1. Introduction

This Privacy Policy explains how Torrico Sales Group LLC (“we”) collects, uses, and protects your information when you use Caloricode.

2. Information We Collect

Account data. Email address and a password hash (bcrypt, via Supabase Auth). We never store your password in plaintext.

Profile data. Name, biological sex, age, height, weight, body measurements (waist, neck, hips), activity level, and fitness goals.

Logs. Daily weigh-ins, nutrition (calories and macros), workouts (exercises, sets, reps, weight, duration), and hydration.

Feedback. Bug reports including console errors, browser info, page URLs, and session duration for triage; improvement suggestions you submit.

Usage. Pages visited and actions taken within the app, used for product improvement.

3. How We Use It

• Operate and maintain the service.
• Compute personalized recommendations via the Recomp Coach engine.
• Send transactional emails (password resets, email confirmations, weekly digests).
• Improve the product and resolve bugs.

4. Sharing

We do not sell your data. We share data with the following processors strictly as needed to operate the service:

• Supabase — database and authentication. Operates under SOC 2 compliance programs.
• Resend — transactional email delivery. Operates under SOC 2 compliance programs.
• Vercel — hosting and edge network. Operates under SOC 2 compliance programs.

5. Data Retention

Active accounts retain their data indefinitely. When you request deletion, your data is purged within 30 days.

6. Your Rights

You can access, correct, export, or delete your data. Contact us to exercise these rights.

7. Cookies

We only use authentication session cookies (managed by Supabase). We do not use third-party advertising or tracking cookies.

8. Security

We use TLS in transit, Row-Level Security at the database layer, password hashing, and least-privilege service accounts. No system is perfectly secure, but we work to minimize risk.

9. Children

Caloricode is not for users under 13. If we learn that we have collected data from a child under 13, we will delete it.

10. International Users

The service is hosted in the United States (Vercel and Supabase us-east-1). If you access Caloricode from outside the United States, you consent to your information being processed in the United States.

11. Changes

We may update this Privacy Policy from time to time. Material changes will be emailed to registered users.

12. Contact

Questions about this policy? Contact us.