Bulletproof Privacy

Privacy Policy

Last Updated: July 2026

1. Introduction

Welcome to Metaboil Ai. We recognize that your health and fitness data is profoundly personal. Our engineering and legal architecture is built on a "Privacy-First" and "Local-First" methodology.

This Privacy Policy outlines how we collect, process, and fiercely protect your data. It is fully compliant with global data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Digital Personal Data Protection Act, 2023 (India).

2. Data Collection & Local Storage

We believe in absolute data minimization. The health metrics required to personalize your Metaboil Ai experience remain strictly under your control.

Local-First Architecture

We collect sensitive health data including Age, Gender, Height, Weight, BMI, Medical Conditions, Allergies, and Diet Preferences.

CRITICAL SECURITY: ALL of this personal health and biometric data is stored LOCALLY on your specific device using an AES-256 encrypted Hive Database. We DO NOT store this health data on our servers.

The only data synced to our secure backend (via Firebase Auth & Firestore) is your basic account credential (Email/UID) and your "Pro Subscription Status" to ensure you can access premium features across devices seamlessly.

3. Camera & Live Vision Privacy

Metaboil Ai features "Zen Vision" — an advanced live posture and form-tracking intelligence utilizing your device's camera.

STRICT ZERO-STORAGE CAMERA POLICY

When using Zen Vision, we utilize Google ML Kit strictly for on-device processing to detect body landmarks in real-time.

ABSOLUTE RULE: We DO NOT record, save, cache, or upload ANY video, screenshots, or live camera frames to any remote server. Every frame is processed locally within your device's RAM to calculate angles and posture, and is instantly discarded within milliseconds.

4. AI Cloud Processing (Google Gemini API)

To deliver our world-class hyper-personalized diet plans and real-time menu scanning, we leverage the power of cloud-based AI.

  • Anonymized Data: When generating routines, your biological parameters (e.g., allergies, goals) are entirely anonymized before being transmitted.
  • Image Scanning: Images captured for food/menu analysis are sent securely over enterprise-grade TLS encryption to the Google Gemini API.
  • No Data Selling: This data is processed by our third-party AI provider (Google) strictly to generate your immediate nutritional response. We NEVER sell your data to brokers or advertisers.

5. Third-Party Integrations & Monetization

To keep certain features free and support our infrastructure, we integrate with secure third-party services:

  • Google AdMob: We utilize AdMob for Rewarded and Native advertisements. AdMob may collect device identifiers (such as Android Advertising ID or Apple IDFA) and utilize cookies to deliver personalized advertising. You can opt out of personalized ads via your device settings.
  • Affiliate Links & Smart Routing: Our app uses smart routing to redirect you to e-commerce platforms (e.g., Blinkit, Swiggy, Amazon, Walmart) for grocery purchases. We do not track, capture, or store your payment information or activities on these external third-party applications.
  • Open Food Facts API: Barcode scanning for nutritional intel is processed via the Open Food Facts API using completely anonymous network requests.

6. User Sovereign Rights & Data Deletion

In accordance with the GDPR, CCPA, and India DPDP Act, you possess absolute sovereignty over your digital footprint within Metaboil Ai.

Your Rights Include:

  • The right to be informed of data collection.
  • The right to access and rectify your data.
  • The right to restrict processing.

The Right to Erasure ("Wipe Data")

Users can utilize the "Delete Account" and "Wipe Data" features directly within the app settings. Activating this instantly and permanently erases all local Hive database records from your device and obliterates your Firebase Auth records from our authentication servers. This action is irreversible.

7. Children's Privacy

Metaboil Ai is architected for adult users. The app is not intended for children under the age of 13 (or under 18 for specific medical/dietary advice) without explicit, verified parental consent.

If we discover that we have inadvertently collected personal data from a child under the legal threshold without consent, we will immediately purge that information from our authentication systems.

8. Grievance Officer & Contact Information

For inquiries regarding this Privacy Policy, to exercise your data rights, or to escalate a privacy concern in accordance with the India Digital Personal Data Protection (DPDP) Act 2023, please contact our designated Grievance Officer.

Data Protection & Grievance Office

Email: support@metaboilai.com

We aim to respond to all valid data subject requests within 30 days of receipt.