Privacy Policy

1. Development Status

Baaha is currently in active development and is not a production service. Do not enter real personal or health data. Data stored during this preview period may be deleted, modified, or lost at any time without notice. There are no guarantees of data security, availability, or persistence during the development phase.

2. Information We Collect

When you use Baaha, we collect the following types of data:

• Account information: name, email address, and authentication credentials when you create an account.
• Self-reported nutrition data: food descriptions, estimated calories, macronutrients, micronutrients, and beverage/alcohol intake that you choose to log.
• Self-reported body data: weight measurements you choose to log.
• Profile information: dietary goals, calorie targets, and preferences you provide during onboarding.
• Usage data: timestamps of interactions and technical metadata needed to operate the Service.

3. How We Use Your Data

We use your data to:

• Provide and operate the nutrition tracking service.
• Display your nutrition history, trends, and progress toward goals.
• Improve the accuracy of AI-generated nutritional estimates.
• Communicate with you about your account or the Service.

4. Health Data Classification

Some of the data you provide, including dietary intake, weight, and nutritional information, may be classified as consumer health data under applicable state laws (including the Washington My Health My Data Act, California Consumer Privacy Act, and similar legislation). We treat all nutrition and body-related data with heightened care and do not sell this data to third parties.

5. Third-Party Data Processing

Your data may be processed by the following categories of third parties in order to provide the Service:

• Backend infrastructure: Convex (database and server functions).
• Hosting and deployment: Vercel.
• Authentication: Third-party auth provider for account login.
• AI processing: When you log food via natural language, your food descriptions may be processed by AI language models to estimate nutritional content. This processing occurs through MCP (Model Context Protocol) client interactions.

We do not sell your personal or health data. We do not share your data with advertisers.

6. Data Retention

We retain your data for as long as your account is active. You may request deletion of your data at any time by contacting us. Upon account deletion, we will delete your personal data and nutrition logs within 30 days, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your data:

• Access: Request a copy of your personal data.
• Deletion: Request deletion of your personal and health data.
• Correction: Request correction of inaccurate data.
• Portability: Request your data in a portable format.
• Withdraw consent: Withdraw consent for data processing where applicable.

To exercise any of these rights, please contact us using the information below.

8. Data Security

We implement reasonable technical and organizational measures to protect your data. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Baaha is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete that data promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@baaha.ai.