[LEGAL ENTITY NAME] ("Bite Balance", "we", "us") operates the Bite Balance website, mobile application, and reset camps (the "Service"). For users in [India / the EEA, if applicable], we act as the "data fiduciary" / "controller" of your personal data.
This Policy covers personal information we handle when you use the Service in the United States and India. Some information we handle may be health-related and is treated with extra care (Section 5).
You give us:
We collect automatically:
From others:
We generate the Bite Balance Score and your predictions from the above.
We use personal information to:
Some information you share (for example, diabetes status, weight, or glucose readings) is health-related and may be "sensitive personal data" under laws such as the India DPDP Act 2023 and US state privacy laws (for example, the CCPA/CPRA in California). We:
Where we operate under a HIPAA-compliant posture (for example, when working with a clinician or health-plan partner that is a HIPAA covered entity), we apply the safeguards required of a business associate under an appropriate agreement. [Confirm with counsel whether/when you are a HIPAA business associate.]
Your predictions are produced by AI models. To improve accuracy and the Service, we may use data to train and evaluate those models, using de-identified data wherever feasible so it is not reasonably linkable to you. Predictions are estimates, not medical measurements, and are not used to make legal or similarly significant decisions about you.
Depending on where you are, we rely on one or more of: your consent (which you may withdraw); performance of a contract (to provide the Service you asked for); our legitimate interests (for example, security and improving the Service) balanced against your rights; and compliance with law. For sensitive/health data, we rely primarily on your consent.
We do not sell your personal information, and we do not share your individual health information with sponsors for their own marketing.
We share information only as follows:
The Service is not directed to children and is intended for users [18] and older. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [PRIVACY EMAIL] and we will delete it.
We use strictly necessary cookies/local storage to make the Service work (for example, to remember your session and preferences) and [limited analytics] to understand usage. You can control cookies through your browser settings; blocking some may affect functionality. [If you add advertising or non-essential analytics, describe them and provide an opt-out / consent banner.]
We keep personal information for as long as your account is active and as needed to provide the Service, then for a reasonable period to meet legal, accounting, security, and dispute-resolution needs, after which we delete or de-identify it. Aggregate and de-identified data may be kept indefinitely.
We store data securely in [the United States] and apply administrative, technical, and physical safeguards appropriate to its sensitivity, including access controls, encryption in transit, and use of de-identified data for development and model improvement. No system is perfectly secure, so we cannot guarantee absolute security.
We operate in the United States and India, and your information may be processed in either country or by our service providers elsewhere. Where the law requires it, we use appropriate safeguards for cross-border transfers (for example, contractual protections) and process such transfers consistent with the DPDP Act and applicable US requirements. [Confirm transfer mechanism with counsel.]
Subject to local law, you may have the right to:
US (for example, California under CCPA/CPRA): rights to know, delete, correct, and to opt out of "sale"/"sharing"; we will not discriminate against you for exercising them.
India (DPDP Act 2023): rights to access, correction, erasure, grievance redressal, and to nominate another person to exercise your rights; contact our Grievance Officer above.
To exercise any right, contact [PRIVACY EMAIL]. We will verify your request and respond within the time the law requires. You may also have the right to complain to your data-protection authority (in India, the Data Protection Board).
The Service may link to or connect with third-party sites and services. Their privacy practices are their own, and we encourage you to read their policies.
We may update this Policy. We will change the "Last updated" date and, for material changes, give you reasonable notice (for example, by posting on the Service or emailing you). Your continued use after the effective date means you accept the updated Policy.
Bite Balance is a wellness and education tool, not a medical device. The Service provides predictions and estimates, not clinical measurements, and does not diagnose, treat, or prevent any disease. Always consult your doctor before making medical decisions.
Legal