Privacy Policy

JJJ Labs LLC (“Rebalance,” “we,” “us,” or “our”) provides the Rebalance mobile application and related services (the “Services”). This Privacy Policy explains what personal data we collect, how we use and share it, and the rights you have over it.

This policy applies to your use of the Services. It does not apply to third-party services that we do not own or control. Capitalized terms not defined here have the meaning given in our Terms of Service.

We do not sell your personal data. We do not share your personal data for cross-context behavioral advertising. Residents of Washington and Nevada should also review our Consumer Health Data Privacy Notice.

1. Personal Data We Collect

We collect personal data in the categories below.

1.1 Information You Provide

• Account information. Email address, password (stored as a salted hash), display name, and authentication method (email/password or third-party identity provider such as Google).
• Profile and onboarding information. Sex, date of birth, height, activity level, dietary preferences, and goal selections used to compute your nutrition plan.
• Body metrics. Weigh-ins (weight, date, source) you log or import.
• Nutrition data. Foods, meals, recipes, portions, macro and calorie targets, plan revisions, adherence data, check-ins, and notes.
• Photos. Meal photos and barcode images you capture or upload.
• Communications. Messages you send to support, feedback, and survey responses.

1.2 Information Collected Automatically

• Device and technical data. Device type, model, operating system and version, app version, language, time zone, and IP address.
• Identifiers. Authentication tokens (stored on-device in secure storage).

1.3 Information from Third Parties

• Identity providers. If you sign in with Google or another supported provider, we receive your email address, name, and provider-issued user identifier.
• Payment and subscription providers. The Apple App Store or Google Play Store handles billing and provides us with subscription status. We do not receive your full payment-card details.
• Service providers. Hosting and similar service providers that help us operate the Services.

1.4 Sensitive Personal Data

Some data we collect — including body metrics, food logs, and other diet- and health-related information — is considered “sensitive personal data” or “consumer health data” under certain laws. We collect it only to provide the Services you request and handle it as described in this policy.

2. How We Use Personal Data

We use personal data to:

• Provide the Services — create and authenticate your account, compute and adjust your nutrition plan, log and analyze meals and weigh-ins, generate adherence and trend insights, and deliver in-app notifications.
• Recognize foods from photos and barcodes — process meal photos and barcode scans to identify foods and macros, including by sending images or barcode identifiers to third-party recognition providers.
• Personalize your experience — recommend regular foods, surface check-in suggestions, and tailor the experience based on your history.
• Communicate with you — respond to support requests, send transactional messages (e.g., password resets, account notices), and, with your consent, send product updates.
• Maintain and improve the Services — monitor performance, debug crashes, analyze aggregate usage patterns, and develop new features.
• Protect the Services — detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms.
• Comply with law — meet legal, regulatory, accounting, and audit requirements, and respond to lawful requests from public authorities.

We do not use your personal data to train general-purpose machine-learning models, and we do not sell your personal data.

3. How We Share Personal Data

We share personal data only as described below.

3.1 Service Providers

We share personal data with vendors that perform services on our behalf under contractual confidentiality and data-protection obligations, including:

• Cloud hosting and database — to host the backend and store account data.
• Authentication — to handle sign-in (e.g., Supabase, Google Identity).
• Subscription management — to manage in-app purchases (Apple App Store, Google Play Store).
• Food recognition and food data — to identify foods from photos and barcodes and to provide nutrition information.
• Customer support — to respond to your inquiries.
• Email delivery — to send transactional email.

A current list of major sub-processors is available on request at support@rebalancediet.com.

3.2 Legal and Safety

We may disclose personal data when we believe in good faith it is necessary to comply with applicable law or legal process, enforce our Terms, protect the rights or safety of our users, or detect and prevent fraud.

3.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to confidentiality obligations and notice as required by law.

3.4 With Your Direction

We share personal data with third parties at your direction.

3.5 Aggregated or De-Identified Data

We may share aggregated or de-identified information that does not reasonably identify you for any business purpose.

4. Data Retention

You can delete your account at any time from within the Services.

5. Your Rights and Choices

Depending on where you live, you may have rights over your personal data, including the right to access, correct, delete, and withdraw consent, object to processing, and opt out of marketing. To exercise any right, contact us at support@rebalancediet.com. We will respond within the time required by applicable law.

5.1 California (CCPA/CPRA)

California residents have additional rights including the right to know the specific categories of personal information collected. We do not sell or share personal information for cross-context behavioral advertising, including the personal information of minors under 16.

5.2 Washington and Nevada

If you are a Washington or Nevada resident, please contact us at support@rebalancediet.com for additional information about consumer health data and your rights.

5.3 Other US State Laws

Residents of states with comprehensive consumer-privacy laws (e.g., Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and others) have the rights described in Section 5 to the extent provided by applicable law.

6. Security

We use administrative, technical, and physical safeguards including encryption in transit and at rest, hashed passwords, short-lived authentication tokens, role-based access controls, and on-device secure storage. No method of transmission or storage is 100% secure.

7. Children's Privacy

The Services are not intended for children under 17. We do not knowingly collect personal data from anyone under 17. If you believe a child has provided us with personal data, contact support@rebalancediet.com.

8. Notifications and Communications

• Push notifications. With your permission, we may send push notifications. You can disable these in your device settings.
• Transactional email. We may send email about your account, security, and the Services. You cannot opt out of these as long as you maintain an account.
• Marketing email. We send marketing messages only where permitted and you can unsubscribe at any time.

9. Cookies and Similar Technologies

The mobile app does not use browser cookies. Our website may use cookies and similar technologies for essential functionality and analytics. Where required, we will request your consent before using non-essential cookies.

10. Third-Party Links

The Services may link to third-party services. We are not responsible for the privacy practices of those services. Review their policies before sharing personal data with them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice (e.g., by email or in-app notice) before the changes take effect.

12. Contact

JJJ Labs LLC
Email: support@rebalancediet.com