Privacy Policy
Last updated: March 11, 2026
Tapify Inc. ("we", "our", or "us") operates the Burn mobile application and website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
1. Information We Collect
We collect information you provide directly to us:
- Account Information: Name, email address, and authentication data when you create an account via Google Sign-In or Apple Sign-In.
- Profile Data: Age, gender, weight, height, activity level, fitness goals, and dietary preferences you provide during onboarding.
- Usage Data: Food logs, workout history, weight entries, streaks, and progress data you input into the app.
- Food Images: Photos you take for AI food analysis. These are processed to identify food items and nutritional content.
- Health Data: Step count and activity data from Apple Health (with your explicit permission).
- Payment Information: Billing details processed securely by our payment providers (Stripe and Apple). We do not store your full credit card number.
2. How We Use Your Information
- Provide, maintain, and improve our services
- Calculate personalized calorie and macro targets
- Analyze food images using AI to estimate nutritional content
- Track your fitness progress and generate insights
- Process payments and manage subscriptions
- Send notifications about streaks, achievements, and reminders (with your permission)
- Improve our AI models and app features using anonymized, aggregated data
- Respond to customer support requests
3. Data Sharing
We do not sell your personal data to third parties. We may share information with:
- Service Providers: Firebase (Google Cloud) for data storage and authentication, OpenAI for food image analysis, Stripe for payment processing.
- Legal Requirements: When required by law, legal process, or to protect the rights and safety of our users.
4. Data Storage & Security
Your data is stored on Firebase (Google Cloud) servers with industry-standard encryption in transit and at rest. We implement technical and organizational measures to protect your data, including:
- SSL/TLS encryption for all data transmission
- Firebase security rules to prevent unauthorized access
- Encrypted local storage on your device (Hive encryption)
- Regular security audits
5. Data Retention
We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access, correct, or delete your personal data
- Export your data in a portable format
- Withdraw consent for data processing
- Opt out of marketing communications
- Lodge a complaint with your local data protection authority
7. Children's Privacy
Our Service is not intended for children under 13. We do not knowingly collect personal data from children under 13. If we learn we have collected such data, we will delete it promptly.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
9. Contact Us
If you have questions about this Privacy Policy, please contact us: