Privacy Policy

Welcome to Niblo ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you understand how we collect, use, and safeguard your personal information. This Privacy Policy explains our practices regarding the Niblo mobile application ("App").

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, name, and password (encrypted)
• Health & Nutrition Data: Meal logs, food descriptions, nutritional information (calories, protein, carbs, fat), water intake, and health goals
• Photos: Meal photos you choose to upload for AI analysis
• Chat Messages: Conversations with our AI assistant about your nutrition
• Preferences: Dietary preferences, allergies, notification settings, and timezone

1.2 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifier (for security and multi-device sign-in verification)
• Usage Data: App interactions, features used, and session information
• Analytics Data: Anonymized usage patterns to improve our service

2. How We Use Your Information

3. Third-Party Services

We use the following trusted third-party services to provide and improve Niblo:

4. Data Storage & Security

We take the security of your data seriously:

• Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest
• Password Security: Passwords are hashed using industry-standard algorithms and never stored in plain text
• Secure Authentication: We use OTP (one-time password) verification for email confirmation and new device sign-ins
• Access Controls: Your data is only accessible by you through your authenticated account
• Infrastructure: Our servers are hosted on secure, reputable cloud providers

5. Your Rights & Choices

5.1 Access & Control Your Data

• View and edit your profile information in the app
• Review your meal history and nutrition data
• Modify your preferences and notification settings

5.2 Delete Your Account

You can permanently delete your account and all associated data at any time:

• Go to Profile → Delete Account in the app
• This will permanently remove all your data including meals, messages, goals, and personal information
• This action cannot be undone

5.3 Opt-Out of Analytics

When you first open the app, you'll be asked about tracking permissions (App Tracking Transparency). You can:

• Deny tracking to opt-out of analytics collection
• Change this later in your device's Settings → Privacy → Tracking

6. Data Retention

• Account Data: Retained while your account is active
• Meal & Nutrition Data: Retained while your account is active
• Analytics Data: Anonymized and aggregated, retained for up to 2 years
• Deleted Accounts: All data permanently removed within 30 days of deletion request

7. Children's Privacy

Niblo is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

8. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy in the app
• Updating the "Last Updated" date at the top of this page
• Sending you an email notification for significant changes

10. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect about you
• Request deletion of your personal information
• Opt-out of the sale of your personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights

11. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Request erasure of your personal data
• Restrict processing of your personal data
• Data portability
• Object to processing