1. Scope and roles

LoseWeight provides AI-assisted meal analysis, nutrition estimates, meal history, weight-goal tools, and subscription features. This policy applies to information processed by LoseWeight. Apple separately processes App Store payments and related account information under Apple’s own privacy terms.

2. Information we process

Identifiers and account information

We use anonymous user and device identifiers to maintain your session, associate your data with your installation or account, prevent abuse, and provide account functions. The app stores its app-generated anonymous identifier securely in Apple Keychain. Depending on your iCloud Keychain settings, Apple may sync it across your devices so LoseWeight can restore your anonymous account and purchase entitlements after a reinstall or device change. It is not an advertising identifier. You do not need to provide your real name for the core Service.

Profile and goal information

You may provide weight, target weight, height, birth year or age range, sex, activity level, and dietary preferences. This information helps personalize calorie and nutrition guidance.

Meal content and AI results

We process meal photos and text that you choose to submit, AI-generated meal and nutrition estimates, and the meal entries you choose to save in history. Photos are accessed only when you take a photo in the app or choose an image from your photo library.

Diagnostics and service activity

We process limited internal product events and network or server logs. These records may include an anonymous user or device identifier, feature and purchase-flow interactions, IP address, user-agent information, requested path, request timing, error status, and security signals. We use them for app functionality, aggregate product analytics, reliability, fraud prevention, security, and troubleshooting. We do not use them for advertising or cross-app tracking.

Subscriptions and transactions

We receive StoreKit subscription, transaction, and entitlement identifiers needed to verify and provide paid access. Apple processes your payment method, billing address, and payment authorization; LoseWeight does not receive or store your full payment-card details.

3. Permissions and information we do not collect

• Camera and photo-library access are used only for photos you choose to capture or select for meal analysis. Before upload, the app decodes and re-encodes the image as a new JPEG without copying the source image’s embedded EXIF or GPS metadata.
• LoseWeight does not request device-location access or access HealthKit, contacts, or microphone data.
• LoseWeight does not include advertising or cross-app tracking SDKs, and we do not use your information for cross-app advertising.

4. How we use information

• Provide, personalize, and maintain meal analysis, saved history, weight goals, and other requested features.
• Generate AI-assisted nutrition estimates and guidance from content you submit.
• Authenticate requests, sync entitlement status, restore purchases, and apply usage limits.
• Diagnose errors, monitor reliability, prevent fraud or abuse, and protect users and the Service.
• Respond to support, privacy, and account-deletion requests.
• Comply with applicable law and enforce our Terms of Service.

Depending on where you live, our legal bases may include performing the service you request, our legitimate interests in operating and securing the Service, your consent where required, and compliance with legal obligations.

5. AI processing

Meal photos, meal text, and relevant profile context may be sent to the LoseWeight backend AI service to generate the analysis you request. AI outputs are probabilistic estimates and may be incomplete or inaccurate. Do not submit information you do not want processed for this purpose. We do not use meal content for advertising or cross-app tracking.

6. When information is disclosed

We do not sell personal information. We disclose information only as reasonably needed to:

• Service providers: Google Cloud Platform provides hosting infrastructure, a backend AI inference service provider supports requested AI analysis, and Cloudflare R2 provides private object storage for meal images. These providers process data on our behalf or under their applicable service terms.
• Apple: Apple processes purchases and provides transaction and entitlement information through StoreKit.
• Legal and safety: we may disclose information if reasonably necessary to comply with law, respond to valid legal process, investigate abuse, or protect rights, safety, and the integrity of the Service.
• Business changes: information may transfer as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and applicable law.

7. Storage and international transfers

The core API and MySQL database currently run on Google Cloud infrastructure in Hong Kong. Meal images are stored in a private Cloudflare R2 bucket using APAC placement rather than a public image directory. Requested AI analysis may be processed by the LoseWeight backend AI service in its configured service region. Because LoseWeight is available globally and uses these service providers, information may be processed outside your country or region. Where required, we rely on appropriate safeguards for international transfers.

8. Retention and account deletion

We keep profile, meal, and image data while your account is active or as needed to provide the Service. You can delete your account from Settings → Delete Account in the app. Account deletion removes your LoseWeight profile, meals, and stored meal images from active systems. It also deletes internal product-event rows linked to your user or anonymous identifier, including their event properties.

To prevent deletion and recreation from resetting the free allowance, we retain only the current UTC day's completed-scan and free-scan counters until the next daily reset. We associate these counters with a keyed HMAC-SHA-256 one-way digest derived from the app-generated anonymous identifier. This short-lived record contains no raw device identifier, anonymous identifier, app-user id, or user foreign key.

We retain minimal verified StoreKit transaction and lifecycle identifiers and signed-payload digests to restore purchases and prevent replay or refunded-access regranting. We remove the deleted LoseWeight user reference from those records. We may also retain an R2 cleanup tombstone with an object key, byte count, quota window, and deletion deadline when an already-issued signed upload URL may still complete. That tombstone contains no user, profile, or meal foreign key and is removed after object cleanup and quota expiry.

Deletion may not be immediate in limited backups, and we may retain narrowly necessary records for security, dispute resolution, legal compliance, or enforcement. We restrict these records and remove or de-identify them when they are no longer needed. We do not use retained limit, purchase-integrity, or cleanup records for advertising or cross-app tracking. Deleting your LoseWeight account does not cancel an Apple subscription; cancel it separately in your Apple subscription settings.

9. Security

We use administrative, technical, and physical safeguards designed to protect information, including access controls, private image storage, and encrypted network transport where supported. No system is perfectly secure, so we cannot guarantee absolute security.

10. Your choices and privacy rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, receive a portable copy, or withdraw consent. You may update available profile fields or delete your account in the app. You may also email vokie123@gmail.com. We may request information reasonably necessary to verify that a request relates to your anonymous account. You may appeal a response or contact your local data-protection authority where applicable.

Camera and photo access can be changed in your device settings. You can manage Apple subscriptions and purchase history through your Apple account.

11. Children

The Service is not directed to children under 13 and is not intended to collect personal information from them. If local law requires a higher minimum age to use a digital service without parental consent, that higher age applies. If you believe a child has provided information without valid permission, contact us so we can investigate and delete it as appropriate.

12. Changes to this policy

We may update this policy as the Service or law changes. We will post the revised policy here, update the date above, and provide additional notice in the app when required. Continued use after an update is subject to the revised policy, except where consent is required.

13. Contact

For privacy questions or requests, contact:

LoseWeight
Email: vokie123@gmail.com
Website: https://loseweight.bj8791.com/

1. 适用范围与角色

LoseWeight 提供 AI 辅助餐食分析、营养估算、餐食历史、体重目标工具及订阅功能。本政策适用于 LoseWeight 处理的信息。Apple 会根据其自身隐私条款，另行处理 App Store 付款及相关账户信息。

2. 我们处理的信息

标识符与账户信息

我们使用匿名用户标识符和设备标识符来维持会话、将数据与你的安装或账户关联、防止滥用并提供账户功能。App 会将其自行生成的匿名标识安全存储在 Apple Keychain 中；根据你的 iCloud Keychain 设置，Apple 可能在你的设备间同步该标识，以便 LoseWeight 在重装 App 或更换设备后恢复匿名账户与购买权益。该标识不是广告标识。使用核心服务无需提供真实姓名。

个人资料与目标信息

你可以提供体重、目标体重、身高、出生年份或年龄段、性别、活动量及饮食偏好。这些信息用于个性化卡路里及营养建议。

餐食内容与 AI 结果

我们会处理你主动提交的餐食照片和文字、AI 生成的餐食及营养估算，以及你选择保存到历史记录中的餐食条目。仅当你在 App 中拍照或从相册中选择图片时，我们才会访问相应照片。

诊断与服务活动

我们会处理有限的内部产品事件、网络或服务器日志。这些记录可能包括匿名用户或设备标识符、功能及购买流程交互、IP 地址、用户代理信息、请求路径、请求耗时、错误状态和安全信号。我们将其用于 App 功能、汇总产品分析、可靠性、防欺诈、安全及问题排查，不会用于广告或跨 App 追踪。

订阅与交易

我们接收核验和提供付费权益所需的 StoreKit 订阅、交易及权益标识。付款方式、账单地址及付款授权由 Apple 处理；LoseWeight 不会接收或存储完整的银行卡信息。

3. 权限与我们不收集的信息

• 相机和相册权限仅用于你主动拍摄或选择并用于餐食分析的照片。上传前，App 会解码图片并重新编码为新的 JPEG 文件，不会复制源图片内嵌的 EXIF 或 GPS 元数据。
• LoseWeight 不请求设备位置权限，也不访问 HealthKit、联系人或麦克风数据。
• LoseWeight 不包含广告或跨 App 追踪 SDK，也不会将你的信息用于跨 App 广告。

4. 我们如何使用信息

• 提供、个性化并维护餐食分析、保存历史、体重目标及其他你请求的功能。
• 根据你提交的内容生成 AI 辅助营养估算与建议。
• 验证请求、同步权益状态、恢复购买及执行使用次数限制。
• 诊断错误、监控可靠性、防止欺诈或滥用，并保护用户和服务。
• 响应支持、隐私及账户删除请求。
• 遵守适用法律并执行我们的《服务条款》。

根据你所在地区，我们处理信息的法律依据可能包括履行你请求的服务、运营和保护服务的合法利益、法律要求下的同意，以及履行法律义务。

5. AI 处理

餐食照片、餐食文字和相关个人资料背景可能会发送至 LoseWeight 后端 AI 服务，以生成你请求的分析。AI 输出是概率性估算，可能不完整或不准确。请勿提交你不希望为此目的被处理的信息。我们不会将餐食内容用于广告或跨 App 追踪。

6. 信息披露情形

我们不出售个人信息。仅在合理必要的范围内进行以下披露：

• 服务提供商：Google Cloud Platform 提供托管基础设施，后端 AI 推理服务提供商支持你请求的 AI 分析，Cloudflare R2 为餐食图片提供私有对象存储。这些提供商代表我们或根据其适用服务条款处理数据。
• Apple：Apple 处理购买，并通过 StoreKit 提供交易与权益信息。
• 法律与安全：为遵守法律、响应有效法律程序、调查滥用或保护权利、安全及服务完整性，我们可能在合理必要时披露信息。
• 业务变更：在合并、融资、收购、重组或资产出售过程中，信息可能在适当保密措施及适用法律约束下转移。

7. 存储与跨境传输

核心 API 与 MySQL 数据库目前运行在位于香港的 Google Cloud 基础设施上。餐食图片存放在采用 APAC 区域放置的私有 Cloudflare R2 存储桶中，而非公开图片目录。你请求的 AI 分析可能由 LoseWeight 后端 AI 服务在其所配置的服务地域处理。由于 LoseWeight 面向全球提供服务并使用这些服务提供商，信息可能在你所在国家或地区之外处理。在法律要求的情况下，我们会为跨境传输采取适当保障措施。

8. 保留与账户删除

在账户有效期间或提供服务所需期限内，我们会保留个人资料、餐食及图片数据。你可以在 App 中通过设置 → 删除账户删除账户。删除账户会从活动系统中移除 LoseWeight 个人资料、餐食及已存储的餐食图片，同时删除通过用户标识或匿名标识与你关联的内部产品事件记录及其事件属性。

为防止通过删除并重建账户重置免费次数，我们只会将当前 UTC 日期的已完成扫描次数和免费扫描使用次数保留至下一次每日重置。这些计数通过使用服务端密钥生成的 HMAC-SHA-256 单向摘要，与 App 生成的匿名标识建立对应关系。该短期记录不包含原始设备标识、匿名标识、App 用户 ID 或用户外键。

为恢复购买并防止交易重放或退款后重新授予权益，我们会保留最少量的、已经验证的 StoreKit 交易与生命周期标识及签名载荷摘要，并从这些记录中移除已删除的 LoseWeight 用户引用。如果已签发的图片上传链接在删号后仍可能完成上传，我们还可能保留一条 R2 清理墓碑记录，其中只含对象键、字节数、配额窗口及删除期限，不含用户、个人资料或餐食外键；对象清理和配额到期后，该记录会被移除。

有限备份中的删除可能不会立即完成；出于安全、争议处理、法律合规或条款执行的需要，我们也可能保留严格限定的必要记录。此类记录会受到限制，并在不再需要时删除或去标识化。用于次数限制、购买完整性或对象清理的保留记录不会用于广告或跨 App 追踪。删除 LoseWeight 账户不会取消 Apple 订阅；请另行在 Apple 订阅设置中取消。

9. 安全

我们采取旨在保护信息的管理、技术和物理措施，包括访问控制、私有图片存储及在支持情况下使用加密网络传输。但任何系统都无法保证绝对安全。

10. 你的选择与隐私权利

根据你所在地区，你可能有权访问、更正、删除、限制或反对特定处理，获取可携带副本，或撤回同意。你可以在 App 中更新可用的个人资料字段或删除账户，也可发送邮件至 vokie123@gmail.com。由于账户采用匿名标识，我们可能要求你提供合理必要的信息，以核验请求与相应账户的关联。在适用情况下，你还可以对处理结果提出申诉或联系所在地的数据保护机构。

你可以在设备设置中调整相机和照片权限，并通过 Apple 账户管理订阅和购买历史。

11. 儿童

本服务不面向 13 岁以下儿童，也无意收集其个人信息。如果当地法律规定未获家长同意使用数字服务的最低年龄更高，则以该更高年龄为准。如果你认为儿童在未获得有效许可的情况下提供了信息，请联系我们，以便调查并酌情删除。

12. 政策变更

我们可能会因服务或法律变化更新本政策。我们会在此发布修订后的政策、更新上述日期，并在法律要求时通过 App 提供额外通知。更新后继续使用服务将受修订政策约束，但法律要求另行取得同意的除外。

13. 联系我们

如有隐私问题或请求，请联系：

LoseWeight
电子邮箱：vokie123@gmail.com
网站：https://loseweight.bj8791.com/