Information we collect

• Messages you send. The meal descriptions, questions, and photos you send to nabcat, so we can identify the food, estimate calories and macros, and answer you.
• Account and sign-in. When you sign in with Google, Google shares your name, email address, and Google account ID with us; we use them to sign you in and identify your account. For each chat you link we keep a per-channel identifier — your Messenger page-scoped ID (PSID) or Telegram chat ID — so your log stays separate from other people’s. We do not receive your Google or Facebook password or your full Facebook profile.
• Profile and body data. What you enter during setup — such as your name, sex, age, height, weight, goal weight and pace, activity level, experience, diet, and focus goals — and the weigh-ins you log. We use it to calculate your calorie and macro targets and to personalize nabcat’s answers.
• Your food log. The meals, calorie and macro totals, foods you save to My foods, goals, streaks, and timestamps you build up over time.
• Your chat history. Unless you turn it off, we save your conversation with nabcat — what you send and our replies, from the web and every connected channel — so you can see it in one place on nabcat.app. Photos are not kept: we store only that a photo was sent and the meal it logged.
• Subscription details. If you subscribe, our payment provider tells us which plan you chose, the amount paid, and your subscription status (see Payments below). We never receive your full card number.
• Ad referral. If you reach nabcat from one of our ads, which ad it was (see Advertising and measurement below).
• Usage and diagnostics. Basic technical and product-analytics data (e.g. which pages and features are used, error logs) to keep the service running and improve it.

Health information

Your weight, body measurements, and anything you tell us about your health or diet are health information, which the Philippine Data Privacy Act of 2012 treats as sensitive personal information. We process it only with your consent — given when you enter it — and only to calculate your targets, estimate your meals, and run the features you use. We never sell it, never use it to advertise to you, and never share it with advertisers. You can change it any time from your Profile, or ask us to delete it.

How we use your information

• To parse your meals and photos and return calorie and nutrition estimates.
• To maintain your running daily totals, history, streaks, and goals.
• To send you the replies and cards you asked for on your chosen channel.
• To turn Premium on and manage your subscription.
• To measure which of our ads bring people to nabcat.
• To operate, secure, debug, and improve the service.

We do not sell your personal information, and we do not use your meal content or body data to advertise to you.

AI processing

To interpret your messages and photos, nabcat sends the content you submit to third-party AI providers (for example, large-language-model and vision APIs) that process it on our behalf to generate a response. These providers act as our processors and are not permitted to use your content for their own purposes.

Payments

Paid plans are sold through Lemon Squeezy, which acts as the merchant of record: it runs the checkout, processes your payment, handles taxes and receipts, and manages your subscription. Your payment details go directly to Lemon Squeezy — we never see or store your full card number. Lemon Squeezy tells us the plan you bought, the amount paid, and your subscription status so we can turn Premium on. Lemon Squeezy’s own privacy policy covers the information it collects at checkout.

Cookies and analytics

On our website we use cookies and similar local storage that are necessary to keep you signed in and to run the service. We also use a product-analytics provider (PostHog) to understand how features are used and to diagnose problems; this may set cookies or local storage and collect technical data such as the pages you view, your approximate region, device and browser type, and the timezone your browser reports (used to reset your daily totals at your local midnight). If you arrive from one of our ads, a cookie remembers which ad for up to 30 days so we can connect it to your sign-up. We use all of this only to operate, improve, and measure nabcat — not to advertise to you based on your meals.

Advertising and measurement

We advertise nabcat on Meta platforms (Facebook, Instagram, and Messenger). If you message our Page from one of these ads, Meta tells us which ad you came from (an ad ID, or a tag we set on the ad). If you then sign up, we record that ad on your account so we can tell which ads bring people who stay and subscribe. Our checkout, hosted by Lemon Squeezy, may also use Meta’s measurement pixel to tell Meta that a purchase happened and its value, so Meta can report how our ads perform. We never share your meals, photos, body data, or chat content with Meta or any other advertiser.

Messenger and page administrators

When you chat with nabcat on Facebook Messenger, you are messaging our Facebook Page. Please be aware that administrators and authorized staff of the Page can view the messages exchanged in that conversation, including the meals, questions, and photos you send, as part of operating, supporting, and improving the service. Treat a Messenger conversation with nabcat as you would any message to a business page — avoid sending sensitive information you would not want Page staff to see. Meta’s own handling of your data is governed by Meta’s privacy policy.

Sharing

We share information only as needed to run the service:

• Service providers that process data on our behalf: hosting (Railway), database (Convex), AI (OpenAI, and xAI as a backup), product analytics (PostHog), and payments (Lemon Squeezy).
• Messaging platforms — the channel you chose (Meta/Messenger or Telegram) necessarily processes the messages routed through it, and Google handles sign-in.
• Legal — when required by law or to protect the rights, safety, and security of our users and the service.

International transfers

Our service providers store and process data in the United States and other countries outside the Philippines. When your information is transferred, it stays covered by our providers’ data-protection terms and by this policy.

Data retention

We keep your food log and account data for as long as your account is active so your history and totals remain available to you. Saved chat history is kept for 90 days by default; you can change that to 30 days, 1 year, or forever, and anything older is deleted automatically. The ad cookie expires after 30 days. Payment records are kept as long as the law requires. You can ask us to delete your data at any time (see below); we will remove it except where we are required to retain limited records by law.

Security

Everything travels over encrypted connections (HTTPS). Our database only accepts requests from our own servers, messages from Messenger and payment notifications are signature-checked, and access to your data is limited to what’s needed to run nabcat. No service can promise perfect security, but if a breach ever affects your data we will tell you and the authorities as the law requires.

Your choices and rights

• Unlink a channel. You can disconnect any linked channel at any time from your Profile; for Messenger you can also block or delete the conversation with the Page.
• Chat history. In Profile you can stop saving chats, choose how long they are kept, or clear them at any time. Clearing chats does not delete your food log.
• Access, correction, and deletion. Email us to request a copy of your data, to correct it, or to delete it and your account.

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) you have the right to be informed, to access, to object, to correct, to erasure or blocking, to data portability, and to damages. You can also file a complaint with the National Privacy Commission. To exercise any of these, contact us at ron@nabcat.app.

Children

nabcat is for adults 18 and over. It is not directed to anyone under 18, and we do not knowingly collect their personal information. If you believe a minor has given us their data, email us and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

Contact

Questions about this policy or your data? Email ron@nabcat.app.