Privacy Policy

Last Updated: April 6, 2026

This Privacy Policy (hereinafter "this Policy") describes how we handle your personal information and usage data when you use the Protein Note application (hereinafter "this app"). By using this app, you agree to the handling of information as described in this Policy.

1. Information We Collect

1.1 Account Information

• User ID (for user identification)
• Password (encrypted and stored securely; never stored in plain text)
• Security question and answer (for password reset; encrypted and stored)
• Display name (when using external authentication services)
• Identifiers provided by external authentication services (when using Sign in with Apple or Google Sign-In)
• Authentication method type

1.2 Nutrition and Health Record Data

• Food name and intake amount (grams)
• Nutrient data (protein, calories, fat, carbohydrates)
• Record date and time
• Body weight records
• Nutrition goal settings
• Favorite foods and custom food information
• Recipe information (food combinations)

1.3 Workout and Exercise Data

• Workout session information (date, exercises, weight, reps, sets)
• Workout template information
• Estimated calories burned
• Session notes

1.4 Health Platform Data

With your consent, we collect the following data:

For iOS — Data from Apple HealthKit:

• Step count data
• Walking and running distance
• Body weight data (when auto-sync is enabled)

For Android — Data from Google Health Connect:

• Step count data
• Distance data

Step data is processed on your device, and only daily summaries (steps, distance, calories burned) are stored on the server. Detailed hourly data is not sent to the server. When weight auto-sync is enabled, daily weight data is retrieved from HealthKit and stored on the server.

1.5 AI Feature Data

• AI Image Recognition: Food photos you take or select (sent to an external AI service for recognition processing)
• AI Advice: Summary data of nutrition records and workout history (sent to an external AI service for advice generation)
• AI Voice Assistant: Voice is converted to text on your device. Only the converted text data may be sent to an external AI service. The voice data itself is not sent externally
• Monthly and daily usage counts for AI features
• Meal Photo Log (snap now, log later): Meal photos you take or select are stored only on your device and are not sent to our servers. Only when you run AI recognition is that photo sent to an external AI service for recognition processing

1.6 Community and Social Data

• Public profile information (display name, bio, public setting)
• Friend code (for friend search)
• Friend relationship information (request status, accepted/rejected)
• Reaction information (reaction types on workouts)
• Shared template information
• Activity feed information
• Workout streak and total session count

1.7 Subscription and Billing Data

• Subscription status (free/premium)
• Purchase identification information (purchase date, expiration date, etc.)
• Partial receipt data (for validity verification only)

Credit card numbers, bank account information, and other payment details are processed directly by the Apple Inc. or Google LLC platform. We do not collect or store any such payment information.

1.8 Advertising Data

• Daily rewarded ad view counts (managed per feature)
• The advertising service provider may collect the following data for ad delivery optimization:
  • Advertising identifiers (IDFA / GAID)
  • Device information (model, OS, language settings)
  • Ad interaction data

The collection and use of advertising identifiers follows the privacy policy of each advertising service provider. You can limit or disable ad personalization from your device settings.

1.9 Device and Technical Information

• OS type and version
• Device type
• App version
• Notification settings
• Theme settings (dark/light mode)

1.10 Analytics Data

This app uses Google Firebase Analytics for service improvement, and the following data is automatically collected:

• App usage (screen views, feature usage frequency, session duration)
• Device information (model, OS version, app version)
• Approximate location (country/region level estimated from IP address)
• In-app events (actions such as adding records, changing settings)
• App instance ID (anonymous per-device identifier)

This data is processed as non-personally identifiable statistical information and is used for app improvement and feature development prioritization.

2. Purpose of Use

We use the collected information for the following purposes:

• Providing basic app functions (nutrition recording, workout recording, statistics, goal management)
• User authentication and account management
• AI-powered food recognition, advice generation, and voice-based record entry
• Providing community features (friends, template sharing, reactions)
• Retrieving step data and calculating calories burned
• Automatic retrieval and recording of weight data from HealthKit
• Subscription management and validity verification
• Ad delivery (rewarded ads for free users)
• App improvement and optimization
• Resolving technical issues
• Preventing and detecting unauthorized use
• Providing notification features (reminders, goal achievement notifications, etc.)

3. Storage and Management of Information

3.1 Authenticated User Data

• Data is stored on cloud servers with appropriate security measures
• Communications are encrypted
• Database-level access controls prevent other users from accessing your data
• Passwords and security question answers are hashed using appropriate encryption technology and are never stored in plain text

3.2 Guest Mode Data

• All guest mode data is stored only on your device
• No data is sent to the server
• Data is permanently lost if the app is deleted or the device is reset
• We do not provide guest data recovery

3.3 Locally Stored Data

The following data is stored locally on your device:

• Login session information
• Theme settings
• Legal document consent versions
• Recent foods list
• Subscription status cache
• Ad view counts
• AI advice cache
• Notification settings
• Meal Photo Log photos (stored only on your device; lost if the app is deleted or you change devices. Photos past the retention period for your plan are automatically deleted)

4. Information Sharing with Third-Party Services

This app uses the following third-party services, and data may be sent to each service. Please also review the privacy policies of each service.

4.1 Cloud Service Provider

• Purpose: Database, user authentication
• Data sent: Account information, nutrition records, workout records, weight, step summaries, community data
• Data is stored on cloud servers with appropriate security measures

4.2 AI Processing Service Provider

• Purpose: AI image recognition, AI advice generation, AI voice assistant
• Data sent: Food images, nutrition record summaries, voice recognition text
• Sent data is processed in accordance with the service provider's privacy policy

4.3 Advertising Service Provider

• Purpose: Rewarded ad delivery (for free users)
• Data collected: Advertising identifiers, device information, ad interaction data
• You can disable ad personalization from your device settings

4.4 Analytics Service Provider

• Provider: Google LLC (Firebase Analytics)
• Purpose: App usage analysis, service improvement
• Data collected: Screen view history, feature usage frequency, device information, app instance ID
• Data is sent to Google's servers and processed in accordance with Google's privacy policy
• Details: https://policies.google.com/privacy
• How Google uses data: https://policies.google.com/technologies/partner-sites

4.5 Platform Providers (Apple Inc. / Google LLC)

• Purpose: Sign in with Apple / Google Sign-In, subscription billing, HealthKit / Health Connect integration
• Data sent: Authentication tokens, receipt data (for verification)
• Payment information (credit card numbers, etc.) is processed directly by each platform and is not sent to us

4.6 Product Database Provider (Open Food Facts)

• Provider: Open Food Facts (an open-source product database operated by a non-profit organization)
• Purpose: To retrieve product information and nutritional data for the barcode scanning feature
• Data sent: Only the scanned barcode number (JAN / EAN or other product identifier)
• No account information, location, contact information, or any other personal information is sent
• A barcode number identifies a product, not an individual user
• Details: https://world.openfoodfacts.org/terms-of-use

5. Information Sharing in Community Features

When using community features, the following information is shared between users who have accepted friend requests:

• Public profile information (display name, bio)
• Workout session information (exercise names, dates, etc.)
• Workout streak and total session count
• Reaction information
• Shared workout templates

Detailed nutrition records (food names, intake amounts, nutrient data) and weight data are not shared even between friends.

6. Other Third-Party Disclosures

We will not provide your personal information to third parties except as described in Sections 4 and 5 of this Policy, unless:

• You have given explicit consent
• Required by law or legal process
• Necessary to protect the life, health, property, or other significant interests of you or the public
• In connection with a merger, acquisition, or other business succession (in such cases, the successor will be required to maintain equivalent privacy protections)

7. Data Retention Period

• Your data is retained while your account is active
• Data will be deleted within a reasonable period after account deletion
• Subscription billing records may be retained for a certain period in accordance with legal requirements
• Activity feed items are automatically deleted after a certain period
• Password reset attempt records are retained for a certain period for security reasons

8. Your Rights

You have the following rights:

• The right to request deletion of your account
• The right to request disclosure of stored data
• The right to request correction of data
• The right to disconnect HealthKit / Health Connect integration at any time
• The right to restrict ad personalization from device settings
• The right to disable notifications at any time
• The right to change community feature public settings at any time
• The right to remove friend relationships at any time
• The right to restrict analytics data collection through device settings (limit ad tracking)

To exercise these rights, please use the settings screen or feedback feature within the app.

9. Children's Privacy

This app does not intentionally collect personal information from children under 13. If a child under 13 uses this app, please do so under parental consent and supervision. If we become aware that information from a child under 13 has been collected, we will promptly delete such information.

10. Security Measures

We implement appropriate technical and organizational security measures to protect your data, including communication encryption, encrypted password storage, database-level access controls, and unauthorized access prevention measures.

However, it is technically impossible to guarantee complete security for internet communications and data storage, and we do not guarantee that security breaches will not occur.

11. International Data Transfers

Your data may be stored and processed on servers outside of Japan for service provision. External service providers used by us implement data protection measures in compliance with applicable data protection laws in each country.

12. Changes to This Policy

• We may revise this Policy as necessary
• If there are significant changes, we will notify you through in-app notifications or other appropriate means
• Continued use of this app after changes constitutes acceptance of the revised Policy
• The latest privacy policy is always available within the app

13. Contact Us

For questions about this Privacy Policy or data inquiries, please use the "App Support" feature on the App Store or the feedback feature within the app.

Established: October 14, 2025

Last Updated: April 6, 2026