Privacy Policy for Pinchly

Last Updated: June 29, 2026

This Privacy Policy describes how Pinchly ("we", "us", or "our") collects, uses, and shares information when you use the Pinchly: Intermittent Fasting mobile application (the "App"). Pinchly is an intermittent fasting coach with an optional AI selfie feature ("Pinch Score") that estimates facial-composition trends. By using the App, you agree to this Privacy Policy.

Pinchly has no account or login. We do not collect your name, email address, phone number, date of birth, or precise location. You are identified only by an anonymous identifier provided by our payments processor (see Section 1.1).

1. Information We Collect

1.1 Anonymous Identifier
- An anonymous app user ID generated by RevenueCat, our subscription processor. This is not linked to your real-world identity. It is used to recognize your device, deliver your subscription, and associate the data described below.

1.2 Subscription Information
- Your subscription status (for example, whether you have an active subscription and whether it will renew). Payment itself is handled by the Apple App Store; we never receive or store your payment card details.

1.3 Selfie / Face Image (optional Pinch Score feature)
- If you choose to use the Pinch Score feature, you take a selfie. The image is used to generate your Pinch Score and is processed by a third-party AI service (see Section 2). The image is held only temporarily in your device's memory and during processing. We do not save your selfie to your device or to our servers, and we do not store it after your Pinch Score is generated. You can decline or skip this feature and opt out at any time in Settings.

1.4 Pinch Score and Derived Factors
- The numeric Pinch Score and the directional factors derived from your selfie (such as facial leanness, definition, puffiness, and skin clarity), along with a short text summary and a confidence value. These derived values — not the image — are stored on your device and on our backend (Supabase), keyed to your anonymous identifier, so you can track your trend over time.

1.5 Onboarding Answers
- The answers you provide during onboarding to personalize your plan, including your goals, fasting experience, eating pattern, biggest challenge, chronotype, wake and sleep times, daily anchors, commitment level, and health-related safety flags (for example, whether you indicate pregnancy, a history of disordered eating, relevant medication, diabetes, or being under 18). These answers are stored on your device. When you generate a Pinch Score, they are also sent as context to the AI scoring service described in Section 2. They are not otherwise stored on our backend.

1.6 Fasting Activity
- Your fasting sessions (start time, end time, duration, and protocol). This is stored on your device and mirrored to our backend (Supabase), keyed to your anonymous identifier.

1.7 Mood and Hunger Logs
- Optional daily mood and hunger entries. These are stored only on your device and are never transmitted to us or to any third party.

1.8 Push Notification Token
- If you enable notifications, a device push token. Most reminders are scheduled locally on your device and send no data to us. The push token is stored on our backend (Supabase), keyed to your anonymous identifier, to support notifications.

1.9 Device and App State
- Basic app state stored locally on your device, such as your selected theme and whether you have completed onboarding.

We do not collect a weight measurement, advertising identifier (IDFA), or location, and the App does not include advertising or cross-app tracking.

2. Face Image Processing and AI Analysis

2.1 How Your Selfie Is Processed
When you use the Pinch Score feature, your selfie and your onboarding answers are sent to our secure backend function, which forwards them to OpenRouter, which routes the request to Google (Gemini) AI models. The AI estimates facial-composition trends and returns a numeric score and directional factors.

2.2 What Is and Is Not Stored
- Your selfie is processed in real time and is not retained by us. We do not store the image on your device or on our servers after processing.
- Only the resulting Pinch Score and derived factors (text/numbers, not the image) are saved, keyed to your anonymous identifier.
- The image and your answers transit OpenRouter and Google during processing; their handling and retention of that data are governed by their own privacy policies.

2.3 Biometric and Face Data
The Pinch Score feature analyzes a facial image to estimate composition trends. It does not perform facial recognition and is not used to identify you. Because facial analysis may be considered biometric or sensitive information under some laws, we treat it accordingly: the feature is optional, requires you to actively take a selfie, can be skipped or turned off in Settings, and the image is not retained by us.

2.4 Not a Medical or Diagnostic Tool
The Pinch Score is a directional, motivational trend indicator. It is not a body measurement, medical assessment, or diagnosis.

3. How We Use Your Information

We use the information we collect to:
- Build and adjust your personalized fasting plan
- Generate and track your Pinch Score over time
- Provide hour-by-hour fasting guidance, craving support, and reminders
- Deliver and manage your subscription
- Maintain, troubleshoot, and improve the App

4. Data Sharing

We share information with the following third-party service providers, only as needed to operate the App:
- RevenueCat: subscription management and the anonymous app user ID
- Supabase: backend database and secure functions (stores fasting activity, Pinch Score and factors, and push tokens, keyed to your anonymous identifier; hosts the function that processes your selfie)
- OpenRouter and Google (Gemini): AI processing of your selfie and onboarding answers to generate the Pinch Score (see Section 2)
- Expo: delivery of push notifications
- Apple App Store: subscription purchases and billing

We may also use PostHog for privacy-conscious product analytics. This is currently not enabled in the App. If we enable it in the future, we will update this Privacy Policy and the App's privacy disclosures accordingly.

We do not sell your personal information, and we do not use your information for advertising.

5. Data Retention and Deletion

- Selfie images are not retained by us; they are processed in real time and discarded (see Section 2.2).
- Mood and hunger logs and most plan data remain on your device and are removed when you delete the App.
- Pinch Score history, fasting activity, and push tokens stored on our backend are kept while you use the App. Because you have no account, you can request deletion of the backend records associated with your anonymous identifier by contacting us (see Section 9); you can find your app user ID in the App's Settings.
- You can revoke consent for the Pinch Score feature at any time in Settings.

6. Data Security

We use reputable service providers and reasonable technical measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Children's Privacy

The App is not intended for children under 13, and we do not knowingly collect personal information from them. Intermittent fasting is not recommended for people under 18; the App is intended for adults. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version here and revise the "Last Updated" date above. Significant changes will be reflected in the App.

9. Contact Us

If you have any questions about this Privacy Policy, or to request deletion of data associated with your anonymous identifier, please contact us at: contact@intuiv.dev