← Back to SHAKA

Privacy Policy

Effective Date: June 25, 2026 · Last updated: June 27, 2026

This Privacy Policy explains how SHAKA ("SHAKA," "the app," "we," "us," "our") collects, uses, and shares information when you use the SHAKA mobile application. SHAKA is operated by Upwan Chachra, an individual developer based in Calgary, Alberta, Canada. If you have any questions, contact krish.aerialmedia@gmail.com.

1. Age restriction

You must be 18 or older to use SHAKA. SHAKA is intended only for users 18 and older. During onboarding, we ask for your date of birth and display a warning that the app is for adults 18+ if the date you enter indicates you are under 18. By creating an account, you confirm that you are 18 or older. We do not knowingly collect personal information from anyone under 18. If we learn we have collected information from someone under 18, we will delete it.

2. Information we collect

• Account information: your email address and a password (stored only in hashed form by our authentication provider).
• Profile and body metrics: date of birth, sex, height, current weight, goal weight, activity level, and dietary preferences. We use these to set up your account, confirm you are 18+, and calculate your nutrition targets.
• Nutrition goals: the daily calorie and macronutrient (protein, carbs, fat) targets calculated from your profile, plus your selected plan and estimate preferences.
• Food and meal logs: the foods and meals you log, their nutrition values and timestamps, any meal photos you submit for analysis (see "Photos and AI analysis"), and dishes you save for reuse.
• Weight history: weights you log over time.
• Streak data: your logging streaks and related counters.
• Subscription and trial status: whether you have an active subscription or free trial. Your purchase is processed by Apple; we receive subscription status through Apple and RevenueCat (see below).
• Technical and usage data: when you use AI-powered features, our servers record your IP address along with which feature was used and a timestamp. We use this only for rate-limiting and to prevent abuse. We do not use any third-party analytics, advertising, or tracking technologies (see "No tracking or advertising").

3. Photos and AI analysis

When you photograph a meal, the image is sent to Google's Gemini API to identify the food and estimate its nutrition. We do not store your meal photos — the image is held only in memory to process your request and is then discarded. Google's processing of the image is governed by Google's own terms. When you log food by text, your text query is sent to the AI and nutrition-database services listed below. We do not use your photos or food data to show you ads or to train our own models.

4. How we use your information

We use your information to provide and operate the app; to confirm you are 18+; to calculate and display your nutrition targets; to analyze the food photos and text you submit and return nutrition estimates; to maintain your logs, streaks, and saved dishes; to process your subscription and free trial; to secure the service and prevent abuse; and to comply with applicable law.

5. Who we share information with

We do not sell your personal information. We share data with the following service providers only as needed to run the app:

• Supabase — our backend and database provider; stores your account and app data. Your data is stored in Supabase's Canada (Central) region.
• Google (Gemini API) — receives your meal photos and food text queries to identify food and estimate nutrition.
• Anthropic (Claude API) — receives food text to break complex dishes into their component ingredients. Text only; no photos.
• USDA FoodData Central — receives food search queries to look up nutrition data.
• Open Food Facts — when you scan a product barcode, the barcode is sent directly from your device to Open Food Facts to look up the product. Because this request goes directly from your device, Open Food Facts can see your device's IP address.
• RevenueCat — our subscription-management provider; receives purchase and entitlement information and a device/user identifier to manage your subscription status.
• Apple — processes your purchase as merchant of record through your Apple ID.

We may also disclose information if required by law or to protect rights, safety, or the integrity of the service.

Your IP address is recorded on our servers for abuse prevention (above) and is not forwarded to Google, Anthropic, or USDA as part of text or photo analysis. The only service that sees your IP directly is Open Food Facts, and only when you scan a barcode.

6. Where your data is stored and processed

Your account and app data are stored in Canada (Supabase, Canada Central region). Some processing happens in other countries: the AI and nutrition-lookup providers above may process your queries and photos on servers in the United States or elsewhere. By using SHAKA, you understand that your information may be transferred to and processed in countries other than your own, which may have different data-protection laws.

7. How long we keep your data

We keep your account and app data for as long as your account is active. Abuse-prevention logs (IP address and feature-usage records) are kept only for a short period for security and are removed when you delete your account. When you delete your account, we delete your data as described below.

8. Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS), hashed passwords, and access controls on our backend. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing (for example, under the EU/UK GDPR or the California CCPA/CPRA). SHAKA gives all users these controls regardless of location:

• Access and correct: you can view and edit your profile and logged data in the app.
• Delete: you can permanently delete your account and all associated data from within the app (Settings → Delete Account). This removes your account and your profile, food logs, weight history, streaks, saved dishes, and abuse-prevention logs. Deleting your account does not cancel your Apple subscription — manage or cancel that in iOS Settings → your Apple ID → Subscriptions.
• Export: to request a copy of your data, email krish.aerialmedia@gmail.com.

You can also exercise any of these rights by emailing krish.aerialmedia@gmail.com. We will not discriminate against you for exercising your rights.

10. No tracking or advertising

SHAKA contains no third-party analytics, advertising, attribution, or tracking technologies. We do not track you across other apps or websites, we do not show ads, and we do not sell or share your personal information for advertising. Because we do not track you, we do not respond differently to "Do Not Track" browser signals.

11. Children

SHAKA is intended only for users 18 and older. We do not knowingly collect personal information from anyone under 18. During onboarding, the app asks for your date of birth and warns you that SHAKA is for adults 18 and older if the date you enter indicates you are under 18. If you believe someone under 18 has provided us information, contact krish.aerialmedia@gmail.com and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the app. Your continued use of SHAKA after changes take effect means you accept the updated policy.

---

Contact