Privacy Policy – PandaCare

PandaCare (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the PandaCare mobile application and related services. We operate from Canada. By using the app, you acknowledge this policy.

We may collect: (a) Account and profile information you provide, such as email address, name or nickname, age range, and preferences (e.g. activity level, goals); (b) Wellness and usage data, such as check-ins, water intake, habits, progress, and daily completions used to personalize your experience; (c) Step and motion data from supported system health platforms (HealthKit on iOS, Health Connect on Android) when you grant permission, limited to step-related data needed for the feature; (d) Photos and camera images that you choose to provide for food analysis features; (e) Device and app data, such as device type, operating system, app version, and basic diagnostics for compatibility, support, and security; (f) Identifiers and access status, such as an anonymous ID before sign-up, a user ID after sign-up, and whether you are in the 14-day free trial period or have an active subscription. Subscription and payment processing are handled by the Apple App Store or Google Play Store; we do not store your full payment card details.

We use your information to: provide and personalize the Service (e.g. daily suggestions, reminders, progress tracking); create and manage your account; power optional features such as step tracking and food analysis when enabled by you; process and support subscriptions via the app stores; send you service-related messages and, with your consent where required, marketing or tips; improve the app, fix issues, and develop new features; and comply with legal obligations. We do not sell your personal data to third parties.

Where laws such as the GDPR or similar apply: we process your data based on your consent (e.g. optional features or marketing), to perform our contract with you (e.g. providing the Service), and for our legitimate interests (e.g. security, analytics, improving the app) where those interests are not overridden by your rights.

We may share your information with: (a) Service providers that help us operate the app (e.g. hosting, content delivery, analytics, authentication, and email delivery), under contracts that require them to protect your data and use it only for the purposes we specify; (b) App store operators (Apple, Google) for subscription and payment processing, in accordance with their privacy policies; (c) Authorities when required by law or to protect our rights, safety, or property. We do not sell or rent your personal information to third parties.

We retain your data for as long as your account is active or as needed to provide the Service and fulfill the purposes described in this policy. You can request deletion of your account from the Profile settings in the app (or by contacting us). After account deletion or another valid erasure request, we will delete or anonymize your personal data within a reasonable period, except where we must retain limited records for legal, regulatory, fraud-prevention, or legitimate business purposes.

Depending on your location, you may have the right to: access and receive a copy of your personal data; correct inaccurate data; request deletion of your data; object to or restrict certain processing; withdraw consent where processing is based on consent; and, in some regions, data portability or the right to lodge a complaint with a supervisory authority. You may delete your account in app settings where available, or contact us at the email or address below for any rights request. We will respond within the time required by applicable law.

On the web version of PandaCare, we may use analytics technologies (including Google Analytics) to understand aggregate traffic and product usage. These tools may use cookies or similar technologies. We configure analytics to avoid sending direct identifiers or sensitive wellness content. You can manage cookies through your browser settings. Where required by applicable law, we rely on appropriate consent or opt-out mechanisms for non-essential analytics.

Because we operate from Canada and use service providers in multiple regions, your information may be processed in countries other than your own. Where required, we implement safeguards intended to protect transferred personal data in line with applicable law.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

The Service is not directed at children under 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time. We will indicate the “Last updated” date when we do. If we make material changes, we may notify you in the app or by email. Your continued use of the Service after changes constitutes acceptance of the updated policy.