Privacy Policy

1. Information We Collect

Information You Provide

When you use rewlr, you may provide us with:

• Account Information: Email address, name, and authentication credentials (or SSO provider ID)
• Profile Information: Age, height, weight, biological sex, activity level, and dietary preferences
• Meal & Recipe Data: Recipes you create, meal plans, and food intake logs
• Health Data: Nutrition goals, macro targets, and optionally weight tracking history
• Payment Information: Processed by our third-party payment processor; we don't store credit card numbers

Information Collected Automatically

• Usage Data: Features you use, pages visited, time spent
• Device Information: Browser type, operating system, device type
• Log Data: IP address, access times, error logs

2. How We Use Your Information

We use your information to:

• Provide and maintain the rewlr service
• Calculate your personalized nutrition targets (TDEE, macros)
• Track your meal planning and food intake
• Generate grocery lists based on your meal plans
• Enable household sharing features (if you choose to use them)
• Process payments and manage subscriptions
• Send service-related communications (receipts, important updates)
• Improve our product based on aggregated, anonymized usage patterns
• Respond to support requests

3. Data Sharing & Disclosure

We share your information only in these limited circumstances:

Service Providers

We work with trusted third parties who help us operate rewlr:

• Payment Processing: Stripe/Braintree (for subscription billing)
• Authentication: Google (if you use SSO)
• Infrastructure: Cloud hosting providers
• Analytics: Anonymized usage data only

Dietitian Sharing (Optional)

If you choose to share your data with a dietitian or nutritionist, you explicitly grant them access to view your meal plans, intake logs, and progress. You can revoke this access anytime.

Household Members

If you use household sharing features, designated household members can view shared meal plans and grocery lists. Individual tracking data remains private unless explicitly shared.

Legal Requirements

We may disclose information if required by law, court order, or to protect our rights and safety.

4. Data Retention

We retain your data for as long as your account is active. When you delete your account:

• Personal data is deleted within 30 days
• Backups are purged within 90 days
• Anonymized analytics may be retained indefinitely
• Payment records are retained for 7 years (legal requirement)

5. Your Rights & Choices

You have control over your data:

• Access: View all data we have about you in Settings
• Export: Download your complete data (recipes, meal plans, logs) anytime
• Correction: Update your information in your profile
• Deletion: Delete your account and all associated data
• Portability: Export your data in standard formats (JSON, CSV)

For EU/UK residents (GDPR), California residents (CCPA), and other applicable jurisdictions, you have additional rights including the right to object to processing and lodge complaints with supervisory authorities.

6. Security

We take security seriously:

• All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Passwords are hashed using bcrypt (we never store plain text passwords)
• SSO authentication is delegated to trusted identity providers
• Regular security audits and penetration testing
• Access controls and audit logging for internal systems

While we implement industry-standard security measures, no system is 100% secure. We encourage you to use strong, unique passwords and enable two-factor authentication where available.

7. Children's Privacy

rewlr is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date
• Sending an email notification for significant changes

Your continued use of rewlr after changes constitutes acceptance of the updated policy.