Weight Loss: SlimPanda Privacy Policy

Effective Date: June 22, 2026

This privacy policy applies to the Weight Loss: SlimPanda app (hereby referred to as the "Application") for mobile devices that was created by MD TECH (hereby referred to as the "Service Provider") as a Commercial service. This service is intended for use "AS IS".

Information Collection and Use

The Application collects information when you download and use it. This information may include:

- Your device's Internet Protocol address (e.g., IP address)

- The pages of the Application that you visit, the time and date of your visit, and the time spent on those pages

- The time spent on the Application

- The operating system you use on your mobile device

The Application does not gather precise information about the location of your mobile device.

In addition, the Application collects the following user-provided data to deliver its core features:

- Body measurements: height, weight, age, and sex

- Weight goal and weekly loss target

- Food log entries: meal type, food name, calories, protein, carbs, fat, and fiber

- Water intake records

- Food photos and text descriptions submitted for calorie estimation

Health and Fitness Data

With your explicit permission, the Application may access health and fitness information through Apple HealthKit, including but not limited to step count, active energy burned, standing hours, walking and running distance, workouts, and other health-related metrics.

This health and fitness data is used solely to provide, improve, and personalize the health, fitness, calorie tracking, weight management, and wellness features of the Application. The Application reads HealthKit data to display your daily activity progress and to provide context-aware coaching through the AI Coach feature.

The Service Provider does not use HealthKit data or other health-related information for advertising, marketing, profiling, or data-mining purposes. Health and fitness data is never sold to third parties.

HealthKit data is not shared with third-party AI services unless you explicitly consent through the in-app AI Coach consent prompt. When shared, only the data types listed in the consent prompt (step count, active calories, and standing hours) are transmitted. HealthKit data is never used for advertising or to train AI models.

You can revoke HealthKit permissions at any time through the Apple Health app or your device's Settings.

AI-Powered Features and Third-Party AI Services

The Application includes AI-powered features that rely on OpenAI's API to function. These features require your explicit consent before any data is transmitted. You will be presented with a consent prompt the first time you use each feature, and no data is sent until you agree.

1. AI Calorie Estimation

When you use the photo scan or text description feature to estimate calories, the following data is sent to OpenAI's servers:

- Food photos you take or select from your library

- Food descriptions you type

- Meal type (e.g., breakfast, lunch, dinner, snack)

No health data, personal information, weight, or account details are included in these requests.

2. AI Coach (SlimPanda Coach)

When you use the AI Coach chat feature, your chat messages are sent to OpenAI's servers. To provide personalized advice, the Coach may also access the following data from your account:

- Food log entries and calorie totals

- Water intake records

- Weight history and trends

- Step count, active calories burned, and standing hours (from Apple Health)

- Your health goals (target weight, daily calorie goal, daily water goal)

This data is retrieved by the server and included in the AI request only when the Coach needs it to answer your question.

3. How Your Data Is Protected

- All data is transmitted securely over encrypted connections (HTTPS/TLS).

- OpenAI processes data solely to generate responses and does not use data submitted via its API to train its AI models, in accordance with OpenAI's API data usage policy.

- No AI-generated content is stored by OpenAI beyond the time needed to process your request.

- Your chat history with the Coach is stored in your private account and can be deleted at any time by clearing the chat.

- You can withdraw your consent at any time by resetting the Application's data through your device settings.

Cloud Services and Data Storage

The Application uses Google Firebase to provide its backend services, including:

- Firebase Authentication: to manage user sign-in (via Apple Sign-In or email)

- Cloud Firestore: to store your food logs, water intake, weight entries, health goals, and coach chat history

- Firebase Cloud Functions: to securely process AI requests on the server side without exposing API keys to your device

Your data is stored on Firebase servers located in the United States. Data is associated with your authenticated user account and is not accessible to other users.

Third-Party Access

The Application may share data with the following third-party services:

- OpenAI: receives food photos, food descriptions, meal types, chat messages, and (with consent) health and activity data for the AI-powered features described above. OpenAI does not use API data to train its models.

- Google Firebase: provides authentication, database, and server-side processing as described above.

- Apple HealthKit: the Application reads health data from HealthKit with your permission. No data is written back to HealthKit.

- RevenueCat: manages subscription status. RevenueCat receives your anonymous app user ID and purchase records but does not receive health or food data.

Beyond the services listed above, personal and health data is not sold, rented, or shared with any other third parties for advertising, marketing, or data-mining purposes.

Opt-Out Rights

You can stop all data collection by the Application by uninstalling it. You may use the standard uninstall process available on your mobile device or via the mobile application marketplace.

To stop data sharing with AI services specifically, you can avoid using the AI Coach and calorie estimation features. Consent for these features can be reset by clearing the Application's stored data through your device settings.

Data Retention Policy

The Service Provider will retain your data for as long as you use the Application and for a reasonable time thereafter. If you would like your data to be deleted, please contact the Service Provider at app-support@md-tech.in, and they will respond within a reasonable timeframe.

Coach chat history is retained in your account until you manually clear it or request account deletion.

Account and Data Deletion

You may request complete deletion of your account and all associated data by contacting app-support@md-tech.in. Upon receiving your request, the Service Provider will delete your account data, including food logs, weight entries, water intake records, health goals, and coach chat history, within a reasonable timeframe.

Children's Privacy

The Application is not directed to users under the age of 13. The Service Provider does not knowingly collect personal information from children under 13. If the Service Provider discovers that a child under 13 has provided personal information, it will be promptly deleted. If you are a parent or guardian and you are aware that your child has provided personal information, please contact the Service Provider at app-support@md-tech.in.

Security

The Service Provider implements reasonable administrative, technical, and physical safeguards to protect the information collected and processed through the Application. All data transmitted between the Application and backend services is encrypted using industry-standard protocols.

Changes to This Privacy Policy

The Service Provider may update this Privacy Policy from time to time. You are advised to review this page periodically for any changes. The Service Provider will notify you of any changes by posting the updated Privacy Policy on this page and updating the effective date.

This Privacy Policy is effective as of June 22, 2026.

Contact Us

If you have any questions about this Privacy Policy or the Application's data practices, please contact the Service Provider at:

Email: app-support@md-tech.in