Who we are
RedFitPanda is a nutrition and wellness application operated by Orbitspike. This policy explains how we handle information when you use the RedFitPanda app, website, and related services.
RedFitPanda provides general wellness information, not medical diagnosis or treatment.
Information we collect
Account information
We receive identifiers needed to create and secure your account, such as your email address, display name, authentication-provider identifier, and sign-in status.
Profile and wellness information
You may provide age, gender, height, weight, goals, activity level, dietary preferences, allergies, disliked foods, favourite cuisines, measurement units, and timezone.
Nutrition and app content
We process meal logs, ingredients, portions, nutrition estimates, water logs, reminders, progress, Coach conversations, barcodes, nutrition labels, and meal photos that you choose to submit. Scan results are editable and require your review before logging.
Subscription and promotion information
We receive product, entitlement, renewal, expiration, and promotion-redemption status. Apple processes payment details; RedFitPanda does not receive your full card number.
First-party usage analytics
After you sign in, RedFitPanda automatically collects limited first-party usage events to understand reliability and which features are useful. These events may be linked to your internal RedFitPanda account and can include app version, build number, operating-system major version, broad device class, session lifecycle, screens or features opened, success or failure categories, and coarse count, duration, or latency ranges.
Product analytics do not contain meal or ingredient names, calorie or nutrient values, body measurements, photos, Coach or chat text, scan hints, email addresses, authentication tokens, coupon codes, or raw technical error messages.
We use this analytics system only to operate and improve RedFitPanda. We do not use it for targeted advertising, cross-app tracking, or sale to data brokers.
How we use information
- Provide authentication, onboarding, personalized targets, and progress tracking.
- Analyze scans, calculate nutrition, suggest meals, and answer Coach questions.
- Schedule reminders and deliver notifications you request.
- Manage subscriptions, introductory access, promotions, and account support.
- Protect accounts, prevent abuse, diagnose failures, and improve app performance.
- Comply with legal obligations and enforce our Terms of Use.
Service providers
We use service providers only where needed to operate RedFitPanda. Depending on the feature, these may include Apple and Google for sign-in and distribution, Supabase for authentication and database infrastructure, Render for application hosting, Cloudflare for private image storage and website delivery, OpenAI for Coach and image or label analysis, RevenueCat for subscription entitlements, USDA FoodData Central for nutrition data, and Open Food Facts for packaged-food information.
Providers process information under their own terms and privacy commitments. We do not authorize them to use RedFitPanda data for targeted advertising.
AI features and OpenAI
RedFitPanda uses OpenAI, a third-party AI service provider, to recognize meals, read nutrition labels, answer Coach questions, and generate meal-recommendation explanations. These features involve sending information from RedFitPanda to OpenAI for processing.
Information shared for AI processing
- Meal and nutrition-label photos submitted for analysis, together with any meal hint you provide.
- Your Coach messages and relevant recent Coach conversation history.
- Relevant wellness context, such as current and target weight, goals, activity level, dietary preferences, allergies, disliked foods, favourite cuisines, and measurement units.
- Relevant meal summaries, ingredients, nutrition targets and progress, water progress, and meal-recommendation context.
We limit structured AI context to information relevant to these features. We do not intentionally include your email address, sign-in credentials, payment details, or internal account identifiers in that context. However, photos or messages you submit may themselves contain personal information. Do not include unnecessary identifying details, other people’s private information, or sensitive information unrelated to the request.
OpenAI processes the information to provide the requested analysis or response under applicable service terms and data-protection commitments. This is separate from the first-party usage analytics described above. AI results can be incomplete or inaccurate and are not medical advice.
For questions about AI processing or requests to restrict processing or delete personal information, contact hello@redfitpanda.com. The account-deletion process described below applies to information stored in RedFitPanda systems; it does not promise immediate deletion of every record held by a service provider under its own applicable retention or legal obligations.
Storage, retention, and security
We use access controls, encrypted network connections, private object storage, and server-side authorization to protect information. No system can guarantee absolute security.
Account and wellness information is kept while your account is active and as needed to provide the service. Raw product-analytics events are retained for up to 90 days. Non-identifying aggregate totals may be retained longer to understand trends. Abandoned uploads are periodically removed, and user-associated records and uploaded images are deleted through the in-app account-deletion process, subject to limited records we must retain for security, fraud prevention, or legal compliance.
Information may be processed in countries other than where you live. Where required, we use appropriate safeguards for international processing.
Your choices and rights
You can review and edit supported profile, nutrition, reminder, and meal information in the app. You can control camera, photo-library, and notification permissions in iOS Settings.
You can permanently delete your account from the Profile screen. This removes your profile and user-linked app data from RedFitPanda systems and requests deletion from the authentication provider where applicable. A one-way security record may remain to prevent a previously issued credential from recreating a deleted account.
Depending on where you live, you may have additional rights to access, correct, delete, restrict, or receive a copy of personal information. Contact us to make a request.
Children, changes, and contact
RedFitPanda is not intended for children who cannot legally consent to use the service in their location without a parent or guardian. We do not knowingly collect a child’s information without authorization required by applicable law.
We may update this policy as the app changes. We will update the effective date and, when appropriate, provide additional notice in the app.
Privacy questions and requests can be sent to hello@redfitpanda.com.
