Who we are
Protein-X is an AI-powered protein tracking app operated by JAG Studio Ltd, a company registered in the United Kingdom. If you have any questions about this policy or your data, contact us at hello@jagstudio.digital.
What data we collect
- Account data: the name, email address, and unique identifier returned by Apple Sign In or Google Sign In via Supabase Auth. We never see your Apple ID or Google account password.
- Profile data: the name, weight, height, goal, and daily protein target you enter during onboarding, used to personalise your experience.
- Food scan data: the photos you take or pick from your library to scan, plus the resulting food name, estimated protein totals, and ingredient breakdown.
- Location data: your approximate device location, only when the Radar tab is in use, to surface nearby high-protein options.
- Health data: if you enable Apple Health integration, the Dietary Protein samples written by Protein-X. We never read other Health categories.
- Device and app metadata: app version, iOS version, device model, language, and timezone, used for support, stability, and product improvement.
- Product analytics and diagnostics: anonymised in-app events (e.g. sign-in completed, scan completed, paywall viewed), screen views, crash reports, and performance traces, processed via Google Firebase. See the "Analytics, diagnostics, and crash reporting" section below for details.
AI processing
When you scan a meal, we send the captured image to a third-party AI vision provider to identify the food and estimate the protein content. The image is processed transiently to generate the result and is not used to train third-party models. We do not claim ownership of your photos.
Before the food analysis runs, the image is also passed through a third-party content moderation service to block inappropriate content. The same transient-processing rules apply.
Maps and nearby places
The Radar feature renders a map and queries a third-party places service for nearby food sources based on your current coordinates. These providers receive only your location and the search radius — never your account information.
Apple Health
Apple Health integration is opt-in and controlled by you. If enabled, Protein-X writes a Dietary Protein sample to the iOS Health database for every scan you save. This data stays on your device, managed by Apple's HealthKit framework. We never receive a copy of your Health data on our servers.
You can revoke the permission any time in iPhone Settings → Health → Data Access & Devices → Protein-X. Existing samples remain in your Health app until you delete them there.
Notifications
With your permission, Protein-X schedules local meal reminders (breakfast, lunch, dinner) and a one-shot "target hit" celebration when you cross your daily protein goal. These notifications are generated and stored locally on your device by iOS — we do not send push notifications from our servers.
Payments and subscriptions
The Pro subscription is processed by Apple via in-app purchase. We never see or store your payment card details. Apple shares with us only the anonymous subscription status (active / expired) needed to unlock Pro features in your account.
Affiliate links
Some product suggestions in the app open Amazon via affiliate links. When you tap a link, you are redirected to Amazon's website or app, where Amazon's own privacy policy applies. We do not receive your purchase details — only the aggregate commission summary from Amazon's affiliate dashboard.
Analytics, diagnostics, and crash reporting
To understand how Protein-X is used, fix bugs, and improve performance, we use Google Firebase — specifically Firebase Analytics, Crashlytics, and Performance Monitoring. These services collect:
- Product events: anonymised records of in-app actions such as sign-in completed, onboarding completed, scan started or completed, paywall viewed, and subscription purchased or restored.
- Screen views: which screens you visit inside the app and the order you visit them in.
- User identifier: the same anonymous account id we use internally (the UUID assigned by our authentication provider) — never your name, email, or any payment data — so we can join events from the same user across sessions.
- Crash reports: automatic stack traces, device model, OS version, and app version generated when the app crashes, used to diagnose and fix bugs.
- Performance traces: anonymised timing measurements (app start, network requests, screen render times) so we can identify slow paths.
We do not use the iOS Advertising Identifier (IDFA), and we do not use Firebase data for advertising or cross-app tracking. Firebase processes this data on Google's infrastructure under Google's Firebase Privacy and Security terms.
How we use data
- Provide and operate the Protein-X service.
- Personalise your daily target, trends, and suggestions.
- Improve product quality, accuracy, and stability.
- Prevent abuse, fraud, and unauthorised access.
- Provide customer support and respond to your requests.
Categories of service providers
To deliver Protein-X we share the minimum data necessary with the following categories of trusted third-party processors:
- Cloud authentication and database — stores your account, profile, and scan history.
- AI vision and content moderation — analyses meal photos to estimate protein and screens for inappropriate content.
- Map rendering and places search — powers the Radar tab using your approximate location and the search radius.
- Apple — sign-in, in-app purchases, HealthKit, local notifications, and App Store distribution.
- Google — Google Sign In flow, when you choose it, and Google Firebase for product analytics, crash reporting, and performance monitoring.
- Affiliate marketing networks — destination of product links surfaced as suggestions.
We can disclose the specific provider names on request to hello@jagstudio.digital if you need this for compliance or accessibility reasons.
Data retention
We retain your account and scan history for as long as your account is active. You can delete your account and all associated cloud data at any time from Settings → Profile → Delete account inside the app. Locally cached scans, prefs, and offline data are removed when you uninstall the app or use the in-app reset.
Your rights (UK / EU GDPR)
You have the right to access, rectify, port, restrict, or delete your personal data, and to object to processing. To exercise any of these rights, contact us at hello@jagstudio.digital. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority.
Security
We use reasonable technical and organisational safeguards to protect your information, including transport encryption (HTTPS), per-user row-level access control so users can only access their own data, and minimisation of data sent to third-party providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Children
Protein-X is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us so we can delete it.
International transfers
Your data may be processed in countries other than where you live — including the United States, where some of our infrastructure providers operate. When we transfer data internationally, we rely on safeguards such as Standard Contractual Clauses or equivalent mechanisms required by UK and EU law.
Changes to this policy
We may update this policy from time to time. If we make material changes, we will update the date above and may provide additional notice in the app. Continued use after an update means acceptance of the updated policy.
Contact
JAG Studio Ltd (United Kingdom)
Email:
hello@jagstudio.digital