PreMunch APP User Privacy Agreement

Release Date: June 10, 2026 | Effective Date: June 10, 2026

Preface

"PreMunch" respects and protects your personal information and privacy security. We process personal information in accordance with the principles of legality, legitimacy, necessity, and minimization, providing you with services such as calorie tracking, food nutrient analysis, and weight management. This agreement explains how we collect, use, store, share, and protect your personal information, as well as the related rights you can exercise.

Special Note: This app supports a visitor mode, which allows you to use the main functions except those requiring subscription authorization and separate consent for AI features without providing your phone number, email, or Apple account to log in. You can also purchase paid subscriptions through the App Store. Registering a real-name account through Apple Login is an optional method used for cross-device data synchronization and account recovery.

Article I. Personal Information We Collect

1.1 Two Types of Usage Methods

We adopt two mutually independent usage and storage methods:

• Guest Mode: No Apple login or phone number is required. Data is stored locally on your device by default. After successful subscription, we may establish a device-bound guest profile in the cloud based on local device credentials, which is used for subscription benefit verification and nutritional calculation; this profile is not associated with an Apple account or phone number.
• Real-Name Account Mode (Optional): You voluntarily enable it after registering via Apple login, which is used for multi-device data synchronization and account recovery.

1.2 Information You Provide Voluntarily

• Real-Name Registration Information (Purely Optional): Account identifiers, profile pictures, nicknames, etc. obtained through Apple login are used only for multi-device synchronization and account management; we do not collect phone numbers as a mandatory registration requirement.
• Basic Health Information: Height, weight, gender, age, target weight, physical activity level, etc., which are essential parameters for core calculation functions, may be stored in the local guest profile on your device or in your real-name account.
• Diet and Exercise Record Information: Food names, serving sizes, times, calories and nutrients, food pictures, exercise records, etc., which are essential data for comprehensive calculation.
• Feedback Information: Consultations, suggestions, fault feedback, and attachments submitted by you.

1.3 Information Obtained Through System Permissions

• Camera / Album: Used for food photo recognition, image upload, and record saving.
• Microphone: Used for voice input of diet content.
• Fitness and Health (HealthKit): Used to read step counts and calculate activity consumption, and to read body-weight records, calculate basal metabolism, and display weight trends. The native iOS HealthKit sheet lets you grant step and weight access separately.
• Network and Device Information: Used to ensure service stability, conduct troubleshooting, and index guest device profiles.
• After you separately consent to the "AI Data Processing Statement" within the App, content obtained via the camera, album, and microphone may be sent to third-party AI or voice service providers, as detailed in Article VII.

1.4 Synchronized Information from Third-Party Platforms

Upon your authorization, we may obtain necessary fitness and health data from device health platforms or wearable device platforms for integrated analysis and display; synchronized data will be stored in the local guest profile or real-name account you are currently using.

Article II. Purposes of Information Use

• Provide Core Functions: Calorie calculation, comprehensive nutritional analysis, daily intake target generation, and weight management recommendations.
• Ensure Subscription Services: Verification of member status based on App Store orders, synchronization of renewals and entitlements.
• Guest Profile Storage: Provision of back-end comprehensive calculation and assessment capabilities for paid guest users, and storage of data necessary to implement this function.
• Ensure Account and Service Security: Real-name account login authentication, risk control, and abnormality investigation.
• Improve Product Experience: De-identification or aggregated statistical analysis, performance optimization, and algorithm iteration.

Article III Special Notes on Sensitive Personal Information

Height, weight, age, exercise data, diet records, and other relevant data constitute sensitive personal information. We only process such information within the scope necessary to deliver our core functions and have implemented strict protection measures.

• The sensitive information in the guest profile is only bound to the local device credentials and is not associated with Apple accounts, mobile phone numbers, or other personally identifiable information of natural persons;
• You may disable relevant system permissions in your system settings, or submit a request within the App to withdraw your consent to AI data processing;
• You are not required to register for a real-name account to purchase paid subscription products within the App.

Article IV. Sharing, Transfer, and Disclosure

Without your consent, we will not sell or disclose your personal information to unrelated third parties. We will only share necessary information in the following circumstances:

• Where we entrust cloud service providers to process relevant information for the purpose of service delivery;
• With your explicit authorization;
• When mandatorily required by laws, regulations, or judicial authorities;
• After you provide separate consent to AI data processing within the App, we will share the minimum scope of data necessary to realize the corresponding functions with the AI/voice service providers listed in Article VII.

Special Statement: Data contained in guest profiles will not be shared with any third party for advertising placement, user profiling, or other purposes not essential to service provision.

Article V Storage and Protection

• Storage Location: All business data shall, in principle, be stored within mainland China, except for the data transmission of cross-border AI service providers listed in Article VII.
• Protection Measures: HTTPS encryption for transmission, access control, security audits, and real-time monitoring mechanisms shall be employed.
• Retention Period:
  • Guest profile data: Retained for 180 days from the last date of App use, and automatically permanently deleted upon expiration;
  • Real-name account data: Upon your completion of account cancellation, we will immediately permanently delete the personal information associated with the account, unless otherwise stipulated by laws and regulations;
  • Other data: Retained for the minimum period necessary to achieve the intended purpose, and deleted or anonymized after expiration.

Article VI. Your Rights

6.1 General Rights of All Users

You have the right to access, correct, and delete personal information, and to withdraw system permissions and consent to AI data processing. To exercise the above rights, you may submit an application through the privacy center in the app or via the contact email listed in Article XI of this Agreement. The withdrawal method for AI data processing consent is detailed in Article VII, Section 7.8.

6.2 Exclusive Rights of Visitors

• Visitors who have not paid for account registration: They can use the "Clear local data and log out" function on the in-app Delete Account page (Me → Account Actions → Delete Account) to delete local questionnaires, settings, and related local caches, and return to the login page; this operation does not delete the data of the cloud account that has not been established yet.
• Visitors who have paid for account registration: They can apply for account deletion on the in-app Delete Account page (Me → Account Actions → Delete Account). After deletion is completed, the cloud data related to the visitor's profile will be permanently deleted immediately; uninstalling the app will terminate the continued updating of the profile on the device.

6.3 Exclusive Rights of Real-Name Accounts

You have the right to apply for deletion of a real-name account. You can complete this on the in-app Delete Account page (Me → Account Actions → Delete Account). After deletion is completed, we will immediately and permanently delete the personal information related to the account.

Article VII: Special Notes on AI and Voice Recognition Services

To enable features such as photo-based meal recognition, voice recording, smart food search, and AI-based motion analysis, we may send some of your data to third-party artificial intelligence (AI) and voice recognition service providers for processing. We will only upload relevant data to the following third-party providers after you click "Agree and Continue" on the "AI Data Processing Notes" page in the app. If you select "Do Not Use AI Features for Now", we will not upload the data described in this Chapter to third-party AI/voice service providers. In this case, the AI-related features such as "Record", "Camera", and "Voice" in the bottom navigation bar will be unavailable (clicking them again will redirect you to the aforementioned explanation page). This Chapter is consistent with the authorization explanation page in the app. In case of any inconsistencies, the text with the later effective date shall prevail.

7.1 Image Recognition

• Uploaded Data: Food photos taken by you or selected from your album (the photos may contain other content in the frame; please try to avoid taking photos that can reveal personal or other people's information).
• Data Recipients: Google LLC (Gemini API), Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co., Ltd. (DeepSeek API), and Beijing Volcano Engine Technology Co., Ltd. (Doubao Vision Model, only applicable when enabled in the production environment).
• Purpose of Use: Identify dishes and ingredients, and estimate calorie and nutrient content.

7.2 Voice Services

• Uploaded Data: Voice audio collected via a microphone.
• Data Recipients: iFLYTEK Co., Ltd. (voice-to-text service).
• Purpose of Use: Transcribe your voice into text in real time. The transcribed dietary description text may be further sent to the AI service providers listed in Sections 7.1 and 7.3 of this Chapter for food recognition and nutritional estimation.

7.3 Text Analysis

• Uploaded Data:
  • Dietary Scenes: The dietary description text you input or transcribe by voice;
  • Exercise Scenes: The exercise or activity description text, as well as the current weight (kg), gender, age, and height used for calculating calorie consumption.
• Data Recipients: Google LLC (Gemini API), Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co., Ltd. (DeepSeek API), and Beijing Volcano Engine Technology Co., Ltd. (Doubao Model, only applicable when enabled in the production environment).
• Purpose of Use:
  • Dietary Description: Identify dishes and estimate their nutritional content;
  • Exercise or Activity Description: Identify the type of exercise, its duration and intensity, and evaluate the calorie consumption during the activity.

7.4 List of Third-Party Service Providers and Privacy Policy Links

The following third-party providers only process data to the extent necessary to implement the corresponding functions. The actual service providers used are based on those displayed in the app and configured in the app's production environment; unactivated service providers will not receive your data.

7.5 Data We Will Not Provide to Third-Party AI/Voice Service Providers

Unless otherwise stated in this Chapter or required by laws and regulations, we will not provide your Apple account credentials, account passwords, payment information, or personal information unrelated to the implementation of corresponding AI functions to the aforementioned third parties.

7.6 Data Transmission, Processing, and Security Assurance

• Transmission Method: The data is transmitted between the client and our server, and between our server and third-party service providers, using encrypted methods such as HTTPS and WSS.
• Key Management: Third-party API keys are only stored on our server and will not be written into the App installation package or exposed in front-end code.
• Processing Principles: We only transmit to third parties the minimum amount of data necessary for identification, transcription, and analysis, and will not exceed the necessary scope of the corresponding functions.
• Temporary Data Processing: Temporary files such as images and audio used for AI recognition will be deleted or anonymized within the shortest period necessary to achieve the intended purpose (usually no more than 24 hours), unless otherwise stipulated by laws and regulations.
• Analysis Results: The results returned after identification, transcription, or analysis, such as nutritional estimates and exercise consumption, will be stored in this App and on our server as your diet or exercise records, and the retention period is specified in Article 5 of this Agreement.
• Third-Party Security: The aforementioned third parties bear corresponding responsibilities for the security of the data they receive and are subject to their own privacy policies and terms of service. We will select service providers with appropriate security capabilities and conduct necessary security management over them.

7.7 Storage Location and Cross-Border Transfers

Your account information, diet and exercise records, and other business data are, in principle, stored within the territory of the People's Republic of China. However, since the infrastructure of service providers such as Google Gemini may be located outside the country, after you agree to this Chapter, some of the data described in Sections 7.1 and 7.3 of this Chapter may be transferred to locations outside the People's Republic of China and processed by corresponding third parties overseas. We will take necessary measures to ensure the security of personal information processing by overseas recipients in accordance with applicable laws and regulations.

7.8 Your Choices and Rights

• Prior Consent: You can select "Agree and Continue" or "Do Not Use AI Features for Now" on the "AI Data Processing Description" page in the App. Before you give your consent, we will not upload relevant data to the third parties listed in this Chapter.
• Effect of Refusal: If you select "Do Not Use AI Features for Now", you can still use other functions that do not rely on third-party AI/voice services; however, the AI capabilities corresponding to the "Record", "Camera", and "Voice" in the bottom navigation bar will not be available. When you click on the aforementioned entry again, the App will display the "AI Data Processing Description" page again until you choose to consent or continue not to use it.
• Withdraw Consent: You can withdraw your consent to AI data processing in the App under "Me → System Permission Management" or by contacting the email address listed in Article 11 of this Agreement. After withdrawal, we will no longer upload new AI-related data to third parties; existing diet and exercise records can still be processed in accordance with Article 6 of this Agreement.
• System Permissions: You can disable camera, microphone, and album permissions in the device system settings; after disabling them, the relevant AI functions will become unavailable, but this will not affect your exercise of other rights.

7.9 Updates to This Chapter

If we add new AI/voice third-party service providers, expand the types of uploaded data, or change the processing purposes, we will update this agreement and notify you through in-app prompts, authorization pages, or other appropriate methods. After such changes take effect, you may need to re-read and confirm the "AI Data Processing Statement" before you can continue to use the relevant AI functions.

Article VIII Other Third-Party SDKs and External Services

Except for the AI and voice recognition services mentioned in Article VII of this Agreement, in order to implement functions such as payment, account login, data storage, and statistical analysis, we may also integrate other third-party SDKs or external services. Such services only process information within the scope necessary to implement the corresponding functions and are subject to the privacy policies of the corresponding third parties.

Special Note: In-app purchases in this app rely entirely on the official IAP system of the App Store. The "My" page provides an independent [Restore Purchases] manual button. Visitors who have not registered a real-name account can make payments and restore purchased privileges with their Apple ID, and the purchase records are verified by Apple's servers. For Apple login, App Store subscription payments, etc., please also refer to Apple Inc.'s privacy policy: Apple Privacy Policy.

Article IX Protection of Minors

This app does not provide services to minors under the age of 14. If we discover any relevant circumstances, we will stop providing services and delete the relevant information in accordance with the law.

Article 10: Agreement Update

We may update this Agreement in accordance with laws and regulations or business changes. After the update, we will notify you via in-app pop-ups or web pages. Material changes will be publicly announced 7 days in advance.

Article 11 Contact Us

Contact email: liexixuan@icloud.com
Working hours: 10:00-17:00 on weekdays