Privacy Policy

1. Information you provide

Depending on the features you use, Heart & Core may receive information such as:

• account and profile information;
• pantry, grocery, barcode, and shopping information;
• foods, ingredients, meal history, recipes, and meal plans;
• dietary preferences, food rules, nutrition targets, and wellness preferences;
• photos or information you intentionally submit to supported features; and
• feedback or messages you send to Heart & Core.

2. Information collected to operate the service

Heart & Core and its service providers may process limited technical information needed to operate, secure, and troubleshoot the service, such as device/browser information, authentication activity, application errors, and basic service-usage information.

3. How information is used

Heart & Core may use information to:

• provide and personalize the application;
• save and synchronize your pantry and account information;
• generate meal, recipe, shopping, and pantry suggestions;
• apply preferences, targets, and food rules you have chosen;
• provide general nutrition and wellness information;
• operate supported AI-powered features;
• protect account and system security;
• diagnose technical problems and improve reliability; and
• respond to support requests and feedback.

4. Sensitive and health-related information

Some information you choose to enter may be health-related or sensitive. Heart & Core is a consumer nutrition and general-wellness service, not a healthcare provider, and you should not assume information entered into Heart & Core is a medical record protected in the same way as information held by your doctor, hospital, or other healthcare provider.

5. Service providers

Heart & Core uses technology providers for functions such as hosting, database storage, authentication, artificial intelligence, nutrition/product information, email delivery, and security. Those providers may process information as needed to provide their services to Heart & Core and are subject to their own legal and contractual obligations.

Some supported features may send information you intentionally submit to a processing provider in order to return a result. Heart & Core is designed so that plate-scan images are not stored in Heart & Core’s own application database after processing.

6. No sale of personal information

Heart & Core does not sell your personal information.

7. No targeted advertising based on wellness information

Heart & Core does not use your nutrition or wellness information for targeted advertising.

8. Security

Heart & Core uses reasonable technical and organizational safeguards intended to protect user information, including authenticated access controls and account-based data protections. No internet-connected system can guarantee absolute security.

9. Data retention and deletion requests

Heart & Core retains information for as long as reasonably necessary to provide the service, protect security and data integrity, satisfy legitimate operational needs, and comply with applicable law. You may request deletion of your account and associated personal information through the in-app feedback tool while a dedicated privacy contact is being established. Some information may be retained when required or permitted by law.

10. Children

Heart & Core is not intended for children under 13, and Heart & Core does not knowingly collect personal information from children under 13.

11. Your privacy rights

Depending on where you live, applicable law may provide rights to access, correct, delete, obtain, or restrict certain uses of your personal information. Heart & Core will honor applicable privacy rights as required by law.

12. Security incidents

If Heart & Core experiences a security incident that triggers a legal notification obligation, Heart & Core will provide notices required by applicable law.

13. Changes to this policy

This Privacy Policy may be updated as Heart & Core develops. Material changes will be communicated as appropriate, and the “Last updated” date will be revised.