Privacy Policy

1. Who we are

Flama ("we", "us", "our") is a nutrition tracking application available at flama.health. For any privacy-related questions, contact us at hello@flama.health.

2. Data we collect

• Account data: email address and encrypted password, managed by Supabase Auth.
• Profile data: name, date of birth, height, weight, activity level, goal, dietary preferences, allergens, and meal preferences.
• Health data (sensitive): menstrual cycle dates, hormonal contraceptive use, and special health conditions (e.g. PCOS, perimenopause). This data is used solely to personalize your nutrition targets and is never shared or sold.
• Usage data: food diary entries, recipes, meal plans, pantry items, and shopping lists.
• Payment data: subscription status and transaction records. Payment processing is handled by Stripe. We never store card numbers or billing details.
• Technical data: device type, browser, and app usage patterns for service improvement.

3. How we use your data

• To provide personalized macro targets and AI-generated meal plans
• To adjust calorie recommendations based on your menstrual cycle phase
• To process subscriptions and payments
• To improve our algorithms using anonymized, aggregated data
• To communicate service updates or support responses

4. Data processors (third parties)

• Supabase — database and authentication (EU servers)
• Stripe — payment processing
• Anthropic — AI processing for meal plans, label scanning, and food photo analysis
• Vercel — application hosting

We do not sell your personal data to any third party.

5. Your rights (GDPR)

If you are located in the European Economic Area, you have the following rights:

• Access: request a copy of your personal data
• Rectification: correct inaccurate data in your profile settings
• Erasure: delete your account via Profile → Delete account
• Portability: request your data in a portable format
• Objection: object to processing of your health data at any time

Contact hello@flama.health to exercise any of these rights.

6. Your rights (CCPA — California residents)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your personal information, and opt out of any sale of personal information (we do not sell personal information). To exercise these rights, contact hello@flama.health.

7. Data retention and account deletion

When you delete your account:

• Your name, menstrual cycle data, and allergens are deleted immediately
• Your Stripe customer record (email, billing details, payment methods) is deleted from Stripe
• Your shopping lists, pantry, and personal preferences are deleted
• Anonymized usage data (food diary, meal plans, recipes) is retained for service improvement, disassociated from your identity
• Transaction records are retained for up to 7 years as required by applicable tax and accounting regulations

8. Health data disclaimer

Flama's cycle-phase calorie adjustments are based on peer-reviewed research on metabolic rate variation across the menstrual cycle. This data is used to personalize recommendations only. It is not used for advertising, profiling, or shared with any third party. You can opt out of cycle-based adjustments at any time by enabling the "On hormonal contraceptives" setting in your profile.

9. Cookies

We use strictly necessary cookies for authentication only. We do not use tracking, advertising, or analytics cookies.

10. Contact

For privacy questions or to exercise your rights: hello@flama.health