Eatrion Privacy Policy

1. Types of Information We Process

When you use different features, we process the following information according to the principle of minimum necessity:

Notes:

• SMS verification codes are processed on the server as cryptographic hashes and are not stored long-term in plain text.
• Apple IAP credentials, Huawei IAP credentials, subscription notifications, Alipay order notifications, and related information are used only for payments, purchase verification, entitlement synchronization, revocation or invalidation handling, and audit verification, and not for purposes unrelated to membership services.
• On HarmonyOS NEXT, OAID, ODID, AAID, and other device identifiers are processed only as necessary for system functions, Huawei AppGallery, payments and subscriptions, risk management, statistics, or troubleshooting, depending on device system capabilities, user authorization, and the information actually returned by integrated SDKs.
• Nicknames, profile pictures, posts, comments, images, like or comment counts, and check-in or sharing snapshots you voluntarily publish are displayed within the community.
• When voluntarily sharing weight, food, or exercise records or related images, choose the scope of public disclosure carefully and avoid uploading sensitive information such as identity document numbers, contact details, detailed addresses, medical records, or diagnostic certificates.
• If you decline to provide required information, the relevant feature may be unavailable, but other available features will not be affected, where applicable.

2. How We Collect Information

We collect information in the following ways:

• Information you provide: When registering or signing in, completing your profile, entering food information, taking or uploading photos, or submitting AI analysis or generation requests;
• Community features: When you publish posts, comments or replies, like or report content, delete your own content, view notifications, or share weight, food, or exercise records, we process the information necessary to display community content, enable interactions, and moderate the community;
• Authorized device access: When you take photos or select images from your library, we access the camera or photo library permissions and relevant images with your authorization;
• Information generated automatically during use: Authentication information, logs, network request metadata, membership status, and order processing records;
• Membership purchases and restoring purchases: When you subscribe through Huawei AppGallery IAP on HarmonyOS NEXT, subscribe or restore purchases on iOS, or activate, renew, or upgrade membership through Alipay on Android, we process the transaction, order, and subscription status information necessary to verify purchases and synchronize entitlements;
• Notifications from payment providers and app stores: Providers such as Huawei AppGallery or Huawei IAP, Apple, and Alipay may return necessary payment results, subscription status, revocation or invalidation status, or asynchronous notifications;
• Information returned by the HarmonyOS NEXT system or SDKs: When you use relevant features or grant system permissions, the system, relevant Huawei services, or integrated SDKs may return necessary information such as permission status, device identifiers, app version, system version, and network status;
• Third-party sign-in: With your authorization, third-party platforms return necessary public profile information or identifiers to us.

3. How We Use Information

We use your personal information only to the extent necessary for the following purposes:

• Completing account registration, sign-in, and identity verification;
• Providing food logging, food image recognition, nutrition analysis, recommendations, and AI generation features;
• Providing community feeds, check-in sharing, comments and replies, likes, reports, content review, message notifications, and management of your own posts;
• Reviewing community content for safety, preventing spam and abuse, managing risks, handling violations, and resolving disputes;
• Displaying membership products, activating benefits, renewing or upgrading membership, restoring purchases, and synchronizing subscription status;
• Handling server-side purchase verification, status refreshes, grace periods, revocation or invalidation, and expiration for Apple and Huawei AppGallery auto-renewing subscriptions;
• Handling Alipay order creation, payment confirmation, order cancellation, compensation, customer service verification, and dispute resolution;
• Performing API authentication, session management, rate limiting, and security risk management;
• Resolving faults and maintaining service stability;
• Fulfilling obligations under laws and regulations.

Without your consent, we will not use your personal information for purposes unrelated to those listed above, unless otherwise provided by laws or regulations.

4. How We Share, Transfer, and Publicly Disclose Information

4.1 Sharing

To provide core features, we may share the minimum necessary information with third-party service providers to the extent needed:

• SMS providers: to send sign-in verification codes, such as Alibaba Cloud SMS;
• AI model providers: to process your image analysis and AI generation requests, such as configured providers including Qwen, DeepSeek, and Kimi;
• Content safety providers: to review the safety of community text, images, and publicly displayed content and identify risks;
• Huawei AppGallery or Huawei IAP: for HarmonyOS NEXT membership subscription payments, server-side purchase verification, auto-renewal status synchronization, subscription management, revocation or invalidation notifications, and entitlement verification;
• Apple or the App Store: for iOS membership subscription payments, server-side purchase verification, auto-renewal status synchronization, restoring purchases, revocation or invalidation notifications, and entitlement verification;
• Alipay: for Android membership order creation, payment confirmation, order queries, order closure, entitlement verification, and dispute resolution;
• Infrastructure or cloud providers: for system deployment, network transmission, and security protection.

We require third parties to process information within the authorized scope and adopt appropriate security measures.

4.2 Transfer

As a general rule, we do not transfer your personal information. If a merger, division, restructuring, asset transfer, or similar event involves transferring information, we will notify you as required by law and require the recipient to remain bound by this policy.

4.3 Public Disclosure

We will not proactively disclose your personal information publicly unless we obtain your separate consent or laws or regulations expressly require it.

However, nicknames, profile pictures, posts, comments, images, interaction counts, and snapshots of weight, food, or exercise records that you voluntarily publish or choose to make public in the community will be shown to other users according to community feature rules.

5. How We Store and Protect Information

5.1 Storage Location and Retention Periods

• We retain your information for the shortest period necessary to fulfill the purposes of the service;
• Food logs, membership status, and account profiles are generally retained while your account exists so that you can review your history and continue using the service;
• Community posts, comments, interactions, notifications, and shared snapshots are generally retained while your account exists or the content has not been deleted. After you delete your content, relevant information may still be retained for a necessary period for security audits, report handling, dispute resolution, or legal requirements;
• Community reports, content reviews, risk management records, and violation handling records may be retained for a necessary period for security audits, dispute resolution, or legal requirements;
• Payment orders, subscription transactions, Apple server notifications, Huawei IAP notifications, Alipay notifications, and records relating to revocations, invalidations, order issues, or disputes may be retained for a necessary period for financial reconciliation, security audits, dispute resolution, platform rules, or legal requirements;
• After the retention period expires, we will delete or anonymize your information unless laws or regulations provide otherwise;
• Information relating to security audits and dispute resolution may be retained for the legally prescribed period.

5.2 Security Measures

We take reasonable and practicable measures to protect your information, including but not limited to:

• Access control and permission management;
• Minimizing the processing of sensitive information;
• Server-side verification of payment and subscription credentials;
• Security logs and anomaly monitoring;
• Account credential management and authentication mechanisms.

Please understand, however, that the internet is not completely secure. Please safeguard your devices and account credentials.

6. Your Rights

To the extent provided by laws and regulations, you have the following rights regarding your personal information:

• Inquiry and access: View your account, profile, membership status, and related order information;
• Correction and supplementation: Update information such as your nickname, profile picture, height, and weight;
• Deletion: Delete your own community posts or comments, or request deletion of relevant information, subject to laws, regulations, and platform rules;
• Withdrawal of consent: Withdraw authorization for data processing for certain features, which may make those features unavailable;
• Account deletion: Submit an account deletion request by contacting us if the current version does not provide an in-app one-click account deletion option.

Please understand that payment, subscription, financial, community moderation, security audit, and dispute resolution records that must be retained under law or platform rules may not be deletable immediately.

To exercise these rights, or for community reports, privacy infringement, or content disputes, please contact us as described in the “Contact Us” section of this policy.

7. Protection of Minors

We value the protection of minors' personal information. If you are under 14, please use this app with your guardian's consent and guidance.

Guardians should carefully manage minors' membership activation, subscriptions, payments, and community posting. When using community features, minors should avoid publicly disclosing sensitive information such as personal health information, weight, location, contact details, school, home address, or medical records. Guardians with questions about the protection of minors' information may contact us using the details provided in this policy.

8. Updates to This Privacy Policy

We may update this policy in response to changes in laws or regulations or adjustments to our business. Updated versions will be published on in-app pages, our official website, or through other reasonable means.

If an update materially affects your rights and obligations, we will provide a more prominent notice.

9. Contact Us