Privacy Policy

Effective Date: April 16, 2025

Welcome to Füd! This Privacy Policy explains how Ouro LLC ("we," "us," or "our") collects, uses, discloses, and protects your information when you use our mobile application, Füd (the "App"). Please read this policy carefully.

By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the following types of information:

Account Information: Your email address is required to create and manage your account, authenticate your access, and communicate with you.
Nutritional & Health Data: Information you provide through the App, such as food entries, meal details, macronutrient and micronutrient intake, dietary goals, consumption history, and potentially other related metrics you choose to track.
Usage Data: We may collect general information about how you interact with the App (e.g., features used, crash reports) solely for the purpose of improving app functionality and stability. This data is typically aggregated and does not directly identify you.

We do not collect: Your name (unless you voluntarily include it in communications), physical address, phone number, precise geolocation, or government-issued identifiers.

2. How We Use Your Information

We use the information we collect for the following purposes:

To provide, operate, and maintain the App's core functionality, including tracking your nutritional intake and progress towards your goals.
To provide personalized, AI-driven nutritional insights based on the data you log.
To authenticate your account and prevent unauthorized access.
To respond to your support requests and inquiries.
To improve the App's features, performance, and user experience (using aggregated or anonymized data where possible).
To maintain your dietary history and goal tracking within the App.
To comply with legal obligations.

We do not sell your personal information. We do not use your personal data for targeted advertising by third parties.

3. Third-Party Services and Data Sharing

We limit the use of third-party services to those essential for app functionality:

AI Insights (OpenAI): We transmit relevant nutritional data (like food logs and dietary goals, but not your email address) to OpenAI's API to generate personalized dietary insights within the App. OpenAI processes this data according to its API data usage policies, which may evolve. We recommend you review OpenAI's API Data Usage Policies. While we configure our requests according to their guidelines, we cannot control OpenAI's data handling practices.
Backend Hosting & Database (e.g., Heroku, MongoDB Atlas): Your data (including email and nutritional data) is stored on servers managed by third-party cloud hosting providers (like Heroku or similar) and database providers (like MongoDB Atlas or similar). These providers are responsible for the physical security of the servers.

We do not use third-party analytics SDKs (like Google Analytics, Mixpanel, etc.) within the App. We do not share your personal information with data brokers, marketing partners, or advertising networks.

We may disclose your information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

4. Data Storage, Security, and Retention

Storage: Your data is stored using services like MongoDB Atlas, hosted on cloud infrastructure (such as Heroku or similar platforms), primarily located in the United States.
Security Measures: We implement reasonable administrative and technical safeguards to protect your information. However, no internet transmission or electronic storage is 100% secure.
Important Security Note: Currently, we do not implement end-to-end encryption or encryption at rest for your stored nutritional data or account information within our primary database. Data transmission between the app and our backend, and between our backend and OpenAI's API, may also not be encrypted. This means there is a risk that your data could be intercepted or accessed by unauthorized parties. We are actively working towards implementing stronger encryption measures in future updates.
Retention: We retain your personal data as long as your account is active. If you delete your account, we will initiate the process to permanently delete your data from our production systems within 30 days, unless retention is required for legal compliance, dispute resolution, or enforcing our agreements. Backup copies may exist for a limited period afterward before being securely deleted.

5. Your Privacy Rights

Depending on your location (e.g., EU/UK, California), you may have certain rights regarding your personal data, including:

Right to Access: You can request access to the personal data we hold about you.
Right to Rectification: You can request correction of inaccurate personal data.
Right to Erasure (Deletion): You can request the deletion of your personal data, subject to certain exceptions. Deleting your account within the App typically initiates this process.
Right to Data Portability: You may request a copy of your data in a structured, machine-readable format.
Right to Object/Restrict Processing: You may have the right to object to or request restriction of certain processing activities.

To exercise these rights, please contact us using the information below. We may need to verify your identity before processing your request.

6. Children's Privacy

The App is not intended for or directed at children under the age of 13 (or a higher age threshold if required by applicable law). We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.

7. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction (e.g., the United States). By using the App, you consent to this transfer.

8. Data Breach Notification

In the event of a data breach that compromises your personal information and poses a significant risk, we will take reasonable steps to notify affected users as required by applicable law. This may include notification via email or within the App.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy within the App or via email. The "Effective Date" at the top indicates when the latest revision came into effect. Your continued use of the App after such changes constitutes your acceptance of the new Privacy Policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, your data, or exercising your privacy rights, please contact Ouro LLC by using our support contact form: