Privacy Policy for Honora.app

Last Updated: September 1, 2025

1. Introduction

Honora.app ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered nutrition tracking application.

2. Information We Collect

2.1 Personal Information

Account Information: Name, email address, password
Profile Data: Age, gender, health goals, dietary preferences
Contact Information: Email for communications

2.2 Health and Nutrition Data

Meal Logs: Food items, portion sizes, meal times
Nutrition Information: Calories, macros, micronutrients
Photos: Meal photos for AI analysis
Conversations: Chat history with our AI assistant Nora
Health Goals: Weight targets, fitness objectives, dietary restrictions

2.3 Technical Information

Device Information: Device type, operating system, browser
Usage Data: Feature usage, interaction patterns, error logs
Location Data: General location for timezone purposes (not precise GPS)

2.4 AI Processing Data

Photo Analysis: Food recognition data from uploaded images
Conversation Processing: AI-generated responses and analysis
Pattern Learning: Eating habits and preference analysis

3. How We Use Your Information

3.1 Service Provision

Provide personalized nutrition tracking and insights
Process meal photos through AI recognition
Generate nutrition estimates and recommendations
Enable AI conversation and support

3.2 Service Improvement

Improve AI accuracy and food recognition
Enhance user experience and feature development
Conduct research and analysis (anonymized where possible)

3.3 Communication

Send service notifications and updates
Provide customer support
Share important service changes

3.4 Legal Compliance

Comply with legal obligations
Protect our rights and prevent fraud
Ensure service security and integrity

4. Legal Basis for Processing (GDPR)

For users in the European Union, we process your data based on:

Consent: For specific processing activities
Contract Performance: To provide the services you request
Legitimate Interests: For service improvement and security
Legal Obligation: Where required by law

5. Data Sharing and Disclosure

5.1 Service Providers

We share data with trusted third-party providers:

OpenRouter: AI conversation processing
Gemini 2.5 Flash: Photo analysis and food recognition
DeepSeek: Nutrition estimation and analysis
Supabase: Database storage and management
OpenFoodFacts: Nutrition database lookup

5.2 Legal Requirements

We may disclose information:

To comply with legal obligations
To protect our rights and property
In connection with business transfers
To prevent harm or illegal activities

5.3 Aggregated Data

We may share anonymized, aggregated data:

For research and analysis
With partners and researchers
In public reports and statistics

6. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards through:

Standard Contractual Clauses (EU)
Adequacy decisions where applicable
Data protection agreements with providers

7. Data Security

We implement robust security measures:

Encryption: Data encrypted in transit and at rest
Access Controls: Strict role-based access management
Regular Audits: Security assessments and penetration testing
Incident Response: Procedures for data breach response

8. Data Retention

We retain your data only as long as necessary:

Account Data: While your account is active
Usage Data: For service improvement and analysis
Legal Requirements: As required by applicable laws
Backup Data: Securely stored with limited access

You can request data deletion at any time through your account settings or by contacting us.

9. Your Rights

9.1 Access and Control

Access: Request copies of your personal data
Correction: Update inaccurate or incomplete information
Deletion: Request deletion of your personal data
Portability: Receive your data in a machine-readable format

9.2 Consent Management

Withdraw Consent: Withdraw previously given consent
Object to Processing: Object to certain data processing
Restrict Processing: Request temporary processing restriction

9.3 How to Exercise Rights

10. Children's Privacy

Honora.app is not intended for children under 13. We do not knowingly collect data from children under 13. If we learn we have collected such data, we will delete it promptly.

11. Cookies and Tracking

We use cookies and similar technologies for:

Essential Functions: Login and session management
Analytics: Service usage and performance monitoring
Preferences: Remembering user settings and choices

You can control cookies through your browser settings.

12. California Privacy Rights

California residents have additional rights under CCPA/CPRA:

Right to know what personal information is collected
Right to delete personal information
Right to opt-out of data sales
Right to non-discrimination for exercising rights

13. Changes to This Policy

We may update this Privacy Policy by:

Posting the updated policy on honora.app
Providing notice of material changes
Updating the "Last Updated" date

14. Contact Information

For privacy-related questions or concerns:

Email: privacy@honora.app
Website: honora.app/contact
Data Protection Officer: dpo@honora.app

15. Complaints

If you have concerns about our data practices, you may:

Contact us first to resolve the issue
File a complaint with your local data protection authority
For EU residents: Contact your national Data Protection Authority

16. Data Protection Officer

Our Data Protection Officer can be reached at:

Email: dpo@honora.app
Address: [Business Address TBA]

By using Honora.app, you acknowledge that you have read and understood this Privacy Policy.

Honora Privacy Policy