Privacy Policy

Last Updated: December 2024

1. Introduction

Sync2Plate ("we," "our," or "us") provides a nutrition planning platform that integrates with fitness tracking devices to deliver personalized meal recommendations. This Privacy Policy describes how we handle your personal information and activity data when you use our services.

2. Information We Collect

2.1 Garmin Connect Activity Data

When you connect your Garmin device to Sync2Plate, we collect the following data from Garmin Connect:

• Daily Activity Metrics: Steps, distance, active calories, resting calories, floors climbed, and active minutes
• Body Composition Data: Weight, body fat percentage, muscle mass, bone mass, and body water percentage (if available from your device)
• Heart Rate Data: Resting heart rate, maximum heart rate, and heart rate zones
• Sleep Data: Total sleep time, deep sleep, light sleep, REM sleep, and awake time
• Stress Data: Stress levels and rest periods
• Activity Summaries: Workout types, duration, and intensity

2.2 Profile Information

We collect information you provide when creating your account:

• Email address
• Name (optional)
• Age, gender, height, and weight
• Fitness goals (weight loss, maintenance, or gain)
• Activity level
• Dietary preferences and restrictions
• Food allergies
• Cuisine preferences

2.3 Usage Data

We automatically collect information about how you use our service:

• Recipe views, favorites, and ratings
• Meal plan interactions
• Search queries
• Device information and IP address
• Browser type and version
• Usage patterns and preferences

3. How We Use Your Activity Data

3.1 Primary Uses

We use your Garmin Connect activity data for the following purposes:

• Personalized Nutrition Calculations: Calculate your daily caloric needs (BMR and TDEE) based on your activity level and body composition
• Macro Distribution: Determine optimal protein, carbohydrate, and fat intake based on your goals and activity
• Recipe Recommendations: Match recipes to your nutritional needs and caloric targets
• Progress Tracking: Monitor changes in weight, body composition, and activity levels over time
• Goal Adjustments: Automatically adjust nutrition plans when significant changes in body composition or activity are detected
• Meal Timing: Optimize meal recommendations based on your activity patterns

3.2 Data Processing

Your activity data is processed in real-time to:

• Sync daily metrics from Garmin Connect
• Calculate personalized macronutrient targets
• Generate meal recommendations
• Track progress toward your fitness goals
• Provide insights and recommendations

4. Data Storage and Security

4.1 Where We Store Your Data

Your data is stored securely on Amazon Web Services (AWS) infrastructure in the following services:

• Amazon DynamoDB: User profiles, health metrics, and preferences
• Amazon S3: Recipe images and exported documents
• AWS Secrets Manager: Encrypted API credentials and tokens

4.2 Security Measures

We implement industry-standard security measures to protect your data:

• All data transmitted between your device and our servers is encrypted using TLS/SSL
• Garmin OAuth tokens are encrypted and stored securely
• Access to your data is restricted to authorized personnel only
• Regular security audits and monitoring
• Automated backups and disaster recovery procedures

4.3 Data Retention

We retain your data as follows:

• Activity Data: Stored for the duration of your account plus 30 days after deletion
• Profile Information: Retained until you delete your account
• Usage Logs: Retained for 90 days for security and debugging purposes

5. Data Sharing and Disclosure

5.1 We Do NOT Sell Your Data

We will never sell, rent, or trade your personal information or activity data to third parties for marketing purposes.

5.2 Service Providers

We share data with trusted service providers who help us operate our platform:

• Amazon Web Services (AWS): Cloud infrastructure and data storage
• Garmin: To authenticate your account and retrieve activity data via their API
• Email Service Provider: To send you account notifications and updates (if you opt in)

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

5.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Requests from law enforcement or government agencies
• Protection of our rights, property, or safety
• Prevention of fraud or security threats

5.4 Business Transfers

If Sync2Plate is acquired or merged with another company, your data may be transferred to the new entity. We will notify you of any such change and provide options regarding your data.

6. Your Rights and Choices

6.1 Access and Portability

You have the right to:

• Access all personal data we hold about you
• Request a copy of your data in a portable format (JSON or CSV)
• Review your activity data history

6.2 Correction and Updates

You can update your profile information at any time through your account settings. This includes:

• Personal details (age, height, weight)
• Fitness goals and preferences
• Dietary restrictions and allergies

6.3 Deletion

You have the right to delete your account and all associated data:

• Go to Account Settings → Delete Account
• All personal data will be permanently deleted within 30 days
• Garmin connection will be automatically revoked
• Anonymized usage statistics may be retained for analytics

6.4 Disconnect Garmin

You can disconnect your Garmin account at any time:

• Go to Account Settings → Connected Devices → Disconnect Garmin
• We will immediately stop syncing new data from Garmin
• Previously synced data will remain until you delete your account
• You can also revoke access directly in your Garmin Connect settings

6.5 Marketing Communications

You can opt out of marketing emails at any time by:

• Clicking "Unsubscribe" in any marketing email
• Updating your email preferences in Account Settings

Note: You will still receive essential account-related emails (security alerts, password resets).

7. Cookies and Tracking

7.1 Essential Cookies

We use essential cookies to:

• Keep you logged in
• Remember your preferences
• Ensure security

7.2 Analytics

We may use analytics tools to understand how users interact with our service. This helps us improve the platform. You can opt out of analytics tracking in your account settings.

8. Children's Privacy

Sync2Plate is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If we discover that we have collected data from a child under 13, we will delete it immediately.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Email notification (if you have an account)
• Prominent notice on our website
• In-app notification

Continued use of Sync2Plate after changes constitutes acceptance of the updated policy.

11. GDPR Compliance (EU Users)

If you are located in the European Union, you have additional rights under GDPR:

• Right to be Forgotten: Request complete deletion of your data
• Right to Restriction: Limit how we process your data
• Right to Object: Object to certain types of processing
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Lodge a Complaint: File a complaint with your local data protection authority

12. California Privacy Rights (CCPA)

California residents have specific rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to deletion of personal information
• Right to non-discrimination for exercising CCPA rights

13. Contact Us