Privacy Policy

Same Privacy Policy

Effective Date: June 26, 2026
Last Updated: June 26, 2026

This Privacy Policy explains how Same (“Same,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information when you access or use the Same mobile application, website, software, content, artificial-intelligence or automated tools, subscriptions, and related services (collectively, the “Service”).

Same is a United States-only general wellness calorie-tracking service. The Service is intended only for individuals located in the United States who are at least 18 years old. If you are under 18, or if you are located outside the United States, do not use the Service.

This Privacy Policy is incorporated into and forms part of the Same Terms of Service. Capitalized terms not defined in this Privacy Policy have the meanings given in the Terms of Service. If this Privacy Policy conflicts with the Terms of Service about how personal information is collected, used, disclosed, retained, or protected, this Privacy Policy controls for that issue.

Contact: sameappsupport@gmail.com

1. Important Health, Wellness, and Privacy Notice

Same is a general wellness calorie-tracking app only. Same is not medical advice, not a medical device, and not for diabetes, blood glucose, insulin dosing, medication decisions, allergies, pregnancy, eating disorders, therapeutic diets, emergencies, or any medical condition. Calorie, nutrition, ingredient, allergen, and food-recognition information may be wrong. You should not rely on Same for medical, safety, allergy, medication, or emergency decisions, and you should consult a licensed healthcare professional for health or medical guidance.

Because Same involves food, calorie, nutrition, weight, body, activity, image, and wellness-related features, some personal information you provide may be considered sensitive personal information, consumer health data, or similar protected information under certain U.S. state privacy laws. This Privacy Policy describes how we handle that information.

Do not submit medical records, clinical records, insurance records, diagnostic information, prescription information, information about another person, or information that you do not want processed as described in this Privacy Policy. Same is not intended for use by healthcare providers, health plans, healthcare clearinghouses, or their business associates to create, receive, maintain, or transmit protected health information under HIPAA unless Same separately agrees in writing.

2. Summary of Key Privacy Practices

This summary is not a substitute for the full Privacy Policy.

Topic	Summary
Age	Same is for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18.
Location	Same is intended for U.S. users only.
Health and nutrition data	Food logs, calories, nutrition estimates, photos, body metrics, goals, activity data, and related information may be sensitive.
Medical use	Same is not a medical app and should not be used for medical, diabetes, allergy, pregnancy, eating-disorder, medication, emergency, or therapeutic purposes.
Payments	App Store, Google Play, or other payment processors may process subscriptions and payments. We generally do not store full payment-card details.
Sale of data	We do not sell personal information for money. We do not sell consumer health data. Certain advertising or analytics technologies, if enabled, may be considered “sharing” or “targeted advertising” under some privacy laws.
HealthKit / Health Connect	If Same offers Apple HealthKit, Google Health Connect, or similar integrations, connected health data is used only with your permission and is not used for advertising or sold.
Your rights	Depending on your state and applicable law, you may request access, correction, deletion, portability, opt-out, limitation of sensitive data use, withdrawal of consent, and appeal of certain decisions.
Contact	Email privacy and support requests to sameappsupport@gmail.com.

3. Personal Information We Collect

We collect personal information in three main ways: directly from you, automatically through your use of the Service, and from third parties or integrations.

3.1 Information You Provide Directly

Depending on the features you use, we may collect:

Account and profile information, such as name, email address, username, password or authentication credentials, account ID, date of birth or age confirmation, sex, gender, general location such as country or state, profile photo, and preferences.
Food, calorie, nutrition, and wellness information, such as food logs, meal entries, drinks, serving sizes, calorie estimates, macronutrients, micronutrients, ingredients, dietary preferences, dietary restrictions, grocery or barcode entries, fasting or meal timing, nutrition goals, weight goals, activity goals, and other wellness goals.
Body and measurement information, such as height, weight, body mass index, body measurements, progress entries, progress photos, activity level, fitness level, and related trends or goals.
Photos, images, voice, and other inputs, such as food photos, barcode images, uploaded images, camera inputs, metadata, voice logs, text notes, prompts, feedback, and any other content you submit for food recognition, calorie estimation, journaling, or other Service features.
Health, fitness, and device-connected information, if you choose to connect a third-party service, wearable, device, Apple HealthKit, Google Health Connect, Google Fit, Samsung Health, or similar repository. This may include data such as weight, activity, steps, workouts, calories burned, sleep, heart-rate-related data, or other information you authorize.
Subscription, purchase, and transaction information, such as subscription status, product purchased, purchase date, renewal status, trial status, cancellation status, App Store or Google Play transaction identifiers, receipts, and refund status. Full payment-card details are generally processed by third-party payment platforms and not stored by Same.
Communications and support information, such as your email address, messages, support requests, screenshots, attachments, survey responses, reviews, bug reports, feedback, and other information you send to us.
User Content, such as entries, notes, images, logs, comments, preferences, files, and other information that you upload, submit, sync, store, or transmit through the Service.
Consent, acknowledgement, and legal acceptance records, such as the version of the Terms of Service or Privacy Policy you accepted, acceptance timestamp, account ID, app version, device information, and screens or notices shown to you.

3.2 Information Collected Automatically

When you use the Service, we and our service providers may automatically collect:

Device and technical information, such as device type, device model, operating system, app version, browser type, language, time zone, mobile carrier, device settings, screen size, and system configuration.
Identifiers, such as IP address, account ID, device identifiers, app instance identifiers, advertising identifiers where enabled, cookie identifiers, push notification tokens, and other online identifiers.
Usage information, such as pages or screens viewed, features used, buttons tapped, entries created, searches, session duration, subscription screen interactions, referral information, crash logs, diagnostic data, performance data, error logs, and other interactions with the Service.
Approximate location, such as country, region, state, or city inferred from IP address or device settings. We do not collect precise geolocation unless a feature requires it, you grant permission, and we provide any legally required notice or consent.
Cookies, SDKs, and similar technologies, such as cookies, pixels, local storage, software development kits, analytics tools, crash-reporting tools, attribution tools, and similar technologies used to operate, secure, analyze, improve, and market the Service.

3.3 Information From Third Parties

We may receive personal information from:

App stores and payment platforms, such as Apple App Store, Google Play, RevenueCat, Stripe, or similar providers, including subscription status, receipts, transaction IDs, and purchase validation information.
Login providers, such as Apple, Google, or other sign-in providers, if you use them to create or access your account.
Connected health, fitness, or device services, if you authorize a connection.
Analytics, attribution, and advertising providers, if such tools are enabled, including information about app installs, ad campaign performance, device identifiers, and interactions with ads or marketing.
Service providers, such as hosting, storage, database, authentication, AI processing, image processing, food-recognition, customer-support, email, security, fraud-prevention, and crash-reporting providers.
Other users or third parties, if a feature allows sharing, invitations, referrals, groups, comments, or other user-submitted information involving you.
Public or commercially available sources, where permitted by law and relevant to security, fraud prevention, compliance, support, or business operations.

4. Sensitive Personal Information and Consumer Health Data

Same may collect information that is sensitive because it relates to food, calorie intake, nutrition, weight, body metrics, physical activity, wellness goals, photos, or information that could allow someone to infer something about your health.

This may include:

food logs, meal entries, calories, macronutrients, ingredients, and serving sizes;
dietary preferences, restrictions, goals, and nutrition patterns;
weight, height, body measurements, BMI, and progress photos;
activity, fitness, and wellness information;
information imported from HealthKit, Health Connect, Google Fit, Samsung Health, wearables, or other connected services;
images, voice logs, notes, prompts, or metadata you submit;
inferences, trends, estimates, summaries, recommendations, and Output generated from the information above.

We may use this information to provide the Service, generate calorie and nutrition estimates, personalize your experience, maintain and secure the Service, troubleshoot issues, comply with law, and exercise or defend legal rights. Where required by law, we will obtain your consent before collecting, using, sharing, or otherwise processing consumer health data or sensitive personal information.

We do not sell consumer health data. We do not use Apple HealthKit, Google Health Connect, Google Fit, Samsung Health, or similar connected health repository data for advertising or targeted advertising. We do not knowingly use precise geofencing around healthcare facilities to identify, track, collect consumer health data from, or send health-related advertising to users.

5. How We Use Personal Information

We may use personal information for the following purposes:

Provide and operate the Service, including account creation, authentication, food logging, calorie tracking, nutrition estimates, photo-based recognition, barcode scanning, recommendations, reminders, trends, reports, and other features.
Generate and display Output, including food identification, calorie estimates, nutrition estimates, meal insights, goal tracking, progress summaries, and other automated or AI-assisted outputs.
Personalize the Service, including tailoring content, settings, reminders, goals, recommendations, and user experience based on your entries and preferences.
Process subscriptions and purchases, including validating receipts, managing trials, confirming subscription status, preventing fraud, and supporting refunds or billing-related requests handled by app stores or payment processors.
Communicate with you, including responding to support requests, sending service messages, security notices, account notices, legal notices, subscription notices, policy updates, and other transactional communications.
Send marketing communications, where permitted by law and your settings, including product updates, offers, surveys, and promotions. You may opt out of marketing emails, but not necessary transactional messages.
Analyze, maintain, and improve the Service, including debugging, analytics, testing, research, product development, performance measurement, quality control, and development of new features.
Develop, test, evaluate, and improve automated systems and AI features, subject to applicable law, user settings, provider restrictions, and this Privacy Policy. We may use aggregated, de-identified, or anonymized information for these purposes.
Maintain safety and security, including detecting, preventing, and responding to fraud, abuse, unauthorized access, scraping, spam, harmful activity, security incidents, policy violations, and illegal conduct.
Protect rights and enforce terms, including enforcing the Terms of Service, investigating violations, preserving evidence, resolving disputes, managing pre-litigation or litigation matters, and limiting damages.
Comply with law, including responding to lawful requests, subpoenas, court orders, regulatory requests, tax obligations, consumer-rights requests, and other legal obligations.
Carry out business operations, including audits, accounting, recordkeeping, compliance, vendor management, corporate governance, financing, restructuring, merger, acquisition, sale, transfer, bankruptcy, or other business transactions.
Create aggregated, de-identified, or anonymized information, which we may use and disclose for analytics, research, product improvement, business, and other lawful purposes.

6. AI, Food Recognition, and Automated Processing

Same may use automated systems, machine learning, artificial intelligence, food-recognition technology, image analysis, language models, databases, algorithms, and third-party technology providers to process User Content and generate Output.

When you submit a food photo, barcode, meal description, voice log, note, prompt, body metric, goal, or other input, Same and its service providers may process that information to provide features such as food identification, calorie estimates, macro estimates, serving-size estimates, summaries, suggestions, and progress trends.

Automated processing may be wrong, incomplete, biased, delayed, or unsuitable for your circumstances. Same is not a medical service, and automated Output should not be treated as medical, nutritional, allergy, medication, diabetes, pregnancy, eating-disorder, emergency, or safety-critical advice.

Where we use service providers to process AI, image, or recognition requests, we authorize them to process personal information to provide services to us, support the Service, maintain security, comply with law, and perform other permitted service-provider functions. We do not authorize service providers to sell your consumer health data. We do not use connected health repository data from Apple HealthKit, Google Health Connect, Google Fit, Samsung Health, or similar integrations for advertising.

7. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients:

Service providers and contractors. We may disclose information to companies and individuals that provide services for us, such as hosting, cloud storage, databases, authentication, analytics, crash reporting, AI processing, image recognition, food database processing, customer support, email delivery, push notifications, security, fraud prevention, subscription validation, payment processing, legal, accounting, and compliance services.
App stores and payment processors. If you purchase a subscription or in-app product, Apple, Google, Stripe, RevenueCat, or similar providers may process payment and subscription information under their own terms and privacy policies. We may exchange information with them to validate purchases and manage access.
Third-party integrations you choose. If you connect Same to HealthKit, Health Connect, Google Fit, Samsung Health, a wearable, or another third-party service, we may exchange information with that service as authorized by you and as needed to provide the connected feature.
Analytics providers. We may disclose device, usage, diagnostic, and interaction information to analytics providers to understand and improve the Service.
Advertising, attribution, and marketing partners. If advertising, attribution, or marketing technologies are enabled, we may disclose limited identifiers, device data, commercial information, and usage information to measure campaigns, prevent fraud, attribute installs, and deliver or measure advertising. We do not sell consumer health data, and we do not use connected health repository data for advertising.
Professional advisors. We may disclose information to lawyers, auditors, accountants, insurers, banks, consultants, and other professional advisors.
Authorities and legal recipients. We may disclose information to courts, law enforcement, regulators, government authorities, or other parties when we believe disclosure is required or permitted by law, legal process, or valid legal request.
Safety, rights, and enforcement recipients. We may disclose information when we believe it is necessary or appropriate to protect Same, users, others, or the public; investigate or prevent fraud, abuse, security incidents, or illegal activity; enforce our Terms; or pursue remedies and limit damages.
Business transaction recipients. We may disclose or transfer information in connection with an actual or proposed merger, acquisition, financing, investment, reorganization, bankruptcy, sale of assets, transfer of business, or similar transaction.
Other users or the public. If Same offers social, sharing, leaderboard, community, group, review, testimonial, referral, or public-profile features, information you choose to share may be visible to other users or the public based on the feature and your settings.
Recipients you authorize. We may disclose information at your direction, with your consent, or as otherwise disclosed when you provide the information.

8. No Sale of Consumer Health Data; Targeted Advertising Choices

We do not sell consumer health data. We do not sell personal information for money.

Some privacy laws define “sale,” “sharing,” “targeted advertising,” or “cross-context behavioral advertising” broadly. If Same uses advertising, attribution, analytics, cookies, pixels, or mobile SDKs that disclose identifiers, device information, internet or electronic network activity, commercial information, or approximate location to third parties for targeted advertising or cross-context behavioral advertising, that activity may be considered a “sale,” “sharing,” or “targeted advertising” under certain laws.

If such technologies are enabled, you may opt out by:

emailing sameappsupport@gmail.com with the subject line “Privacy Opt-Out Request”;
using any privacy or advertising settings made available in the Service;
adjusting your device advertising settings, such as limiting ad tracking or resetting your advertising ID;
adjusting cookie settings in your browser, where applicable;
using a legally recognized universal opt-out mechanism, such as Global Privacy Control, where required by applicable law and technically supported.

Opt-outs may be browser-specific, device-specific, or account-specific depending on the technology. You may need to repeat choices on each browser or device you use.

9. Cookies, SDKs, and Similar Technologies

We and our service providers may use cookies, pixels, local storage, software development kits, mobile measurement tools, analytics tools, crash-reporting tools, and similar technologies to:

keep the Service working;
remember preferences;
authenticate users;
maintain security;
prevent fraud and abuse;
analyze performance and usage;
debug crashes and errors;
measure subscriptions, installs, and campaigns;
improve the Service;
deliver or measure advertising where enabled.

You can control some cookies through browser settings. You can control some mobile identifiers through device settings. If you disable cookies or identifiers, some features may not work correctly.

Same does not guarantee that every third-party browser, platform, or device-level signal will be recognized, but we will honor legally required opt-out preference signals to the extent required by applicable law and technically feasible.

10. Apple HealthKit, Google Health Connect, Google Fit, Samsung Health, and Similar Integrations

If Same offers integrations with Apple HealthKit, Google Health Connect, Google Fit, Samsung Health, wearables, connected devices, or similar services, we collect connected data only if you authorize the connection and grant the relevant permissions.

Connected data may include information such as weight, steps, activity, workouts, calories burned, sleep, heart-rate-related data, or other health and fitness data you authorize.

For connected health repository data:

you control permissions through the relevant third-party service, device, operating system, or app;
you may revoke permissions through the relevant settings;
we use connected data to provide requested Service features, such as calorie tracking, activity estimates, goal tracking, and trends;
we do not use Apple HealthKit, Google Health Connect, Google Fit, Samsung Health, or similar connected health repository data for advertising;
we do not sell connected health repository data;
we do not disclose connected health repository data to advertising partners;
your use of the third-party service remains subject to that third party’s terms and privacy policy.

If you revoke permission, Same may stop receiving new connected data, but information previously imported into Same may remain in your Same account unless you delete it or submit a deletion request, subject to retention permitted or required by law.

11. User-Generated Content and Shared Features

If Same offers features that allow you to post, share, invite, message, join groups, appear on leaderboards, publish reviews, submit testimonials, or otherwise make information available to others, the information you choose to share may be visible to other users or the public.

Do not share information through public or social features unless you are comfortable with others seeing, copying, saving, or further disclosing it. We may not be able to control what other users do with information you share.

12. Marketing Communications and Push Notifications

We may send you service-related communications, such as account notices, support messages, subscription notices, receipts, policy updates, security alerts, and other transactional messages. These messages are part of the Service and may not be fully opt-outable while you maintain an account.

Where permitted by law and your settings, we may send marketing emails, offers, product updates, surveys, or promotional messages. You may opt out of marketing emails by using the unsubscribe link in the message or by emailing sameappsupport@gmail.com.

If you enable push notifications, you may disable them through your device settings. Disabling push notifications may affect reminders, alerts, and other Service features.

13. How We Protect Personal Information

We use reasonable technical, organizational, and administrative safeguards designed to protect personal information against unauthorized access, disclosure, loss, misuse, alteration, and destruction.

These safeguards may include encryption in transit, access controls, authentication, logging, monitoring, vendor review, internal restrictions, and other security practices appropriate to the nature of the information and the Service.

No app, website, database, network, system, or transmission is completely secure. We cannot guarantee absolute security. You are responsible for using strong passwords, protecting your devices, keeping your login credentials confidential, and promptly notifying us if you believe your account has been compromised.

If we discover a security incident involving personal information, we will evaluate the incident and provide notices where required by applicable law, which may include state data breach laws or health data breach notification obligations if applicable.

14. How Long We Retain Personal Information

We retain personal information for as long as reasonably necessary to provide the Service, maintain your account, fulfill the purposes described in this Privacy Policy, comply with law, resolve disputes, enforce agreements, prevent fraud or abuse, maintain security, preserve business records, and exercise or defend legal rights.

Retention periods depend on the category of information, the sensitivity of the information, the purpose for collection, legal requirements, operational needs, backup practices, and user settings or deletion requests.

Examples of retention criteria include:

Account information is generally retained while your account is active and for a reasonable period afterward as needed for legal, security, backup, fraud-prevention, dispute-resolution, and business-record purposes.
Food, wellness, body, and progress information is generally retained while your account is active or until you delete it, subject to backup, legal, security, dispute-resolution, and compliance needs.
Subscription and transaction records may be retained as needed for accounting, tax, refund, fraud-prevention, app-store compliance, and legal purposes.
Support communications may be retained as needed to respond to requests, maintain records, improve support, resolve disputes, and protect rights.
Device, usage, analytics, crash, and diagnostic information may be retained for product improvement, security, debugging, fraud prevention, and business analytics.
Legal acceptance records may be retained as long as needed to prove acceptance, enforce terms, comply with law, and defend claims.
Backups may retain information for a limited period after deletion before being overwritten according to backup cycles, unless retention is required for legal, security, or dispute-related reasons.
Aggregated, de-identified, or anonymized information may be retained indefinitely where permitted by law.

If we de-identify information, we will maintain and use it in de-identified form and will not attempt to re-identify it except as permitted or required by law.

15. Your Choices and Controls

You may have the following choices:

Account access and updates. You may update certain account information through the Service, if available, or by contacting us.
Account deletion. You may delete your account through the Service, if available, or by emailing sameappsupport@gmail.com. Account deletion does not automatically cancel a subscription purchased through Apple, Google, or another app store.
Data deletion. You may request deletion of personal information, subject to legal exceptions and retention rights.
Data access or portability. You may request access to personal information or a portable copy where required by law.
Correction. You may request correction of inaccurate personal information.
Marketing opt-out. You may opt out of marketing emails through unsubscribe links or by contacting us.
Targeted advertising opt-out. You may opt out as described in Section 8.
Sensitive information limitation. Where applicable, you may request that we limit the use or disclosure of sensitive personal information to permitted purposes.
Withdrawal of consent. Where processing is based on consent, you may withdraw consent, subject to legal and operational limits.
Health integration permissions. You may disconnect HealthKit, Health Connect, Google Fit, Samsung Health, wearables, or similar integrations through the relevant device, platform, or Service settings.
Device permissions. You may control camera, photo library, microphone, notifications, motion, and other permissions through your device settings.
Appeal. Where required by law, you may appeal our decision on a privacy request by emailing us with the subject line “Privacy Appeal.”

To exercise privacy rights, email sameappsupport@gmail.com with the subject line “Privacy Request.” Include the right you want to exercise, the email address associated with your account, and enough information for us to verify and process your request.

We may need to verify your identity before fulfilling a request. We may deny or limit requests where permitted by law, such as where we cannot verify your identity, need to retain information for legal or security reasons, need information to complete a transaction you requested, or where an exception applies.

You may use an authorized agent where permitted by law. We may require proof that the agent is authorized and may require you to verify your identity directly with us.

We will not discriminate against you for exercising privacy rights that apply to you.

16. U.S. State Privacy Rights

Depending on where you live and whether a particular state privacy law applies to Same, you may have rights to:

confirm whether we process personal information;
access personal information;
obtain a portable copy of personal information;
delete personal information;
correct inaccurate personal information;
opt out of sale, sharing, targeted advertising, or certain profiling;
limit the use or disclosure of sensitive personal information;
withdraw consent for certain processing;
obtain information about categories of third parties receiving information;
appeal a decision on a privacy request;
avoid discrimination for exercising privacy rights.

These rights may apply only to residents of certain states and only when the relevant law applies to Same. We may provide the same request method to all U.S. users even when a state law does not require it.

To submit a request, email sameappsupport@gmail.com with the subject line “Privacy Request.” To appeal, email sameappsupport@gmail.com with the subject line “Privacy Appeal.”

17. California Privacy Notice at Collection and CCPA/CPRA Disclosures

This section applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), applies to Same.

17.1 Categories of Personal Information Collected

The table below describes categories of personal information we may collect, the sources, purposes, disclosure categories, whether the category may be sold or shared under California law, and retention criteria.

Category	Examples	Sources	Purposes	Disclosed To	Sold or Shared?	Retention Criteria
Identifiers	Name, email address, username, account ID, IP address, device identifiers, app instance ID, advertising ID where enabled, push token	You; device; service providers; app stores; login providers	Account creation, authentication, support, security, analytics, subscriptions, communications, legal compliance	Service providers, app stores, analytics providers, advertising/attribution partners where enabled, legal recipients, business transaction recipients	Not sold for money. May be “shared” for targeted advertising if advertising/attribution technologies are enabled and you have not opted out.	While account is active and as needed for security, legal, backup, fraud-prevention, dispute-resolution, and business purposes
Customer records / personal information under Cal. Civ. Code § 1798.80	Name, email, account records, support records, subscription records	You; app stores; service providers	Provide Service, support, subscriptions, legal compliance, dispute resolution	Service providers, app stores, professional advisors, legal recipients	Not sold for money. Generally not shared for targeted advertising except limited identifiers or commercial information where enabled.	As needed for account, support, legal, tax, accounting, dispute, and business purposes
Protected classification characteristics	Age or age confirmation, sex, gender, or similar information if you provide it	You	Eligibility, personalization, calorie and nutrition estimates, analytics, legal compliance	Service providers	Not sold or shared for targeted advertising by Same	While account is active and as needed for legal, security, backup, and service purposes
Commercial information	Subscription status, products purchased, trial status, transaction IDs, receipts, purchase history, refund status	You; app stores; payment processors; service providers	Subscription access, receipt validation, billing support, fraud prevention, analytics, legal and accounting records	App stores, payment processors, service providers, analytics providers, professional advisors	Not sold for money. May be shared for advertising measurement or targeted advertising if such technologies are enabled and you have not opted out.	As needed for subscription, tax, accounting, refund, fraud-prevention, legal, and business purposes
Internet or electronic network activity	App usage, screens viewed, features used, taps, searches, session duration, crash logs, diagnostic data, referral data, cookie/SDK data	Device; Service; analytics providers; service providers	Operate, secure, debug, analyze, improve, personalize, prevent fraud, measure performance and campaigns	Service providers, analytics providers, advertising/attribution partners where enabled, legal recipients	Not sold for money. May be shared for targeted advertising if advertising technologies are enabled and you have not opted out.	As needed for analytics, security, debugging, legal, fraud-prevention, and business purposes
Geolocation data	Approximate location from IP address or device settings; precise location only if a feature requires it and you grant permission	Device; service providers	Security, fraud prevention, localization, analytics, feature operation if enabled	Service providers, analytics providers, advertising/attribution partners where enabled for approximate location only	Approximate location may be shared for targeted advertising if such technologies are enabled and you have not opted out. Precise geolocation is not sold or shared by Same unless separately disclosed and legally permitted.	As needed for feature operation, security, analytics, legal, and business purposes
Audio, electronic, visual, thermal, olfactory, or similar information	Food photos, progress photos, barcode images, voice logs, uploaded images, metadata	You; device; Service	Food recognition, calorie estimates, progress tracking, support, troubleshooting, AI processing, Service improvement where permitted	Service providers, AI/image-processing providers, support providers, legal recipients	Not sold by Same. Not shared for targeted advertising by Same.	While account is active or until deleted, and as needed for backup, security, legal, dispute, and service purposes
Sensitive personal information	Account login credentials; health, nutrition, food, body, weight, activity, wellness, and connected health data; precise geolocation if enabled	You; device; integrations; service providers	Provide requested features, security, account access, calorie tracking, wellness tracking, personalization, legal compliance	Service providers, connected integrations you authorize, legal recipients, business transaction recipients where permitted	Not sold by Same. Consumer health data is not sold. Connected health repository data is not used for advertising.	While account is active or until deleted, and as needed for backup, security, legal, dispute, compliance, and service purposes
Inferences	Preferences, goals, trends, habits, likely foods, estimated serving sizes, calorie estimates, nutrition estimates, progress summaries, personalization	Service; algorithms; User Content; service providers	Provide Output, personalize Service, analytics, improve features, support wellness goals	Service providers, analytics providers where appropriate	Not sold for money. May be shared only if based on non-sensitive advertising/usage data and targeted advertising technologies are enabled; health inferences are not sold by Same.	While account is active or as needed for service, analytics, security, legal, and business purposes
Other information you provide	Support messages, feedback, survey responses, reviews, attachments, notes, bug reports	You	Support, troubleshooting, product improvement, legal compliance, dispute resolution	Service providers, professional advisors, legal recipients	Not sold by Same. Generally not shared for targeted advertising.	As needed for support, legal, dispute, business, and product-improvement purposes

17.2 California Rights

Subject to legal limits and verification, California residents may have the right to:

know the categories and specific pieces of personal information collected;
know the categories of sources, purposes, and recipients of personal information;
request deletion of personal information;
request correction of inaccurate personal information;
opt out of sale or sharing of personal information;
limit use and disclosure of sensitive personal information where applicable;
receive information about financial incentives, if any;
not be discriminated against for exercising CCPA/CPRA rights.

Same does not sell personal information for money. Same does not sell consumer health data. If Same uses technologies that constitute “sharing” for cross-context behavioral advertising, you may opt out as described in Section 8.

17.3 Sensitive Personal Information

We use sensitive personal information for purposes permitted by law, including to provide requested Service features, maintain account security, prevent fraud, ensure safety, perform services on behalf of the business, verify or maintain quality, improve the Service, comply with law, and other purposes allowed by applicable law.

We do not use sensitive personal information to infer characteristics in a way that would require a limitation right without providing any legally required notice and choice.

17.4 California Shine the Light

California residents may request information about our disclosure of certain personal information to third parties for their direct marketing purposes during the preceding calendar year, if applicable. To submit a request, email sameappsupport@gmail.com with the subject line “California Shine the Light Request.”

17.5 How to Exercise California Rights

Email sameappsupport@gmail.com with the subject line “California Privacy Request.” We may need to verify your identity and account before processing your request. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and direct verification from you.

18. Washington and Nevada Consumer Health Data Notice

This section is intended to provide additional disclosures for residents of Washington and Nevada to the extent consumer health data laws in those states apply to Same.

18.1 Categories of Consumer Health Data We May Collect

Depending on the features you use, Same may collect the following categories of consumer health data:

food, calorie, nutrition, macro, ingredient, serving-size, and meal information;
dietary preferences, restrictions, goals, and nutrition patterns;
weight, height, BMI, body measurements, body composition, progress entries, and progress photos;
activity, fitness, exercise, calories-burned, sleep, and wellness information;
information imported from Apple HealthKit, Google Health Connect, Google Fit, Samsung Health, wearables, or similar services if you authorize a connection;
images, voice logs, notes, prompts, metadata, and other inputs used for food recognition or wellness tracking;
inferences, estimates, trends, recommendations, and Output created from the information above.

18.2 Sources of Consumer Health Data

We may collect consumer health data from:

you;
your device;
your use of the Service;
integrations you authorize;
app stores, subscription providers, analytics providers, and service providers;
AI, image-processing, food-recognition, and other technical service providers acting for us.

18.3 Purposes for Collecting and Using Consumer Health Data

We may collect and use consumer health data to:

provide requested features;
create food, calorie, and nutrition estimates;
track wellness goals and progress;
personalize the Service;
generate Output;
provide support;
debug, secure, maintain, and improve the Service;
prevent fraud, abuse, security incidents, and unauthorized activity;
comply with law;
enforce terms and protect rights;
create aggregated, de-identified, or anonymized information.

18.4 Categories of Consumer Health Data Shared

We may share consumer health data with:

service providers and processors that host, store, analyze, secure, support, or operate the Service;
AI, image-processing, and food-recognition providers used to provide requested features;
connected services you authorize, such as HealthKit, Health Connect, Google Fit, Samsung Health, or wearables;
professional advisors and legal recipients where necessary;
business transaction recipients where permitted by law;
other recipients with your consent or direction.

We do not sell consumer health data. We do not use consumer health data from connected health repositories for advertising. We do not knowingly use geofencing around healthcare facilities to collect consumer health data, identify users seeking healthcare services, or send health-related advertising.

18.5 Consumer Health Data Rights

Depending on your state and applicable law, you may have the right to:

confirm whether we collect, share, or sell consumer health data;
access consumer health data;
obtain a list of categories of consumer health data collected or shared;
obtain a list of categories of third parties and specific affiliates with whom consumer health data has been shared, where required by law;
withdraw consent for collection or sharing;
request deletion of consumer health data;
appeal a denied request.

To exercise these rights, email sameappsupport@gmail.com with the subject line “Consumer Health Data Request.” To appeal, email sameappsupport@gmail.com with the subject line “Consumer Health Data Appeal.”

19. Children and Minors

Same is not intended for anyone under 18. We do not knowingly collect personal information from anyone under 18.

If we learn that a person under 18 has created an account or provided personal information, we may delete the account and associated information, subject to applicable law and legitimate retention needs. If you believe a person under 18 has provided personal information to Same, contact us at sameappsupport@gmail.com.

20. U.S.-Only Service; International Users

Same is intended only for users located in the United States. We do not intentionally offer the Service outside the United States. If you are outside the United States, do not use the Service.

If you access the Service from outside the United States despite this restriction, you understand that your information may be processed in the United States and other jurisdictions where our service providers operate, and those jurisdictions may have privacy laws different from those where you are located.

21. Third-Party Services and Links

The Service may contain links to or integrations with third-party websites, services, app stores, payment processors, health platforms, wearable platforms, analytics providers, advertising networks, or other third parties.

This Privacy Policy does not apply to third-party services. Their privacy policies and terms govern their processing of your information. We are not responsible for third-party privacy, security, or data practices.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted in the Service or otherwise made available, and the Last Updated date will be revised.

If we make material changes, we will provide notice as required by law, which may include in-app notice, email notice, or other reasonable notice. If required by law, we will obtain consent before applying material changes to information previously collected.

Your continued use of the Service after an updated Privacy Policy becomes effective means you acknowledge the updated Privacy Policy, except where applicable law requires a different form of notice or consent.

23. Contact Us

For privacy questions, support requests, rights requests, deletion requests, opt-out requests, appeals, or concerns, contact:

Same Support
Email: sameappsupport@gmail.com

Suggested subject lines:

Privacy Request
Privacy Appeal
Account Deletion Request
Consumer Health Data Request
California Privacy Request
Do Not Sell or Share / Targeted Advertising Opt-Out

Because Same currently uses email as its primary contact method, please include enough information for us to identify your account and understand your request. Do not send sensitive medical records or unnecessary sensitive information by email.