Privacy Policy

Last updated: March 29, 2026

1. Introduction

Welcome to Bulkin ("we," "our," or "us"). This Privacy Policy describes how we collect, use, store, and share information when you use our mobile application (the "App").

2. Information we collect

Account and profile

When you create an account or use sign-in, we may collect:

• Email address
• Name (if you provide it)
• Onboarding and profile details such as age, gender, height, weight, activity level, goals, and dietary preferences

Health, nutrition, and app content

To provide tracking and planning features, we process:

• Meal logs, foods, recipes, and nutrition estimates
• Weight and progress data you enter
• Meal planning and related preferences

Camera and barcode scanning

If you use the barcode scanner, the App requests access to your device camera. The camera is used to detect barcodes so we can look up product information. Video is processed on your device for that purpose; we do not upload your camera feed or store photos or video recordings for this feature. Barcode values (or derived product identifiers) may be sent to our food-data providers or our backend to retrieve nutrition information.

Usage, device, and diagnostics

We may collect:

• Device type, operating system version, and app version
• App usage and product analytics (for example, events related to onboarding, suggestions, and subscription screens) tied to your account where you are signed in
• Crash or error information through platform or hosting tools
• Push notification tokens if you enable notifications

3. How we use information

We use the information above to:

• Provide nutrition tracking, meal planning, barcode lookup, and related features
• Personalize targets, suggestions, and the user experience
• Process and verify subscriptions
• Send optional reminders or updates if you enable notifications
• Maintain security, debug issues, and improve the App
• Comply with law and enforce our terms

4. Legal bases (where applicable)

If you are in the European Economic Area or the UK, we rely on appropriate bases such as performance of a contract, legitimate interests (for example, securing the App and understanding aggregate usage), and consent where required (for example, camera access or notifications, depending on your device).

5. Storage and security

We use reputable infrastructure providers (including Supabase for authentication and data storage) and implement technical and organizational measures appropriate to the service, such as encryption in transit and access controls. No method of transmission or storage is completely secure.

6. Sharing

We do not sell your personal information. We may share information with:

• Service providers who host data, process payments or subscriptions, send notifications, or help us operate the App, subject to contractual obligations
• Food and nutrition data providers when you search foods or scan barcodes, so they can return product or nutrition data
• Authorities when required by law or to protect rights and safety

7. Third-party services

The App may use or integrate with third parties, including:

• Supabase — authentication and backend data storage. See Supabase's privacy policy.
• Google Sign-In — optional sign-in. See Google's privacy policy.
• RevenueCat — subscription status and purchase management. See RevenueCat's privacy policy.
• FatSecret (or similar) — food and barcode-related nutrition data. See the provider's privacy policy.
• Expo / platform notification services — delivery of push notifications when enabled.

Those services process information under their own policies. We encourage you to read them.

8. Retention

We keep information for as long as your account is active and as needed to provide the App, comply with legal obligations, resolve disputes, and enforce our agreements. If you delete your account, we will delete or anonymize personal information within a reasonable period unless we must retain certain data by law.

9. Your choices and rights

Depending on your region, you may have rights to access, correct, delete, or export personal data, or to object to or restrict certain processing. You can manage some choices in the App (for example, notifications). To exercise other rights, contact us using the details below. You may also lodge a complaint with a supervisory authority.

10. Children

The App is not directed at children under 13 (or the minimum age required in your region). We do not knowingly collect personal information from children. Contact us if you believe a child has provided us data.

11. International transfers

Your information may be processed in countries other than where you live. Where required, we use appropriate safeguards for cross-border transfers.

12. Changes

We may update this Privacy Policy. We will post the updated version here and revise the "Last updated" date. Material changes may be communicated through the App or other reasonable means.

13. Contact

Questions about this policy or your data:

Email: buildworks161@gmail.com

We aim to respond within 30 days.