Your diary and your privacy choices.
Owner details required before launch
Geri must provide and approve the following before a wider launch: Operator / data-controller legal identity and trading name; Public business/service address and jurisdiction details; Privacy/data-rights contact and support/cancellation contact; Retention and deletion periods by data category, including backups; Reviewed lawful bases, sensitive-data handling and international transfers; Reviewed eligibility, consumer cancellation/refund terms and final legal approval. No values or legal approval have been assumed.
Your account and diary
Nibble Track uses your account, food entries, recipes and profile information to provide tracking and insights. Diary pages require sign-in. Nutrition estimates are not medical advice.
Services used to run the app
Clerk provides sign-in, Stripe handles billing, and Replit provides hosting, database and file storage. AI features use the configured OpenAI integration to process the information you submit for an estimate or conversation. Do not submit information you do not want processed for that feature.
Optional analytics
Custom funnel events use Replit-hosted analytics only when its Publishing tracker is available and you allow custom events. Event properties are approved categories only: no food names, photos, body data, chat text, email addresses, account IDs, transaction IDs or monetary amounts. Campaign attribution is limited to approved campaign codes. The hosting platform separately controls automatic pageviews; your in-app choice controls custom events, not that injected script.
Your choices
You can decline optional analytics and keep using the app. Privacy choices lets you change that decision. Browser privacy signals are respected. Sign-in and browser storage needed for app features are separate from optional analytics; setup drafts may be saved in this browser.
Managing your data
Settings contains personal API-token revocation and account deletion. ChatGPT OAuth connections are separate from personal tokens; disconnecting a ChatGPT app is managed there. Account deletion is irreversible. A full self-service data export and in-app OAuth-grant controls are not currently provided.
About this notice
This is a practical description of the current app, not a claim of legal certification. It does not replace service-provider privacy notices. Operator contact information, retention schedules and any additional legal terms must be maintained by the app owner before a wider marketing launch.