ProteinTracker — Privacy Policy

Effective date: 16 July 2026 · Last updated: 16 July 2026

This Privacy Policy explains how Bricks2Clicks-Consulting ("we", "us", "our") collects, uses, discloses and protects your personal data when you use the ProteinTracker mobile application and related services (the "App"). We handle personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA).

1. Who we are

ProteinTracker is operated by Bricks2Clicks-Consulting. If you have any questions about this policy or your personal data, contact our Data Protection Officer, Melvin Tan, at macmelvin.tan@gmail.com.

2. What personal data we collect

When you use the App, we collect:

• Account details — your email address and name (via Google Sign-In).
• Profile details you provide — birth year, sex, and body weight, used only to calculate your daily protein target.
• Health & activity data you enter — body measurements, weight history, water intake, and your logged meals and protein entries.
• Food photos — photos you take of meals for protein estimation (see Section 6).
• Membership data — if a gym sponsors you, your enrollment status and whether you have used the App (for the gym's billing).
• Payment data — if you subscribe directly, payments are processed by Stripe; we do not store your card details.
• Technical data — basic app-usage information needed to operate and secure the service.

On iPhone, if you choose to connect Apple Health, the App may read or write health data you approve; this is never used for advertising and never shared without your consent.

3. How we use your data

• To provide the App: set your protein goal, log and estimate meals, and track your progress.
• To recognise food from the photos you take (see Section 6).
• To administer gym sponsorship — showing your sponsoring gym your enrollment status and whether you actively used the App (for their billing).
• To process direct subscriptions and send you service emails (for example, your welcome/onboarding email).
• To keep the service secure and to comply with legal obligations.

We collect and use this data based on the consent you give when you start using the App, and only for the purposes described here.

4. Who we share it with

We do not sell your personal data. We share it only with service providers who help us run the App, and only as needed:

• Google Firebase — sign-in, database, hosting and email delivery.
• OpenAI — processes your food photos to estimate protein (see Section 6).
• Stripe — processes payments for direct subscriptions.
• Your sponsoring gym — sees your enrollment status and whether you used the App, so it can be billed correctly. Your gym does not see your food photos, weight, measurements, or meal history.

5. Food photos

When you photograph a meal, the image is sent to our food-recognition provider (OpenAI) to estimate the protein content, and the result is returned to your App. We do not store your food photos on our servers after they are processed.

6. International transfers

Some of our service providers (including Google, OpenAI and Stripe) process data on servers outside Singapore. Where personal data is transferred overseas, we take reasonable steps to ensure it receives a standard of protection comparable to the PDPA.

7. How long we keep your data

We keep your personal data only for as long as your account is active and for as long as necessary to provide the App. When you delete your account (see Section 9), we permanently erase your personal data from our systems. We may retain limited records where required by law or for legitimate business purposes such as billing.

8. How we protect your data

Access to your data is protected by authentication and database security rules, so that only you (and, where relevant, your sponsoring gym for the limited data above) can access it. In the event of a data breach that meets the PDPA notification threshold, we will notify the PDPC and affected individuals as required by law.

9. Your rights and choices

Under the PDPA you may:

• Access and correct your personal data — much of it can be edited directly in the App, or you can contact our DPO.
• Withdraw consent to our collection and use of your data.
• Delete your account and data at any time — go to protein-tracker-for-50s.web.app/delete-account, or use the "Delete my account" option in the App, or email our DPO. This permanently erases your account and associated data.

10. Children

ProteinTracker is intended for adults and is not directed at children. We do not knowingly collect personal data from anyone under 18.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here and, where appropriate, notify you in the App. The "Last updated" date above shows when it last changed.