CanIEat Privacy Policy

1. Scope

1. This Privacy Policy applies to the Service and CanIEat-related websites operated by us.
2. Services provided by Apple, Google, or other third parties may be governed by their own privacy policies.
3. Where a specific notice or consent screen within the Service provides different or additional information, that specific notice may apply to the relevant processing.

2. Information We Collect

We may collect the following information to the extent necessary to provide and operate the Service.

3. How We Collect Information

We collect information through:

1. Information that you enter or submit directly
2. Permissions you grant for camera, photo library, or other device features
3. Sign in with Apple, Google Sign-In, or other authentication services
4. Purchase and subscription information received from the App Store, Google Play, or a subscription management provider
5. Logs, device information, and usage information collected automatically when you use the Service
6. Support requests, surveys, and feedback

We access your camera or photo library only when you grant permission through your device. You may change these permissions in your device settings, but disabling a permission may prevent certain features from working.

4. How We Use Information

We use information for the following purposes:

1. To provide, maintain, and operate the Service
2. To authenticate users and manage accounts
3. To analyze images of food, meals, menus, and food labels
4. To estimate foods, ingredients, languages, calories, and nutrition information
5. To translate menus, food labels, and other text
6. To display results based on dietary restrictions, allergies, and preferences
7. To provide calorie, nutrition, meal, and weight tracking features
8. To provide AI responses, meal suggestions, and personalized features
9. To manage free and paid usage limits
10. To verify purchases, subscriptions, and access to paid features
11. To restore purchases and provide billing-related support
12. To respond to support requests, feedback, and bug reports
13. To investigate crashes, errors, and service disruptions
14. To improve the performance, quality, usability, and safety of the Service
15. To prevent fraud, unauthorized access, abuse, and circumvention of usage limits
16. To enforce our Terms of Service and other rules
17. To provide important service, security, or policy notices
18. To comply with legal obligations and protect our rights

We do not use allergies, dietary restrictions, health goals, weight records, food images, or AI consultation content for third-party targeted advertising.

If we introduce advertising or materially different uses of information in the future, we will provide appropriate notice, obtain consent where required, and update this Privacy Policy.

5. AI Analysis and Automated Processing

1. We may automatically process images, meal records, dietary restrictions, nutrition information, AI consultation content, and other information to generate analysis results, translations, nutrition information, and personalized recommendations.
2. AI and automated results may contain errors, incomplete information, or estimates.
3. The Service is not a substitute for medical diagnosis, treatment, or professional advice from a doctor, dietitian, or other qualified professional.
4. For food allergies or other decisions that could seriously affect your health, you should not rely only on the Service. You should verify information with the food label, manufacturer, restaurant, or an appropriate professional.
5. We may process submitted content and generated results as necessary to provide the Service, improve quality, maintain security, and investigate errors.
6. If we use personal information for general AI model training or for a third party's independent purposes, we will provide any notice or obtain any consent required by applicable law.

6. Service Providers and External Services

We use external providers to operate the Service. These providers may process information on our behalf only to the extent necessary for their services.

7. Disclosure of Information

We do not disclose personal data that identifies you to third parties except:

1. With your consent
2. To service providers processing information on our behalf
3. Where required by law, regulation, legal process, or a valid governmental request
4. Where necessary to protect the life, health, safety, or property of a person and obtaining consent is difficult
5. Where necessary for public health or the protection of children and obtaining consent is difficult
6. Where cooperation with a public authority is required and obtaining consent could interfere with the authority's duties
7. In connection with a merger, acquisition, reorganization, asset sale, or other business transfer
8. Where necessary to investigate fraud, security threats, abuse, or violations of our Terms
9. As otherwise permitted by applicable law

We do not sell your personal data.

8. International Data Transfers

1. Providers of cloud, AI, authentication, payment, and subscription services used by the Service may be located outside Japan or outside your country of residence.
2. Your information may therefore be stored or processed in Japan, the United States, or other countries and regions.
3. Privacy laws in those countries may differ from the laws in your country.
4. Where required, we use reasonable safeguards such as contractual protections, access controls, encryption, and other security measures.
5. Where applicable law requires consent or additional information for an international transfer, we will take the required steps.

9. Data Retention

1. We retain information while your account remains active or for as long as reasonably necessary to provide the Service and fulfill the purposes described in this Privacy Policy.
2. When you delete your account, we delete or anonymize personal data associated with the account within a reasonable period, except where retention is required or justified for legal compliance, fraud prevention, dispute resolution, transaction verification, or other legitimate purposes.
3. Information may remain temporarily in backups, logs, or disaster-recovery systems after deletion. Such information is not used for ordinary business purposes and is removed according to the applicable backup cycle.
4. Purchase and transaction information may be retained for periods required for accounting, tax, fraud-prevention, dispute-resolution, or other legal and operational purposes.
5. Information that has been anonymized so that it no longer identifies an individual may be retained for statistics, analysis, and service improvement.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, disclosure, alteration, destruction, or misuse.

These measures may include:

• Encryption in transit
• Access controls
• Authentication and permission management
• Logging and monitoring
• Software and system updates
• Provider due diligence and oversight
• Backups where appropriate
• Incident investigation and response procedures

No method of internet transmission or electronic storage can be guaranteed to be completely secure.

11. Your Rights and Choices

Subject to applicable law, you may have the right to request:

• Information about how your data is used
• Access to your personal data
• Correction or completion of inaccurate data
• Deletion of personal data
• Restriction or objection to processing
• Suspension of use
• Suspension of disclosure to third parties
• Withdrawal of consent
• Account deletion
• Other rights available under the law of your country or region

You may be able to manage certain information or delete your account through the settings within the Service.

For requests that cannot be completed within the Service, contact us using the details in Section 16. We may need to verify your identity before responding.

We may be unable to grant all or part of a request where retention or processing is required or permitted by law. Where appropriate, we will explain the reason.

12. Account Deletion

1. You may request account deletion through the account deletion feature within the Service or another method designated by us.
2. After account deletion, meal history, weight records, preferences, AI consultation history, and other data may no longer be recoverable.
3. Deleting your CanIEat account does not automatically cancel a subscription purchased through the Apple App Store or Google Play.
4. If you have an active paid subscription, you should cancel it through the App Store or Google Play before deleting your account.
5. See the CanIEat Terms of Service and the applicable store instructions for cancellation details.

13. Children's Privacy

1. The Service is not generally directed to children under 13.
2. A child under 13 may use the Service only with any consent and supervision required from a parent or legal guardian under applicable law.
3. If we learn that we collected a child's personal information without required consent, we will take reasonable steps to delete it.
4. A parent or legal guardian who believes that a child's information was collected improperly should contact us.

14. Users in the EEA, United Kingdom, and Other Regions

For users in the European Economic Area, the United Kingdom, or other regions with applicable data-protection laws, we process personal data on one or more lawful bases, including performance of a contract, consent, compliance with legal obligations, and our or a third party's legitimate interests.

Depending on applicable law, you may have rights of access, correction, deletion, restriction, objection, data portability, and withdrawal of consent.

Withdrawal of consent does not affect the lawfulness of processing completed before the withdrawal.

You may also have the right to lodge a complaint with a data-protection supervisory authority in your country or region.

15. Changes to This Privacy Policy

1. We may change this Privacy Policy to reflect changes in law, the Service, the technologies we use, or our privacy practices.
2. We will post the revised policy and update the "Last Updated" date.
3. If a change materially affects your rights or how we use information, we will provide notice through the Service, email, or another appropriate method and obtain renewed consent where required.
4. We will not use information for a new purpose requiring consent without obtaining that consent.

16. Contact Us

For questions about this Privacy Policy, our handling of personal information, privacy requests, or account deletion, contact:

• Entity: xperiy LLC
• Service: CanIEat
• Email: support@xperiy.com
• Contact page: https://can-i-eat.app/en/contact/
• Address: 2F Ginza Otake Bizidensu, 1-22-11 Ginza, Chuo-ku, Tokyo 104-0061, Japan

17. Governing Language

This Privacy Policy may be provided in multiple languages.

If there is any inconsistency or difference in interpretation between the Japanese version and a translated version, the Japanese version will prevail, except where otherwise required by applicable law.

18. Governing Law

This Privacy Policy is governed by the laws of Japan.

If a dispute arises in connection with this Privacy Policy or our handling of personal information, we and the user will first attempt to resolve the dispute through good-faith discussions.