Draft — under legal review. Not yet in effect.
This text has not been reviewed by a lawyer and makes no claim of compliance with any specific law. Details in [brackets] will be supplied by Sporting Bite before publication.
Privacy Notice
Who we are
Sporting Bite is operated by Sporting Bite Management. Registered address: [pending — to be supplied]. Contact: info@sportingbite.com.
What we collect and why
| Data | Purpose | Type | Status |
|---|---|---|---|
| Email address | Your account, sign-in and essential service emails (confirmation, password reset) | Essential | Active |
| Sign-in credentials | Handled by our authentication provider. Passwords are stored only as one-way hashes by that provider; Sporting Bite never sees or stores your plaintext password. With Google sign-in, Google shares your email address and name with us; we never receive your Google password. | Essential | Active |
| Display name | Personalising the app | Essential | Active |
| Food Journal entries and nutrition values | Your private food record and the totals calculated from sourced nutrition data | Essential | Active |
| Activity entries | Your private activity record and daily totals | Essential | Active |
| Account roles and role-change history | Security and accountability | Essential | Active |
| Sharing with a professional | Only if you accept a verified professional's invitation: the record types and dates you choose. You can revoke at any time. A history of grants and each view is kept (no meal text) and is retained after revocation or account deletion. | Optional, opt-in | Active |
| Referral by a professional (draft wording — owner/legal review required) | Only if you open a professional's referral link and then confirm it yourself: we record which verified professional referred you and when. The professional sees counts and dates, and your name only while you share records with them. It never shares your journal or activity, and no one is paid. If you delete your account, the record is detached from you and kept without your identity; how long it is kept is still to be decided. | Optional, opt-in | Active |
| AI processing — Food Finder | Only when you use Food Finder, to suggest foods from our catalog: the text you type (up to 300 characters) and our published food catalog (names, categories, descriptions, ingredients, guidance). Not sent: your name, email, journal, activity, profile or sharing data. Sporting Bite does not save what you type. | Optional, used only when you choose | Active |
| AI processing — Journal Insights | Only when you open Insights for a period with at least 3 meals, to write general observations: a summary of your own journal for that period — counts of meals by type, totals calculated from sourced nutrition records (unknown values marked unknown), the names of matched catalog foods, and our published catalog. Not sent: your name, email, account ID, meal descriptions, notes, times or activity. The result is shown to you and not saved. | Optional, used only when you choose | Active |
| AI processing — professional draft notes | Only if you share records with a verified professional and they ask for an AI draft: a summary of the records you shared for the dates they choose, within your sharing permission — meal counts, sourced nutrition totals (only if you share nutrition), matched food names, and activity counts and minutes (only if you share activity). Not sent: your name, email, account ID, meal descriptions, notes or times. Your permission is rechecked on every request, and revoking sharing stops it straight away. The draft is not saved and nothing reaches you unless the professional reviews, edits and sends it as a note. | Part of opt-in sharing | Active |
| AI provider (all AI features) | Requests go to an OpenAI model (GPT-6 Astra) through the Lovable AI Gateway, which runs OpenAI models on Microsoft Azure AI Foundry. The model is configured not to retain requests. Sporting Bite does not store AI requests or answers. [Processing region to be confirmed.] [Legal basis and any international-transfer safeguards — owner/legal review required.] | Processor | Active |
| Marketing email | — | Optional, opt-in | Not used |
We do not sell your data. Nothing is shared with a professional unless you accept their invitation. AI is used only in the optional features above, only when you (or, for draft notes, a professional you share with) start it, and only with the minimum summary described. Nothing is used for marketing. If any of these change, they will be off by default and only used after you explicitly opt in.
Who can see your records
Your journal, nutrition and activity records are visible only to you when signed in. Our database enforces this per account. Staff roles do not grant access to your journal or activity entries.
Where data is stored
Data is held with our hosting and authentication providers: [provider names and storage regions].
How long we keep it
- Your account and records are kept until you delete them or delete your account.
- When you delete your account, your profile, roles, journal and activity entries, professional application and any uploaded credential files are permanently removed.
- Security history of role changes is append-only and kept after deletion. It refers to your former account only by an internal ID, not your name or email. [Retention period to be confirmed.]
Your choices
- Correct your name on your profile page; edit or delete any journal or activity entry.
- Download your data (all records as a file) or your Food Journal as CSV from your profile and journal pages.
- Delete your account from your profile page.
- Contact us at info@sportingbite.com with any request or complaint.
Changes
We will show the date of each version here. Version: draft, not in effect.