Privacy policy · Energy Center

Information we collect

Energy Center helps you track food and estimate daily calorie needs. Your food history, body measurements, and goals can reveal sensitive information about your health.

Account: email address, a protected password hash, account creation time, sign-in sessions, and password-reset records.
Nutrition: saved foods, barcodes, serving amounts, calories, protein, carbohydrates, fat, fiber, food categories, dated log entries, time zones, and cheat-day markers.
Optional calculator profile: age, sex, height, weight, activity level, and your calorie target and goal settings. You can log foods without filling in this profile.
Billing: Stripe customer and subscription identifiers, subscription status, and billing-period dates. Card information is entered on Stripe's hosted pages.
Security and operations: authentication attempt type, outcome, email, account identifier, time, and a hash derived from the request IP address. Hosting also processes network requests and operational logs. An IP hash is not anonymous information.

How information is used

We use this information to sign you in, save and synchronize entries, display nutrition history, calculate calorie estimates, perform food searches you request, manage subscriptions, send password-reset emails, detect login abuse, and investigate service errors.

The current app does not include advertising or cross-site analytics integrations. Calorie estimates and photo identification are automated tools that you can review and edit; they are not medical diagnoses or treatment recommendations.

Cloudflare: hosts the app, handles network requests, stores account and nutrition records in the database, and provides operational logging.
Stripe: receives your email and payment/subscription information when you use checkout or billing management. Energy Center stores billing identifiers and status, not your full card number.
Resend: delivers transactional emails, including your email address and password-reset link, when email delivery is configured.
Google Gemini: receives the photo you deliberately capture for food identification. The app does not save that image to its account database. Google's processing, retention, and model-improvement terms depend on the service arrangement; this draft does not promise that Google never retains or uses submitted images.
USDA FoodData Central: receives food-search text, including the food name returned by photo identification, to find nutrition information.
Open Food Facts: receives a barcode number to look up a product. Barcode detection happens on your device; that lookup sends the number, not camera video.

Food lookups do not include your account email or full food history in their request payloads. Manual entry is available if you prefer not to use photo or external food searches. Providers may process information in other countries; locations, contractual protections, and applicable transfer safeguards must be confirmed before this policy is finalized.

Cookies and offline storage

A session cookie keeps you signed in for up to 30 days. A time-zone cookie lasts up to one year so entries use your local day. Your browser also stores your theme preference, cached app pages and assets, and food-log entries waiting to sync.

Signing out or submitting account deletion requests that cached account data be cleared from that browser. Clearing can fail or be delayed; you can also clear the site's data in browser settings. This does not erase copies on other devices or JSON files you downloaded.

Retention and deletion

Account, profile, saved food, log, and goal records are kept while your account exists, unless you remove individual records. Deleting a saved food does not erase past log entries that used it. Account deletion removes the account and its foods, logs, cheat days, billing metadata, sessions, and password-reset records from the app's database.

Authentication audit records are retained separately after account deletion. The current service has no automatic deletion schedule for those records. Audit retention and deletion handling must be resolved before this draft becomes a final policy.

Reset links expire after one hour and sessions after 30 days; expiry alone does not remove all stored metadata. Account deletion does not itself erase provider-held backups, operational logs, or Stripe's transaction records. Their retention settings and applicable obligations remain part of the pending review.

Your choices and requests

In the app, you can edit or delete food records and log entries, update your calculator profile and goal, download synced information with Export my data, or choose Delete account from the account menu. Export is available even without an active subscription. Connect and let offline entries sync before downloading.

The download contains account and nutrition records plus relevant billing and security metadata. It excludes passwords, session credentials, reset secrets, IP hashes, unsynced device data, and records held only by external providers.

Depending on your location and the applicable law, you may also have rights to request access, correction, deletion, portability, restriction, or objection, withdraw consent where processing relies on it, or complain to a privacy regulator. The applicable legal bases, request process, and regional details must be confirmed during review. Reading this page or signing up is not presented as explicit consent to health-data processing.

Operator and privacy contact

Operator
Privacy contact email

Changes to this policy

This page carries a dated version so changes can be tracked. Material changes to data handling will need updated disclosures and any notices or permissions that apply before those changes take effect.