Privacy Policy

SweetSpot is a sugar intake tracking app made for Singapore. This policy describes how SweetSpot (“we”, “us” or “our”) collects, uses, discloses and protects personal data.

1. Data we collect

Account information

Your email address, authentication provider, provider account identifier and technical account identifiers. If you use Apple or Google sign-in, those providers give us the information you authorise them to share.

Profile and sugar records

Your display name, gender, age, height, weight, activity level, personalised guide values, and the foods or drinks you log—including names, categories, sugar estimates, timestamps and Nutri-Grade information you enter.

Scan content

When you choose SugarSnap or an AI food estimate, the image or item description is sent for processing. We receive the extracted label value or estimated item information. SweetSpot does not intentionally save the original scan image to your account.

Subscription information

Purchase identifiers, product and entitlement status, transaction status and related technical information needed to provide and restore subscriptions. We do not receive your full payment-card details.

Device and service information

Basic request information, security logs, error information and usage records needed to operate and protect the service, including AI scan allowance records. Notification preferences and scheduled reminder details are stored on your device.

2. How we use data

• Create and secure your account.
• Calculate and display your personalised daily sugar guide.
• Save your entries and produce daily, weekly and monthly insights.
• Read nutrition labels and estimate sugar for eligible drinks, desserts and snacks.
• Manage purchases, entitlements, restoration and customer support.
• Prevent misuse, enforce scan limits, debug errors and improve reliability.
• Meet legal obligations and protect users, SweetSpot and others.

3. When we disclose data

We use service providers only where needed to operate SweetSpot:

• Supabase provides authentication, database hosting and server functions.
• Google Gemini API processes scan images and item descriptions to return extracted or estimated sugar information.
• RevenueCat helps manage subscription products and entitlement status.
• Apple and Google provide sign-in and, for Apple, payment and subscription services.

These providers may process information outside Singapore. We take reasonable steps to use providers and arrangements that protect transferred personal data. We may also disclose information when required by law, to protect rights and safety, or as part of a business transfer subject to appropriate safeguards.

We do not sell personal data. We do not currently use third-party advertising SDKs or cross-app tracking.

4. Health information and estimates

SweetSpot tracks total sugar as a practical proxy and calculates a daily guide using information you provide. Scan results and AI estimates can be wrong. SweetSpot is not a medical device and does not provide medical advice, diagnosis or treatment.

5. Retention and deletion

We generally retain account and log data while your account is active and as needed to provide SweetSpot. Security and operational records may be retained for a limited period. Service providers may retain information according to their own applicable terms and legal obligations.

You can permanently delete your account from Settings → Delete Account. This removes your SweetSpot account and associated profile, sugar logs, saved insights and AI usage records, except information we must retain by law or for legitimate fraud, security or dispute purposes. Deleting SweetSpot does not automatically cancel a subscription billed by Apple.

6. Your choices and rights

You may update profile information in the app, disable reminders in Settings, deny camera or notification permissions in iOS Settings, and delete your account in the app. Depending on applicable law, you may ask to access or correct personal data, withdraw consent, or ask questions about our data practices.

Withdrawing consent may prevent us from providing features that require the affected information.

7. Security

We use reasonable administrative and technical safeguards, including authenticated access and server-side controls. No internet service can guarantee absolute security. Please use a strong password and protect access to your device.

8. Children

SweetSpot is not directed to children under 13. If you believe a child has provided personal data without appropriate consent, contact us so we can investigate and delete it where required.

9. Changes

We may update this policy as SweetSpot changes. We will post the revised policy here and update the effective date. Material changes may also be communicated in the app or by another appropriate method.

10. Contact and data protection enquiries

For privacy questions, access or correction requests, or complaints, contact SweetSpot’s data protection contact at hello@sweetspot.sg. Please do not include passwords, payment-card details or unnecessary health information in email.