AYA SHAPE — Privacy Policy Last Updated: May 30, 2026 1. Information We Collect We collect only what is necessary to provide calorie tracking and body management: • Registration & Account: Email (if provided) or Apple ID sign-in data. • Personal Physical Data: Age, biological sex, height, current weight, target weight. • User Content & Activity: Meal photos you upload; voice recordings or text descriptions of food; daily intake, water, exercise logs. • Technical Data: Device info, crash logs (anonymous). • Health, Fitness & Activity Data (with your permission): step count, activity minutes, movement & motion data; active calories burned, workout & exercise records; health & fitness metrics from Apple HealthKit or your device. • AI Analysis & Network Transmission: To provide calorie estimation, you acknowledge that meal photos, voice recordings, food descriptions, and related activity data will be transmitted over the internet to AI processing services for analysis. This transmission is necessary for core app functionality. 2. How We Use Your Data • Analyze meal photos, voice, and text via AI to estimate calories and nutrition. • Generate personal daily targets, logs, and progress charts. • Improve App stability, performance, and features. • Use health, fitness, and motion data to calculate calorie burn and improve accuracy. • Sync activity records to personalize your daily budget. YOUR DATA: • Stored primarily in your device's local sandbox • Does NOT leave your device unless you choose to back up • We cannot access, view, or control your local data 3. Health Data & HealthKit If you authorize access to Apple HealthKit or device health/fitness sensors: • We only read steps, active calories, exercise, and activity data. • Health data is never used for marketing, advertising, or user profiling. • Health data stays local or encrypted; no unauthorized storage. • We do not sell health data to third parties. 4. Data Sharing & Disclosure WE DO NOT SELL, RENT, OR TRADE YOUR PERSONAL DATA. We may share data only: with service providers bound by confidentiality obligations; when required by law or legal process. 5. California Privacy Rights (CCPA/CPRA) California residents have the right to: request access to or deletion of their personal data; opt out of the "sale" of personal data (we do not sell data); receive non-discriminatory service for exercising privacy rights. To exercise these rights, use the Delete Account feature in Settings or contact support. 6. COPPA (Children's Privacy) The App is not intended for children under 13. If we discover a child under 13 has provided data, we delete it immediately. 7. Data Storage & Security • Most data is stored locally on your device (sandbox). • You control backup, security, and deletion of your local data. • We use industry-standard security for any limited cloud data. • No system is 100% secure; you accept inherent risks of electronic storage. You further acknowledge and agree: • Data transmission over the internet involves inherent risks including interception, loss, corruption, or delay. • We use industry-standard encryption for transmission, but cannot guarantee absolute security. • We do not guarantee permanent storage of data uploaded to AI or cloud services. • You are solely responsible for backing up your own data. • We are not liable for data loss, corruption, or unavailability during or after transmission. • We are not responsible for failures or security incidents caused by third-party AI or cloud providers. 8. Changes to Policy We may update this policy periodically. Continued use of the App after updates constitutes acceptance of the revised policy.