Privacy Policy

Verdé ("we", "us", "our") operates the Verdé Vegetarian Diet Dashboard (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

By accessing or using the Service, you consent to the data practices described in this policy. If you do not agree with these practices, please do not use the Service.

1.1 Information you provide directly:

• Account information: Name, email address, and profile photo (when you sign in with Google).
• Profile data: Height, weight, BMI, daily calorie target, and dietary preferences you enter.
• Food scans: Photos of meals you upload for AI calorie analysis.
• Chat messages: Questions you ask the AI nutrition coach.

1.2 Information collected automatically:

• Usage data: Pages visited, features used, time spent, and similar interactions.
• Device data: Browser type, operating system, device identifier, and IP address.
• Cookies and similar technologies: See our Cookie Policy for details.

• To provide, operate, and maintain the Service (including AI-powered features).
• To personalize your experience (meal plans, calorie targets, recommendations).
• To analyze usage patterns and improve our features.
• To communicate with you about updates, tips, and support.
• To detect, prevent, and address technical issues, fraud, or security violations.
• To comply with legal obligations.

Under the GDPR, we process your personal data only when we have a legal basis:

• Consent: When you sign in, upload photos, or enable analytics cookies.
• Contract performance: To deliver the Service you requested.
• Legitimate interests: To improve security, prevent abuse, and enhance features.
• Legal obligation: To comply with applicable laws.

You may withdraw your consent at any time by deleting your account or adjusting your cookie preferences.

We do NOT sell your personal data. We may share your information only in these limited circumstances:

• Service providers: Third parties that help us operate (e.g., Google for authentication, AI model providers for food analysis). These providers are bound by confidentiality obligations.
• Legal compliance: When required by law, court order, or government request.
• Business transfers: In connection with a merger, acquisition, or sale of assets.
• With your consent: When you explicitly authorize sharing.

We retain your data only as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Account data is kept until you delete your account. Food scan photos are deleted within 30 days unless you save them to your history.

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure ("Right to be forgotten"): Request deletion of your data.
• Restriction: Request that we limit processing of your data.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Withdraw consent at any time (without affecting prior processing).
• Opt-out of sale: We do not sell your data, but California residents can request opt-out confirmation.

To exercise any of these rights, contact us at privacy@verde.app. We will respond within 30 days.

Your data may be processed in countries other than your own (including the United States). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data.

The Service is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Service or by email. The "Last updated" date at the top reflects when the policy was last revised.

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@verde.app.