Privacy & Data Protection

Privacy Policy

Last Updated: August 2026GDPR & CCPA/CPRA Compliant

Executive Summary: Privacy-by-Design

Unitrition is built with a Privacy-by-Design philosophy (Zero-Knowledge Guest Mode): you can calculate Bread Units (BU / ХЕ), build meal plates, and analyze nutrients 100% locally in your browser. If you choose to create an account, data is stored with encrypted Row Level Security in Supabase. Payments are securely managed by Paddle as our Merchant of Record (Unitrition never accesses or stores credit card numbers).

1. Data Architecture & Information We Collect

The information we process depends on how you interact with our platform:

A. Guest Mode (No Registration)

All food calculations, plate models, and ratios execute on your device and are persisted in local browser storage (IndexedDB/LocalStorage). They are never transmitted to our servers.

B. Registered Accounts (Supabase)

If you register to sync across devices, we store your Email, profile name, and your saved meal templates in a PostgreSQL database secured with Row Level Security (RLS).

2. Payment Processing & Subscriptions (Paddle)

For Biohacker Pro memberships, we use Paddle (Paddle.com Market Limited) as our Merchant of Record (MoR). Paddle handles financial transactions, billing, international taxes (VAT/Sales Tax), and payment card security under PCI-DSS Level 1 certification.

Unitrition never receives, processes, or stores your full credit or debit card numbers.

3. Multimodal AI Ephemeral Processing

When utilizing photo or voice meal recognition features, image or audio data is transmitted ephemerally to language vision models (OpenAI / Gemini) strictly to segment food ingredients and estimate portion weights. They are never used for biometric facial profiling or permanently stored to train third-party models.

4. Cookies & Google Analytics Consent Mode

We utilize Google Analytics 4 (GA4) for aggregated, anonymous performance metrics. In strict compliance with the ePrivacy Directive and GDPR, analytics storage is denied by default until you explicitly grant consent through our privacy banner.

5. Your Privacy Rights (GDPR & CCPA)

Under the GDPR (Europe) and CCPA/CPRA (California), you have the right to:

  • Access your account profile and saved meal templates.
  • Request correction or rectification of your data.
  • Request complete deletion of your account (Right to Erasure).
  • Export your plate templates in portable formats (JSON/PDF).
  • Opt-out of data sales (Unitrition never sells personal data).

To manage your rights directly, visit our Your Data Rights Portal.

6. Contact Our Privacy Team

If you have any questions, concerns, or wish to exercise your data rights, contact us anytime at:

support@unitrition.info