Privacy Policy – Mepe Khai

📋 Table of Contents

Introduction
Information We Collect
How We Use Your Information
How We Share Your Information
Data Security
Your Rights and Choices
Children's Privacy
International Data Transfers
California Privacy Rights (CCPA)
European Privacy Rights (GDPR)
Changes to This Policy
Contact Us

1. Introduction

Welcome to Mepe Khai ("we," "our," "us," or the "App"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information.

By using Mepe Khai, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide Directly

Account Information

Email address (required for account creation)
Full name
Password (encrypted, never stored in plain text)

Health & Fitness Profile

Age and date of birth
Gender
Height and current weight
Goal weight
Activity level and fitness goals

Dietary & Nutrition Data

Food logs (meal names, descriptions, timestamps)
Meal photos (uploaded for AI analysis)
Calorie and macronutrient intake (protein, carbohydrates, fats)
Micronutrient data (sugar, sodium, fiber, potassium, cholesterol, vitamins A, C, D, calcium, iron)
Meal times and types, favourite foods, meal plans

Activity & Exercise Data

Exercise type and duration
Calories burned (manually entered)
Activity logs and timestamps

🍎 Apple Health Data iOS only — Optional

Step count Read-only
Active calories burned Read-only

        Only accessed if you tap "Connect Apple Health" and grant permission.

        We only READ from Apple Health — we never write or modify your Health data.

        Revoke anytime: Settings → Privacy & Security → Health → Mepe Khai

Progress Tracking

Weight logs over time
Water intake logs
Progress photos — stored locally on your device only, never uploaded

2.2 Information Collected Automatically

Device Information: Device type/model, OS version, unique device identifiers
Usage Data: Features accessed, time in app, navigation patterns
Technical Data: Error logs, crash reports, app version

2.3 Camera and Photo Library Access

Camera: Used exclusively to photograph meals for AI nutritional analysis
Photo Library: Used to select existing meal photos for analysis
You can deny access — manual entry remains available
Progress photos are stored only on your device and never uploaded

🚫 We do NOT collect or track your location data.

3. How We Use Your Information

3.1 Core App Functionality

Calculate daily calorie and macronutrient targets based on your profile
Track dietary intake against personalised goals
Analyse meal photos using Google Gemini AI to estimate nutritional content
Track weight changes, water intake, and generate progress charts
Display steps and active calories from Apple Health on the Activity screen
Calculate calorie deficit using both logged activity and Apple Health data

3.2 Notifications & Reminders

Customisable meal time notifications
Water intake reminders (up to 8 daily, if enabled)
End-of-day nutrition summaries

📧 We do NOT send marketing emails or promotional content.

5. Data Security

Encryption: All data in transit is encrypted via HTTPS/TLS. Data at rest is encrypted in the database. Passwords are hashed using bcrypt.

Access Controls: Row-level security ensures users can only access their own data.

Data Retention: Data is retained while your account is active. Upon account deletion, all personal data is permanently and immediately deleted.

6. Your Rights and Choices

6.1 Access, Correction & Deletion

View and edit all your data within the app
Delete your account from Settings → Danger Zone — all data permanently deleted immediately
Export your data from the Progress screen (CSV/PDF)

6.2 Apple Health Access

Revoke HealthKit access anytime: Settings → Privacy & Security → Health → Mepe Khai
The app continues to work fully without Apple Health access

6.3 Camera & Photo Access

Revoke camera and photo library access in device Settings at any time
Manual food entry remains available without camera access

7. Children's Privacy

Mepe Khai is intended for users aged 13 and older. We do not knowingly collect information from children under 13. Contact us at ksami933@gmail.com if you believe your child has provided us with personal information.

8. International Data Transfers

Your information may be stored and processed in countries outside your residence. All data is encrypted in transit and at rest. We ensure appropriate safeguards comply with applicable laws.

9. California Privacy Rights (CCPA)

California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do NOT sell personal information. Email ksami933@gmail.com to exercise your rights. We respond within 45 days.

11. Changes to This Privacy Policy

We may update this policy to reflect changes in practices, legal requirements, or new features. We will update the "Last Updated" date and notify users of material changes via push notification or email.

12. Contact Us

Questions about your privacy?

📧 ksami933@gmail.com

Developer: Sami Khan Fitness | Response time: within 48 hours

Data Processing Summary

Data Type	Purpose	Storage	Third Parties
Account Info	Authentication	Supabase Cloud	Supabase
Food Logs	Nutrition Tracking	Supabase Cloud	Supabase
Meal Photos	AI Analysis	Temporary only	Google Gemini
Weight Logs	Progress Tracking	Supabase Cloud	Supabase
Water Logs	Hydration Tracking	Supabase Cloud	Supabase
Apple Health (Steps/Calories)	Activity Tracking	Your Device Only	None
Progress Photos	Visual Progress	Your Device Only	None
Device Tokens	Push Notifications	Expo Servers	Expo
Usage Analytics	App Improvement	Anonymised	None