Privacy Policy

Last updated: August 21, 2026

This Privacy Policy explains what Colby collects, how it is used, how long it is retained, and what choices are available to you when you use the app.

Language summary

What Colby does

Colby helps users log food, analyze meal and fridge photos, track nutrition progress, and maintain a wellness profile tied to an account.

Colby is a wellness and nutrition product. It is not medical care, a medical device, or a substitute for professional medical advice.

Information we collect

• Account information: email address and account identifiers from Supabase Auth.
• Profile information: name, age, height, weight, unit preference, goal, diet preference, allergies or intolerances, activity level, skin concern, and reminder preferences that the user chooses to enter.
• App progress data: saved meals, nutrition summaries, scan history, reminder setup, and related app state that syncs to the account.
• Scan inputs: food and fridge images submitted for analysis, plus structured scan context such as goal or portion hints.
• Optional meal details: short food-scan notes such as dish name, ingredients, rough weight, or sauce and oil context.
• Usage and security data: request timestamps, approximate request size, status codes, token counts, and limited network metadata such as IP address for abuse prevention and service protection.
• Barcode lookups: barcode values scanned or typed when looking up packaged foods.

How we use information

• To create and maintain accounts.
• To save and restore profile data and synced app progress across devices.
• To analyze food and fridge photos and return nutrition-related results.
• To operate reminders and account settings users choose to enable.
• To detect abuse, rate-limit requests, measure usage, and control service costs.
• To troubleshoot issues, support users, and improve the app experience.

How Colby processes images

When a live food or fridge scan is run, the image is sent to Colby's backend so the request can be authenticated, validated, rate-limited, and processed for analysis.

Colby uses submitted scan images to return the requested nutrition result. Colby does not use food or fridge scan images for advertising or sell them. Signed-in body progress photos, when that feature is used, are backed up to private storage so they can restore after sign-in on another device.

Third-party services

• Supabase: authentication, synced profile data, synced app state, storage, and backend functions.
• AI processing providers: used by Colby's backend to analyze food and fridge images that users intentionally submit for AI results.
• Open Food Facts: barcode-based packaged food lookups.
• RevenueCat and Google Play Billing: subscription entitlement and purchase-status management.

Data storage, retention, and deletion

• Account, profile, goals, preferences, meal history, nutrition progress, reminder settings, favorites, and synced app state: retained while your account is active so the app can sync and restore your data across signed-in devices. This data is deleted when you delete your account or cleared when you use the available reset controls, except where limited retention is needed for security, fraud prevention, abuse prevention, billing records, dispute handling, or legal compliance.
• Food and fridge scan images: processed to generate the requested scan result. Colby does not keep these uploaded scan images as permanent account files after the scan result is returned, unless a separate feature clearly asks you to save an image.
• Body progress photos: retained in private account storage while your account is active and the photo remains part of your saved progress. They are deleted when you delete your account or remove/reset that saved progress.
• AI scan usage, quota, security, and anti-abuse records: retained for up to 90 days for service protection, troubleshooting, cost control, and fraud prevention, unless a longer period is required to investigate abuse, resolve disputes, or comply with law.
• Support and privacy emails: retained for up to 24 months so Colby can respond to requests and keep records of privacy or account-support actions.
• Backups and service-provider copies: deletion from active systems is intended to happen promptly after an account deletion request is completed. Some encrypted backups, logs, or service-provider records may take up to 90 days to expire, unless longer retention is required for security, fraud prevention, billing, dispute resolution, or legal compliance.

Your choices

• Profile details and preferences can be updated in the app.
• Reset my data clears synced profile and app-state data for the signed-in account and removes related local data from the current device.
• Delete account permanently deletes the Colby account, synced data, and local files tied to that account on the current device.
• If you cannot access the app, you can request account deletion or data deletion by emailing calby.support@gmail.com with the subject "Colby Account Deletion Request" and the email address connected to your account.
• Users can contact Colby about account deletion, privacy requests, or support follow-up through the public support page or support email.

Email calby.support@gmail.com for support and privacy requests.

Children's privacy

Colby is not intended for children under 13, and Colby does not knowingly collect personal information from children under 13.