Core Privacy Summary: Broccoli is built offline-first. When used in guest mode, your food entries, weights, and measurements never leave your device. When you create an account, data syncing and AI scanning are strictly secured, never shared with advertisers, and never sold. All instrumentation is local. Crash reporting strips all personal diary content and request bodies.
1. Introduction
This Privacy Policy describes how Broccoli ("we", "our", or "us"), developed by Bidya Bhushan Nanda, handles information when you use our mobile application and backend services.
Account Information: If you choose to create an account, we collect your email address and password hash. Guest mode requires no account or email.
Profile Attributes: Age/birth date (to enforce safety floors and age gates), biological sex (for metabolic formula estimates), height, and activity level.
Diary & Body Logs: Food names, portion weights in grams, calories, macronutrients, body weight readings, and notes.
Photos: When you use AI plate scanning, meal photos are sent to our secure API for nutritional recognition.
B. Data Generated by the App
Calculated metabolic estimates, including Total Daily Energy Expenditure (TDEE) and target intake.
Confidence tiers and mathematical uncertainty ranges (± margin of error) for logged items.
Exponentially weighted moving average (EWMA) trend weight.
C. Information We Do NOT Collect
No GPS or precise location data.
No contacts or address books.
No browsing or web history.
No advertising identifiers (such as Google Advertising ID or IDFA).
No third-party behavioral tracking or analytics SDKs.
3. How We Use Your Information
To calculate nutritional targets and provide body composition tracking.
To process meal photographs via our server-side Google Gemini Vision integration.
To synchronize your diary across your authenticated devices.
To enforce safety floors that protect against unhealthy caloric restriction.
To transmit essential account security messages (such as password reset and email confirmation).
We do NOT sell your data. We do NOT use your health data for advertising, marketing, or commercial profiling.
4. Crash Reporting and Diagnostics
We use Sentry for crash reporting to detect and resolve technical faults. In compliance with our strict privacy rules, crash reporting is configured with automated scrubbers that operate before any data leaves the device or API:
All HTTP request and response bodies are completely removed.
All URL query parameters and tokens are stripped.
All food names, weights, calories, macros, notes, photos, and barcodes are expunged and replaced with redactions.
Authentication tokens, passwords, cookies, and user IP addresses are completely purged.
Only technical stack traces, exception types, app version, and OS platform survive in error reports.
5. Third-Party Sub-Processors
We work with select infrastructure sub-processors strictly to deliver app capabilities:
Google Gemini API: Processes meal photographs for nutritional estimation. Photographs are processed via server-to-server API and are not permanently stored on our servers.
Google Play Billing: Processes optional subscriptions and digital entitlements. Financial payment information is handled directly by Google Play and never touches our servers.
6. Data Retention and Deletion
Local Data: Stored in an encrypted SQLite database on your device. You can export or clear this data at any time.
Account Data: Synchronized account rows are retained on the server until you delete your account.
Account Deletion: You can delete your account at any time within the app (Settings > Account > Delete Account) or remotely via our web portal. Deletion permanently purges all server-held credentials, synced food records, snapshots, and scan history.
7. Your Rights
Regardless of your jurisdiction, Broccoli provides full data sovereignty:
Data Portability: Complete JSON database and CSV log export is available directly in Settings.
Right to Erasure: Instant account and data deletion available in-app and on the web.
GDPR / CCPA / DPDP Rights: You may request access, correction, or erasure of your personal data by contacting privacy@bidyabhushan.in.
8. Children's Privacy
Broccoli is not intended for children under 13 years of age. Users under 13 are refused registration at onboarding. We do not knowingly collect personal information from individuals under 13.
9. Contact Information
For any questions, requests, or concerns regarding this policy, please contact: