RytDait ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use and store it, and your rights as a user.

RytDait is a meal-planning and habit tool. It does not diagnose, treat, cure, or prevent any disease, and it is not a substitute for professional medical advice.

1. Information We Collect

We collect the following categories of information when you use RytDait:

• Account credentials: phone number or email address used for authentication via Firebase
• Health profile: name, age, gender, weight, height, health conditions, food allergies, dietary restrictions, and fitness goals — provided by you to personalise meal plans
• Meal & usage data: meal logs, cuisine preferences, streak history, and in-app activity
• Device information: device identifier used to enforce single-device session security
• Purchase data: subscription status and original transaction identifiers from Apple IAP (we do not store full payment card details)

2. How We Use Your Information

• Generate and refresh personalised 7-day meal plans on our backend servers (using third-party AI providers — see Section 4)
• Track nutrition progress, habit streaks, and plan history
• Personalise meal suggestions using dietary preferences, goals, and conditions you choose to share (for planning only — not medical advice)
• Manage your subscription, billing status, and access tier
• Send meal reminders and streak notifications (only with your permission)
• Improve the accuracy and quality of our AI meal planning models
• Comply with legal obligations

3. Data Storage & Security

• Your account and profile data is stored in MongoDB (cloud-hosted, encrypted at rest)
• Authentication is handled by Firebase Authentication (Google LLC); session tokens are stored securely on your device
• All data in transit is encrypted using HTTPS/TLS
• Health and profile data is never sold or shared with advertisers
• Access to your data is restricted to authorised backend services only

4. Third-Party Services

We use the following third-party services that may process your data:

• Firebase Authentication (Google LLC) — manages user login; subject to Google's Privacy Policy
• Local device notifications — meal reminders and streak alerts are scheduled on your device (not remote push / FCM); they require your notification permission
• Apple In-App Purchase — processes subscription payments on iOS; Apple receives purchase data as required for billing verification
• Google Play Billing — processes subscription payments on Android; Google receives purchase data as required for billing verification
• AI / LLM providers (OpenAI and Anthropic) — meal plans are generated on our servers only; the app never contacts AI providers directly. We send diet-related profile data (e.g. age, weight, health conditions, allergies, goals, cuisine, and meal preferences) to generate plans. We do not send your name, email, phone number, or account identifiers to AI providers

6. Data Retention

• Active accounts: data is retained for as long as your account exists and you remain active
• Inactive accounts: if you do not use the App for 90 consecutive days, we automatically delete your account and associated personal data
• Deleted accounts: all personal data is permanently removed within 30 days of deletion (immediate for in-app delete; next scheduled purge for inactivity)
• Cached meal plans on your device expire automatically after 30 days
• Subscription transaction records may be retained for up to 7 years to comply with Indian tax and accounting regulations

7. Single-Device Policy

For security, RytDait allows only one active session per account. Signing in on a new device automatically terminates the previous session. No additional personal data is collected for this purpose beyond the device identifier.

8. Children's Privacy

RytDait is not intended for users under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at admin@rytdait.com and we will delete it promptly.

9. International Users

RytDait is operated from India. If you access the App from outside India, your data may be transferred to and processed in India. By using the App, you consent to this transfer in accordance with this Privacy Policy.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via in-app notification. Your continued use of the App following any update constitutes acceptance of the revised policy.