Tied App Privacy Policy

This Privacy Policy describes how your personal information is collected, used, and shared when you use the Tied app ("the App") provided by Bayaq PLT.

1. Information We Collect

a. When you use the Tied App, we may collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device.

b. Additionally, as you use the App, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the App, and information about how you interact with the App.

c. We only collect your login info from Google Sign In which is used to administer protected access to some of our content.

d. Health and fitness data. The App collects the health and fitness information you enter or choose to sync, namely: the meals and foods you log and their estimated calories and macronutrients; your activities and estimated calories burned, including data you choose to sync from Apple Health or Health Connect; your body weight and other body measurements; your height, age, gender and breastfeeding status; your activity level, dietary and religious food preferences, and your calorie and macronutrient targets. We use this information to calculate your targets, show your history, streaks and progress, and generate the App's estimates, suggestions and reviews.

e. Photographs and voice recordings. Where you use the App's scanning features, we collect the photographs you take of meals and of restaurant menus, and voice recordings you make in order to describe a meal or activity. These are collected only when you take or record them and are used to identify the food and estimate its nutrition. See section 4 for how they are processed.

f. Subscription information. Where you purchase a subscription, we and our payment processor collect the transaction and subscription status associated with your account. We do not receive or store your card details.

2. Use of Information

a. We use the collected information to provide and improve the Tied App.

b. We may also use your information to communicate with you, screen uploaded content, ensure compliance with our Terms and Conditions, and process subscription services, including billing and payment.

c. If you were to use Google Sign In, we only use your email. These are accessed via OAuth2 login. These info are store in an encrypted database(Google Firebase Auth)

d. Product update emails: We may occasionally email you about new or changed features in the App. Every such email includes an unsubscribe link, and you can opt out at any time using that link or by emailing hazmi@tied.fit. Opting out of product update emails does not affect essential service messages such as account, security, or billing notices.

3. Sharing Your Information

We may share your personal information with third-party service providers who assist us in providing and improving the Tied App, including processing subscription payments.

Your personal information may also be shared to comply with applicable laws and regulations, respond to a subpoena, search warrant, or other lawful requests for information we receive, or to otherwise protect our rights.

Advertising and measurement with Meta. We advertise the App on Facebook and Instagram, which are operated by Meta Platforms, Inc. ("Meta"), and share limited information with Meta to measure and improve those ads:

i. App events on Android. The Android version of the App uses Meta's software development kit, which sends Meta information about how the App is used, namely that it was installed and opened and whether you started a free trial, together with your device's advertising ID. This lets us see which ads led to installs and trials, and lets Meta show our ads to people more likely to find the App useful. The iOS version of the App does not use Meta's software development kit and does not share your advertising identifier; it uses Apple's SKAdNetwork, which reports installs and trial starts to Meta in aggregate, without identifying you.

ii. Customer lists. We may share a hashed (one-way scrambled) version of your email address with Meta to create audiences, for example to show our ads to people similar to our users, or to avoid showing them to people who already subscribe. Meta uses the hashed address only to match it with its own users and deletes it after matching.

iii. What we do not share with Meta. We do not share your meals, photographs, voice recordings, weight, body measurements or any other health and fitness information described in section 1(d), and we do not sell your personal information.

iv. Your choices. You can reset or turn off your advertising ID in your device settings. To have your email address excluded from any customer list we share with Meta, email hazmi@tied.fit. Meta's own use of information is described at https://www.facebook.com/privacy/policy.

4. Third-Party AI Processing

a. What the AI does. The App's calorie and nutrition estimates, food and menu recognition, coaching replies, meal suggestions, meal plans and weekly reviews are generated by an artificial intelligence model. To produce them, information you provide in the App is sent from your device to our servers and then to Google LLC, which operates the Google Gemini API.

b. What we send to Google Gemini, by feature. Different features send different information, and only the information that feature needs:

i. Meal photo scanning and menu scanning — the photograph you take, any note you type alongside it, and your app language. For menu scanning we also send the calories remaining in your day. No information identifying or describing you is included.

ii. Describing a meal in text or by voice — the description you type, or the voice recording you make, and your app language. A recording is transcribed and used to identify the food in a single step; we do not store the recording on our servers once the estimate has been returned to you, and the App asks for your separate permission before the first recording is sent.

iii. Estimating calories burned from an activity description — your body weight and the description you give.

iv. The coach, next-meal suggestions, meal plans and the weekly review — your age, gender, height, weight, target weight, daily calorie and macronutrient targets, dietary and religious food preferences, country and time zone, and the meals and activities you have logged.

v. Checking a photo before it is posted to Community — the meal photograph only. Whether a photo is suitable to show other users is normally decided in the same request that scans the meal (item i); a photo scanned before Community existed is checked once, when you first try to post it.

c. What we do not send to Google Gemini. We do not send your name, email address, account identifier, authentication credentials, payment or subscription information, or your precise location.

d. Why we send it. Solely to generate the estimate, suggestion, plan or review you have requested and return it to your device. We do not send this information to Google for advertising purposes, and we do not sell it.

e. Protection by Google. Google processes these requests on our behalf under the Google APIs Terms of Service and the Gemini API Additional Terms of Service, which apply to our paid use of the Gemini API. Under those terms Google does not use the content we submit, or the responses it returns, to train or improve its general-purpose models, and retains such content only transiently for abuse monitoring. We consider these commitments to provide protection for your information equal to that described in this Privacy Policy. You can review Google's practices at https://policies.google.com/privacy and the applicable API terms at https://ai.google.dev/gemini-api/terms.

f. Your permission and how to withdraw it. The App asks for your permission before it sends any of your information to Google Gemini for the first time, and identifies in the App itself what is sent and who receives it. You may withdraw that permission at any time in the App's settings. If you withdraw it, the App stops sending your information to Google Gemini and the AI-powered features listed in paragraph (a) become unavailable; you can continue to log your meals, activities and weight manually. You can also remove all of your information at any time using the account deletion process described in section 7.

5. Community

a. What Community is. Community is an optional part of the App where users can post a meal, the meals of a day, or a milestone, and react to other users' posts with emoji. It is available to users in Malaysia. Nothing is posted unless you choose to post it.

b. What other users can see. When you post or react, other Community users can see your display name and username, whether you have a Pro subscription, and what you chose to post: for a meal or a day, the meal photographs, names and estimated calories; for a weight milestone, only the change since your first logged weight (for example "−8 kg") and, if you share it as an image, the months it covers, never your weight itself; for a streak, the number of days. Your email address, age, height, body measurements and other information in section 1 are never shown.

c. Reactions. The number of each reaction on a post is visible to everyone who can see the post. A user with a Pro subscription can also see the display name and username of each person who reacted to their own posts.

d. Display name and username. You choose a display name and a unique username before your first post or reaction. A nickname is fine. You can change your username in the App's settings.

e. Health information. Your weight and body measurements are health information. A weight milestone is only posted when you choose to post it, and only as a change.

f. Safety and moderation. Photographs are checked automatically before they can be posted (see section 4(b)(v)); a photo that fails the check can be posted without the photo or not at all. Users can report a post or hide another user's posts. We keep reports, the reasons given and hidden-user choices to keep Community safe; a post reported by several users is hidden until we review it. We may remove posts and suspend Community access for users who break our Terms and Conditions.

g. Deleting what you posted. You can delete any of your posts at any time; its reactions are deleted with it. Deleting your account deletes all of your posts, reactions, reports and hidden-user choices (see section 7).

6. Security

We take reasonable precautions to protect your personal information and ensure that it is not lost, misused, accessed, disclosed, altered, or destroyed.

7. Data Retention and Deletion

a. Retention: We retain your personal information and the data you log in the App (including meals, activities, measurements, chat history, meal plans, and account details) for as long as your account remains active, so that we can provide the App's features such as your history, streaks, and progress over time.

b. How to request deletion: You may request the deletion of your account and all associated data at any time directly from within the App's settings. Alternatively, you may email hazmi@tied.fit from the email address associated with your account, or visit https://www.tied.fit/support.

c. What gets deleted: When we process a deletion request, we permanently remove your user account along with all associated meals, meal information, activities, measurements, chat threads and messages, meal summaries, meal plans, referral data, and your Community display name, username, posts, reactions, reports and hidden-user choices from our active database.

d. When it happens: Deletion requests are processed within 30 days of receipt. Residual copies in encrypted backups are purged on our backup rotation cycle, which does not exceed 90 days.

e. Information we may retain: We may retain a minimal record of the deletion request itself, and any information we are legally required to keep (for example, transaction or tax records related to subscription payments), for the period required by applicable law.

8. Changes to Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Changes and clarifications will take effect immediately upon posting on the App. If we make material changes to this policy, we will notify you here that it has been updated, so you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

9. Contact Information

If you have any questions or concerns about this Privacy Policy, you may contact Bayaq PLT at Aura Residence, Jalan Kerai, P8E, 62250, Putrajaya or via email at hazmi@tied.fit.