted in the app and at the official PeakWatch legal page.

10. Contact & Complaints

• For privacy requests, questions, or complaints contact: privacy@peakwatch.app
• If you are located in a jurisdiction with a supervisory authority (e.g., an EU Data Protection Authority), you may also lodge a complaint with the relevant regulator.

Disclosure Table (short form for App Store / privacy disclosures)