The short version
- ✓ We collect only what we need to run the service
- ✓ We never sell your personal data
- ✓ You can delete your account and data at any time
- ✓ We take security seriously with encryption in transit and at rest
- ✓ California residents have additional rights under CCPA/CPRA
1. Information We Collect
Information You Provide
When you create an account or use Enibla, you may provide: name, email address, age, biological sex, height, weight, health and fitness goals, dietary preferences and restrictions, food allergies and intolerances, and pantry inventory data you choose to enter.
Information We Collect Automatically
When you use our app, we automatically collect: device identifiers (such as device ID and advertising ID), operating system and version, app usage data and feature interactions, crash reports and performance data, IP address and general location (country/region), and in-app purchase history.
Health and Nutrition Data
Enibla collects nutrition-related information such as calorie intake, macronutrient tracking, meal logs, and dietary goals. This data is used solely to provide and improve our meal planning services. We do not treat this data as protected health information under HIPAA, as Enibla is not a covered healthcare entity. However, we apply strict security standards to all personal data.
2. How We Use Your Information
Core Service
We use your information to generate personalized meal plans, build your grocery lists, power AI coaching conversations, and improve your nutrition recommendations over time.
Communications
With your consent, we may send you push notifications, email updates about your meal plans, product announcements, and promotional content. You may opt out of marketing communications at any time via your account settings or by using the unsubscribe link in any email.
Analytics and Improvement
We use aggregated and de-identified data to understand how users interact with the app, identify bugs, and improve our AI models and product features. This data cannot be used to identify you individually.
Legal Obligations
We may use or disclose your information when required by applicable law, legal process, or governmental authority, or to protect the rights, property, or safety of Enibla, our users, or the public.
3. How We Share Your Information
We Do Not Sell Your Data
Enibla does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes.
Service Providers
We share data with trusted third-party vendors who assist in delivering our service, including cloud infrastructure providers, analytics platforms, payment processors, and AI model providers. These vendors are contractually obligated to use your data only to perform services on our behalf and are prohibited from using it for any other purpose.
Business Transfers
If Enibla is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or in-app notice before your data is transferred and subject to a different privacy policy.
Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (such as a court or government agency).
4. California Privacy Rights (CCPA / CPRA)
Your Rights as a California Resident
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to: (1) Know what personal information we collect, use, disclose, or sell; (2) Delete personal information we have collected, subject to certain exceptions; (3) Correct inaccurate personal information; (4) Opt out of the sale or sharing of personal information; (5) Limit the use of sensitive personal information; (6) Non-discrimination for exercising any of these rights.
How to Exercise Your Rights
To submit a rights request, contact us at privacy@enibla.app. We will verify your identity before fulfilling your request. We will respond within 45 days. If we need more time, we will inform you of the reason and extension period.
Authorized Agents
California residents may designate an authorized agent to submit requests on their behalf. We may require written proof of the agent's permission and verify the identity of the consumer directly.
5. Children's Privacy (COPPA)
Age Requirement
Enibla is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@enibla.app and we will delete that information from our systems.
Users Between 13 and 18
Users between the ages of 13 and 17 may use Enibla only with the consent of a parent or legal guardian. By using the app, users in this age range represent that they have obtained such consent.
6. Data Retention
Retention Period
We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or de-identify your personal information within 30 days, except where we are required to retain it for legal, tax, or accounting purposes.
Meal and Nutrition Logs
Meal logs and nutrition data are retained for the current calendar year plus one prior year to support trend analysis and personalization. You may delete your logs at any time from within the app.
7. Data Security
Security Measures
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS) and at rest, access controls, regular security reviews, and secure development practices.
No Absolute Guarantee
No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.
8. Third-Party Links and Services
External Links
The app may contain links to third-party websites or services that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.
9. International Users
Data Transfers
Enibla is operated in the United States. If you access our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using our services, you consent to your information being transferred to and processed in the United States.
10. Changes to This Policy
Policy Updates
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy in the app and updating the 'Last Updated' date at the top of this page. For significant changes, we will provide more prominent notice, such as an in-app notification or email. Your continued use of Enibla after changes take effect constitutes your acceptance of the revised policy.
11. Contact Us
Privacy Inquiries
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: Enibla Email: privacy@enibla.app Support: enibla.app/support