Back to Home

Last Updated: May 12, 2026

PRIVACY POLICY

1 Introduction

Balance Score is a nutritional tracking application developed by SGROI Studio Lab. We are committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information.

  • We do not sell your personal data.
  • We do not serve advertising.
  • We do not share your data with other users.

2 Information We Collect

  • Account Information: name, email address, and password (managed via Supabase Auth)
  • Profile Information: dietary pattern (omnivore, flexitarian, pescatarian, vegetarian, or vegan), biological sex (male or female), and life stage (standard adult, pregnant, lactating, adolescent, or senior)
  • Meal Data: text descriptions of meals you log, and photos you take for AI analysis
  • Nutritional Data: your calculated Nutritional Completeness Score (NCS, 0–100) and 25-nutrient breakdown percentages
  • Usage Data: consecutive-day streak count, feedback messages you submit, and your subscription tier (free or coach)
  • Device Storage: your language preference is stored locally on your device using AsyncStorage — this data never leaves your device and is not transmitted to our servers

Important regarding meal photos: Meal photos are processed by AI to extract a text description and nutrient estimates, then discarded. Photos are NOT stored permanently on our servers — only the extracted text description is retained.

3 How We Use Your Information

  • Calculate your personalized Nutritional Completeness Score
  • Provide nutrient-specific food recommendations
  • Personalize targets based on your dietary pattern and life stage
  • Track your progress over time (streaks, trends)
  • Respond to your support and feedback requests
  • Improve the service based on aggregated, anonymized usage patterns

We do NOT use your data for advertising, marketing profiling, or sale to third parties.

4 Third-Party Services

We use the following third-party services to operate Balance Score:

  • Supabase (database and authentication): Your account information and meal data are stored on Supabase’s cloud infrastructure.
    Supabase Privacy Policy: https://supabase.com/privacy
  • Google Gemini AI (meal analysis): When you log a meal by text or photo, the description or image is sent to Google’s Gemini API for nutrient estimation. Google processes this data per their Cloud API terms. Photos are processed in transit and not stored by Google for model training under their API terms.
    Google Privacy Policy: https://policies.google.com/privacy
  • Apple App Store: app distribution and in-app purchases.
    Apple Privacy Policy: https://www.apple.com/privacy/
  • RevenueCat (planned): subscription management for in-app purchases. Not yet active. Will be disclosed when implemented.

5 Data Storage and Security

Your data is stored in a PostgreSQL database hosted by Supabase with Row Level Security (RLS) enabled — each user can only access their own data.

  • All data transmission uses HTTPS encryption
  • Passwords are hashed and never stored in plain text
  • Data may be stored on servers located outside your country of residence as part of Supabase’s cloud infrastructure

6 Data Retention

  • Meal logs and nutritional data: retained while your account is active
  • Account information: retained until you request deletion
  • Feedback messages: retained for up to 2 years for product improvement
  • Account deletion: upon request, all your data is permanently deleted within 30 days

To request deletion, contact admin@sgroistudiolab.com.

7 Your Rights

Regardless of your location, you have the right to:

  • Access: request a copy of the personal data we hold about you
  • Correction: request correction of inaccurate data
  • Deletion: request permanent deletion of your data and account
  • Export: request a portable copy of your data
  • Withdraw Consent: withdraw your consent to data processing at any time

To exercise these rights, contact admin@sgroistudiolab.com.

8 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

  • Right to Know: you can request the categories and specific pieces of personal information we have collected
  • Right to Delete: you can request deletion of your personal information
  • Right to Opt-Out of Sale: we do NOT sell your personal information to third parties
  • Right to Non-Discrimination: we will not discriminate against you for exercising your rights

Categories of personal information collected: identifiers (name, email), profile data, internet activity (meal logs), and inferences (NCS score). We respond to verifiable requests within 45 days.

9 Brazil Residents (LGPD)

If you are a resident of Brazil, your data is processed under the Lei Geral de Proteção de Dados (LGPD). Legal basis for processing: consent (Art. 7, I) and legitimate interest (Art. 7, IX).

Your rights under Art. 18 include:

  • Confirmation of data processing
  • Access to data
  • Correction of incomplete or inaccurate data
  • Anonymization or blocking of unnecessary data
  • Portability to another service provider
  • Deletion of data processed with consent
  • Information about public and private entities with which data is shared
  • Information about the possibility of denying consent and its consequences
  • Withdrawal of consent

We respond to requests within 15 business days. Contact our data protection representative at admin@sgroistudiolab.com.

10 European Residents (GDPR)

Our current data handling practices align with GDPR principles including data minimization, purpose limitation, and storage limitation. Your rights include: access, rectification, erasure (right to be forgotten), restriction of processing, data portability, and the right to object to processing.

Data protection contact: admin@sgroistudiolab.com.

Full GDPR compliance measures, including appointment of a formal Data Protection Officer and establishment of an EU representative, will be implemented before any EU market launch.

11 Children’s Privacy

Balance Score is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected data from a child under 13, we will delete it immediately.

If you believe a child under 13 has provided us with personal information, please contact us at admin@sgroistudiolab.com.

12 Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days advance notice via email or in-app notification before the changes take effect.

Your continued use of the app after changes become effective constitutes acceptance of the revised policy.

13 Contact Us

If you have questions or requests regarding this Privacy Policy, please reach out to us.

SGROI Studio Lab

Email: admin@sgroistudiolab.com

For privacy-related requests, include “Privacy Request” in your subject line.

For data deletion requests, include “Data Deletion” in your subject line.

For LGPD requests, include “LGPD Request” in your subject line.