Privacy Policy

Last updated: April 8, 2026

Repast is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

We collect the following data that you provide directly:

2. How We Use Your Data

Your data is used to provide, improve, and support the Repast service:

3. Third-Party Services

Repast uses the following third-party services to provide functionality:

When you use AI features, relevant data (such as food photos or chat messages) is sent to Anthropic or OpenAI for processing. We do not store your photos — they are transmitted directly to these services for analysis. These services may temporarily retain data in accordance with their own privacy policies. See Anthropic's Privacy Policy and OpenAI's API Data Usage Policy for details.

4. Data Storage & Security

Your data is stored securely in a PostgreSQL database hosted on Supabase. We use industry-standard security practices including encrypted connections (HTTPS/TLS) and authenticated API access. Your password is managed by Supabase Auth and is never stored in plaintext.

5. Data Retention & Deletion

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time through the app settings. Upon account deletion, all your data — including food logs, recipes, chat history, and profile information — will be permanently removed from our systems.

6. Data Sharing

We do not sell or rent your personal data. Data is shared with the third-party services listed above as necessary to provide app functionality. If we display ads, third-party ad networks may collect device identifiers and ad interaction data in accordance with their own privacy policies. We may use aggregated, non-identifying usage data to improve the app and support advertising. If we introduce personalized advertising in the future, we will update this policy and provide you with the ability to opt out.

7. Your Rights

You have the right to:

California residents may have additional rights under the CCPA, including the right to know what data is collected and to request its deletion. EU/EEA residents have rights under the GDPR, including the right to data portability and to object to data processing. To exercise any of these rights, contact us at the email below.

8. Children's Privacy

Repast is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, please contact us and we will promptly delete the account and associated data.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of material changes through the app. Continued use of Repast after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this privacy policy or your data, please contact us at rcstudioventures@gmail.com.