Privacy Policy

Effective Date: 10 February 2025

Last Updated: 2 October 2026

Welcome to CICO! Your privacy is important to us. This Privacy Policy explains how CICO Tracker ("CICO," "we," "our," or "us") collects, uses, and safeguards your information when you use our mobile application ("App").

By using CICO, you consent to the collection and use of information as described in this policy.

1. Information We Collect

We collect the following types of data to provide and improve our services:

1.1 Personal Information

  • Name and email (for account creation)
  • Profile photo (optional)
  • Payment information is processed securely by the App Store or Google Play; we do not store your full payment card details
  • User-generated content (workout data, group interactions, related posts, meal photos used for scanning, and calorie entries)

1.2 Usage Data

  • Workout session details (start time, duration, group activity)
  • Group leaderboard rankings
  • Activity logs, streak statistics, and engagement metrics
  • App feature usage statistics
  • Selected conversion events used only for ad measurement and install attribution, for example: account creation (sign up), group created, group joined, first session post/check-in, free trial start, and subscription start

1.3 Nutrition & Calorie Data

  • Daily calorie targets (including fixed or adaptive-style goals)
  • Meal entries, including meal name, calories, optional macros (protein, carbs, and fat), meal type, and notes
  • Calories burned logs (when entered)
  • Derived daily and weekly balances and summaries
  • This information is stored with your account using Supabase

1.4 AI Meal Scan Photos & Results

  • Photos you take or select for meal scanning are processed to estimate nutrition information
  • Photos are sent to CICO's servers / edge functions and processed using a third-party AI provider, Google Gemini
  • Estimates (meal name, items, calories, and macros) may be stored as calorie entries after you review and save them
  • Meal scans are for personal logging and are not shared to the group feed
  • Original meal-scan photos are processed to provide the feature and are retained only as long as needed to deliver the service, comply with legal obligations, or resolve disputes — they are not permanently or publicly shared as a social post

1.5 Body Metrics (Optional)

  • Optional progress metrics you choose to log, such as weight, body fat percentage, and muscle mass, for progress trends in Analytics

1.6 Device & Technical Information

  • Device type, operating system, and app version
  • IP address and approximate location (for fraud prevention & security)
  • Crash reports and performance data
  • Device identifiers used for authentication, security, advertising, and attribution
  • Advertising identifiers where permitted (for example, the Android Advertising ID). We do not currently request Apple's App Tracking Transparency (ATT) permission for IDFA collection

1.7 Photos & Media

  • Users may upload photos when sharing session updates with their group
  • Users may take or select photos for AI meal scanning
  • Camera and photo library access are requested only when required, and only with your permission

2. Subscription Information

CICO offers auto-renewable subscriptions with the following terms:

  • Monthly subscription with 30-day free trial for eligible new subscribers
  • Payment will be charged to your App Store/Google Play account at confirmation of purchase
  • Subscription automatically renews unless auto-renew is turned off at least 24-hours before the end of the current period
  • Account will be charged for renewal within 24-hours prior to the end of the current period
  • You can manage and cancel subscriptions in your store account settings
  • Any unused portion of the free trial period will be forfeited when purchasing a subscription
  • Subscription management uses RevenueCat and Apple / Google

3. How We Use Your Information

We use your data to:

  • Provide core CICO features (tracking sessions, group leaderboards, streaks, and related social features)
  • Provide calorie tracking and AI meal estimates
  • Enforce free-tier AI scan limits and Premium entitlements
  • Improve the reliability and service quality of estimates and the App overall
  • Process and manage subscriptions
  • Send important notifications (session reminders, group updates)
  • Improve app performance and security
  • Analyze usage patterns to enhance user experience
  • Measure and optimize paid app-install advertising campaigns, including campaigns on Meta (Facebook and Instagram), TikTok, and Google/YouTube
  • Show in-app ads to free users via Google AdMob, including interstitial ads and rewarded ads that may unlock additional AI scan credits
  • Ensure compliance with App Store and Google Play policies
  • Prevent fraud and unauthorized access

4. Data Sharing and Third-Party Services

We do not sell your personal data. Your information is shared only in these specific circumstances:

  • Within Groups: Other group members may see shared workout stats and session photos. Meal-scan photos used for calorie logging are not shared to the group feed
  • Service Providers:
    • Supabase (data storage)
    • RevenueCat (subscription management)
    • App Store/Google Play (payment processing)
    • Google Analytics (app analytics and related measurement)
    • Firebase (app infrastructure and related services where used)
    • Google Gemini / Google AI — meal photo analysis for calorie and macro estimates. Processing occurs through CICO's backend; users do not communicate directly with Google Gemini
  • Advertising & Attribution:
    • Meta (Facebook and Instagram) App Events — used to attribute installs and measure campaign conversions
    • TikTok Events Manager — used to attribute installs and measure campaign conversions
    • Google Ads / YouTube advertising measurement — used to attribute installs and measure campaign conversions where applicable
    • Where supported, automatic event collection is disabled; we send only limited, deliberate conversion events
  • Advertising Delivery: Google AdMob shows in-app ads to free users. Rewarded ads may unlock additional AI scan credits. Premium removes ads
  • Legal Requirements: When required by law or to protect rights

These partners process data under their own privacy policies (including Meta, TikTok, and Google). We encourage you to review their policies for more information about how they handle data.

5. Advertising & Attribution Controls

  • On Android, the advertising ID may be used for ads and attribution in line with Google Play policies
  • On iOS, we rely on privacy-preserving measurement (including SKAdNetwork where applicable). We do not currently prompt for App Tracking Transparency permission, and we do not collect IDFA, unless we later enable IDFA-based measurement
  • You can limit ad personalization in your device settings
  • In-app ads can be removed by upgrading to CICO Premium

6. Accuracy Disclaimer

AI-generated and user-entered nutrition information consists of estimates and is not medical advice. CICO is not a medical device and does not provide medical or dietary advice. Always review AI meal-scan results before logging, and consult a qualified professional for health or nutrition decisions.

7. Data Security & Retention

  • We use industry-standard security measures to protect your data
  • Data is encrypted during transmission and storage
  • Regular security audits and updates
  • Data retained only as long as necessary or required by law
  • Account deletion available upon request

8. Your Privacy Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data (via support@cicotracker.com)
  • Opt-out of marketing communications
  • Control app permissions (camera, photo library, notifications, etc.)
  • Request data portability

9. Children's Privacy

We do not knowingly collect or solicit data from anyone under 13 years of age. If we learn that we have collected personal information from a child under 13, we will delete that information as quickly as possible.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Policy

We may update this privacy policy periodically. We will notify you of any material changes through the app or via email.

12. Contact Information

For questions about this privacy policy or our practices:

13. Legal Compliance

This privacy policy complies with:

  • Apple App Store Guidelines
  • Google Play Store Policy
  • General Data Protection Regulation (GDPR)
  • California Consumer Privacy Act (CCPA)
  • Children's Online Privacy Protection Act (COPPA)