Privacy Policy — Acorn

Last updated: September 6, 2026

Acorn ("the App", "we", "us") is a calorie and nutrition tracking app. It estimates the calories, macros, fiber and sugar of your meals from a photo or a text description using artificial intelligence, tracks your daily and weekly intake against personalized goals, and shows your progress over time. This policy explains what data the App collects, why, and how it is stored and protected.

1. Account & identity

Acorn uses Firebase Authentication. On first launch, the App creates an anonymous account consisting of a random identifier (UID) — no email, phone number, name, or password is collected or required. This identifier is used solely to associate your profile, goals and food logs with your device so they can sync and persist across app launches.

• You may optionally use Sign in with Apple to link your anonymous account to your Apple ID, so your data is preserved if you reinstall the App or switch devices. In that case we receive only the identifier Apple provides and, if you choose to share it, your email address (which may be Apple's private relay address). We never receive your Apple ID password.
• If you stay anonymous and delete and reinstall the App, or use a new device, a new anonymous identifier is created and your previous data is not automatically linked to it.

2. Information you provide during setup

To calculate your calorie and nutrient targets, the onboarding flow asks you for:

• Body & profile details: gender, year of birth, height, current weight, starting weight, target weight, activity level and preferred units.
• Goals & preferences: your primary goal (e.g. lose weight, eat healthier), secondary goals, habits you want to change, symptoms you want to improve, custom calorie/protein/fiber/sugar targets, and your preferred language.
• Reminders: if you enable meal reminders, the times you choose for them.

This information is used only to compute your targets and personalize the App. It is stored in your Firestore user document and is never used for advertising.

3. Camera & photo library

• Camera: used only when you choose to take a photo of a meal, a nutrition label or a barcode so the App can estimate its nutrition. The App does not access the camera in the background.
• Photo library: used only when you choose to pick an existing photo of a meal for the same purpose. The App requests access only to the photos you select, not your full library.
• Photos you submit for analysis are sent securely to our backend (Firebase Cloud Functions) and from there to Google's Gemini API for nutrition estimation. They are used only to produce your estimate for that meal, are not used to train third-party models, and are not shared with advertisers.

4. Food logs & progress data

The App stores, under your account:

• Foods you log — name, portion, calories, protein, carbs, fat, fiber and sugar estimates — with the date and meal they belong to, plus any foods you mark as favorites.
• Weight entries and progress history you record.
• A weekly counter of how many AI analyses you have used, in order to enforce the free-tier limit (currently 3 analyses per week without a subscription).

This data is stored in Google Firebase (Firestore), scoped by security rules so that only your own account can read or write it.

5. AI-generated content

Nutrition estimates are generated using Google's Gemini models, called from our Firebase Cloud Functions backend. The meal photo or text description you submit, and your chosen language, are sent to Google's AI service solely to generate that estimate for you. Estimates are AI-generated approximations and should not be treated as precise medical or clinical measurements — see the Terms of Use for details.

6. Subscriptions & payments

Acorn offers optional auto-renewable subscriptions that unlock unlimited AI analyses and premium features, with a free trial as shown at checkout. Payments are processed entirely by Apple through your App Store account — Acorn never sees or stores your payment or card details. We use RevenueCat to manage subscription status and entitlements; RevenueCat receives your anonymous app-generated identifier and purchase/transaction data (such as product ID, purchase date, and renewal status) — never your card details.

7. Notifications

If you enable meal reminders, the App schedules local notifications on your device at the times you choose. These reminders are generated on-device; their content is not sent to our servers.

8. Analytics

We use Firebase Analytics to understand aggregate, anonymous usage of the App (for example which screens are opened and which features are used) so we can improve it. This data is tied to an app-instance identifier, not to your name or email, and is not used for advertising or sold to third parties.

9. What we do not collect

• No name, phone number, or password. An email address only if you choose Sign in with Apple and elect to share it.
• No location data — the App never requests location permission.
• No contacts, calendar, microphone, or Apple Health data.
• No advertising SDKs and no third-party analytics used for ad targeting.
• We do not sell your personal data to anyone.

10. Third-party service providers

We use the following service providers to operate the App. Each processes data only as needed to provide its service to us:

Provider	Purpose	Data involved
Google Firebase (Auth, Firestore, Cloud Functions)	Account, data storage & sync, backend	Anonymous UID, profile, goals, food logs
Google Gemini API	Nutrition estimation from photos and text	Submitted photo or description, language
Firebase Analytics	Aggregate product analytics	App-instance ID, screen & feature events
RevenueCat	Subscription management	Anonymous UID, purchase/entitlement data
Apple (App Store / StoreKit, Sign in with Apple)	Payment processing, optional sign-in	Handled entirely by Apple

These providers are contractually and technically restricted from using your data for their own advertising purposes.

11. Data security

Your data is protected by Firebase security rules that scope every document to your own account — no other user can read or write your data. Data is encrypted in transit (HTTPS/TLS) and at rest by Google Cloud/Firebase infrastructure.

12. Data retention & deletion

• Your profile, goals and logs are retained as long as your account is active, so your history remains available across sessions.
• You can delete your account and all associated data at any time from Settings → Delete account & data inside the App. This removes your Firestore data and your authentication account.
• Deleting the App from your device removes local app data but does not automatically delete data stored in Firebase — use the in-app deletion option, or contact us at the email below.

13. Children

Acorn is not directed at children and is not intended for use by anyone under 13 (or the applicable minimum age in your country). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

14. Your rights

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your data, or to object to certain processing. You can exercise the right to deletion directly in the App; for other requests, contact us using the details below. Because accounts may be anonymous, we can only act on a request when you can identify your account or make the request from the App instance itself.

15. Changes to this policy

We may update this policy from time to time. Material changes will be reflected on this page with a new "last updated" date; continued use of the App after a change constitutes acceptance of the revised policy.

16. Contact

Privacy questions or data deletion requests: eacompany947@gmail.com