Privacy Notice

Cacao Mobile SP Z O O is the data controller responsible for your personal data. For privacy-related inquiries, contact us at: help@cacaomobile.net.

We may collect the following categories of personal data:

• Account data: name, email address, username, and password (hashed).
• Payment data: billing address and transaction records. Full card details are processed by our payment provider (Stripe) and not stored by us.
• Usage data: pages visited, features used, session duration, device type, browser, and IP address.
• Health and nutrition data: meal logs, calorie and macro targets, weight entries, food photos, and AI scan results you submit through the Service.
• Communications: messages you send to our support team.

We use your personal data to:

• Provide, operate, and improve the Service.
• Process payments and manage subscriptions.
• Verify eligibility and enforce our Terms of Service.
• Communicate with you about your account, updates, and support requests.
• Detect and prevent fraud, abuse, and violations of our Terms of Service.
• Comply with applicable legal obligations.

If you are located in the EU/EEA, we process your data on the following legal bases:

• Contract performance: processing necessary to provide the Service.
• Legitimate interests: fraud prevention, security, and service improvement.
• Legal obligation: compliance with applicable laws.
• Consent: where you have given explicit consent (e.g., marketing emails).

We do not sell your personal data. We may share it with:

• Service providers: payment processors (Stripe), hosting providers, analytics, and customer support tools, under strict data processing agreements.
• Law enforcement: when required by law or to protect our legal rights.
• Business transfers: in the event of a merger, acquisition, or asset sale, subject to continued privacy protections.

We retain personal data for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data for up to 90 days for backup and legal compliance purposes, after which it is permanently deleted.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ('right to be forgotten').
• Object to or restrict certain processing activities.
• Request data portability.
• Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, contact us at help@cacaomobile.net. We will respond within 10 days.

We use cookies and similar tracking technologies to operate and improve the Service, remember your preferences, and analyze usage. You can control cookies through your browser settings.

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), hashed password storage, and access controls. No method of transmission is 100% secure; we cannot guarantee absolute security.

Your data may be processed outside your country of residence. Where we transfer data internationally, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses for EU data).

We may update this Privacy Notice periodically. We will notify you of material changes by email or via a prominent notice on the Service. Continued use after changes constitutes acceptance.