SnapFuel Privacy Policy
1. Introduction
SnapFuel ("the App", "we", "us", or "our") is a calorie and macronutrient tracker developed and operated by NextWave.Studio ("NextWave.Studio", the "data controller"). This Privacy Policy explains what information the App processes, how and why it is processed, who it is shared with, and the choices and rights you have.
SnapFuel does not require you to create an account, register, or log in. There is no username, no password, and no email address collected by the App in order to use it. Most of your data — your food log, your goals, your profile, and any health metrics you choose to sync — is stored locally on your device and is never transmitted to NextWave.Studio's servers.
By using SnapFuel, you agree to the processing described in this Policy. If you do not agree, please discontinue use of the App.
2. Information We Collect
SnapFuel is designed to minimize data collection. The following describes exactly what is processed, based on how the App actually works.
2.1 Food photos (AI food recognition)
A core feature of SnapFuel is AI food-photo recognition. When you choose to take or use a photo of a meal, the image is sent for analysis so the App can suggest matching foods and calorie/macro estimates. Specifically:
- The photo's raw image bytes are transmitted over an encrypted (HTTPS) connection to a proxy server operated by NextWave.Studio on Cloudflare Workers.
- That proxy immediately forwards the image to Google Gemini 2.0 Flash (Google's Generative Language API) together with a fixed instruction prompt asking the model to identify the food and return candidate labels.
- Gemini returns a structured list of food labels with confidence scores (and, where available, Korean names). The App then matches those labels against its on-device food catalog to estimate calories and macros.
- The proxy does not store your photos and does not log image contents to any database or file. The image is held only in memory for the duration of the single request needed to call Gemini, and is discarded once the response is returned. Photos are also not written to NextWave.Studio's analytics or any persistent storage.
2.2 Optional health and activity data
SnapFuel offers an optional integration with your platform's
health service (Health Connect / Google Fit on Android; Apple Health is planned
for a future iOS release) through the health package. This
integration is read-only and is only activated if you
explicitly enable it and grant permission.
If enabled, the App may read the following categories of data, where available on your device:
- Activity and energy: steps, active/basal/total calories burned, exercise/workout sessions, distance, floors climbed.
- Cardio and vitals: heart rate, resting heart rate, heart-rate variability, blood oxygen, respiratory rate, body temperature, blood pressure.
- Sleep: sleep sessions and sleep stage durations.
- Body composition: weight, height, body-fat percentage.
This health data is read solely to display your activity and wellness metrics inside the App and to inform calorie/energy calculations. It is cached only in the App's local database on your device. SnapFuel never transmits your health data to NextWave.Studio's servers, to Cloudflare, to Google Gemini, or to any other third party. SnapFuel does not write any data back to your health service.
2.3 Device identifier (rate limiting only)
The first time SnapFuel runs, it generates a random identifier (a UUID) and
stores it on your device. This identifier is not derived from
your hardware, advertising ID, or any account, and it does not identify you
personally. It is sent to our Cloudflare proxy (as an X-Device-Id
header) solely so the server can enforce per-device rate limits
on the food-recognition feature and prevent abuse of the AI service. It is not
used for advertising, profiling, or cross-app tracking.
In addition, when the proxy is called, Cloudflare automatically observes the network-level IP address of the request (standard for any internet service). The proxy uses the IP address only as a secondary rate-limiting signal to prevent circumvention of the per-device limits.
2.4 Subscription and purchase information
SnapFuel offers an optional premium subscription (snapfuel_premium,
with weekly, monthly, and annual plans and a 3-day free trial). All purchases,
billing, renewals, refunds, and free-trial management are handled entirely by
the Google Play billing system through the device's in-app
purchase framework.
- NextWave.Studio does not collect or store your payment-card details, billing address, or Google account information. Payment data is handled by Google, not by us.
- The App asks the Google Play billing service directly whether you currently have an active subscription, in order to unlock premium features. Your subscription status is determined live from the store on each launch; we do not perform server-side receipt verification and do not send your purchase receipts to NextWave.Studio's servers.
2.5 On-device usage analytics
SnapFuel records a small number of anonymous, aggregate usage events (for example, that the onboarding flow was completed or that a food scan occurred). These events contain no personal information, no photo content, and no food label text. They are currently stored only on your device and are not transmitted to any server. There is no third-party analytics SDK (such as Firebase Analytics) embedded in the App.
2.6 Information we do NOT collect
- No user account, name, email address, or password.
- No advertising identifier; the App contains no ads and no ad networks.
- No precise location / GPS data.
- No contacts, no SMS, no call logs.
- No selling or sharing of personal information for advertising.
3. How We Use Information
- Food photos: to identify foods and estimate calories and macronutrients via AI analysis, at your request.
- Health and activity data (optional): to display your activity, vitals, and sleep metrics and to refine energy calculations, locally on your device.
- Device identifier and IP address: to rate-limit and protect the AI food-recognition service from abuse.
- Subscription status: to unlock and maintain access to premium features you have purchased.
- On-device analytics events: to understand, in aggregate and anonymously, how features are used so we can improve the App.
We do not use your information to build advertising profiles or to sell to data brokers.
4. Third-Party Services
To provide certain features, SnapFuel relies on the following third-party services. Each is governed by its own privacy policy.
| Service | Purpose | What is shared |
|---|---|---|
| Google Play billing (Google LLC) | Processing the optional subscription, free trial, renewals, and refunds. | Purchase and payment information is handled by Google. NextWave.Studio does not receive your payment details. |
| Cloudflare Workers (Cloudflare, Inc.) | Hosting the proxy that relays food photos to the AI service and enforces rate limits. | The food photo (transiently, in memory), your random device identifier, and your network IP address. Cloudflare does not receive your health data or subscription data. |
| Google Gemini API (Google LLC) | AI analysis of food photos to produce food labels and calorie/macro estimates. | The food photo image is transmitted to Google Gemini 2.0 Flash for analysis. No device identifier, health data, or subscription data is sent to Gemini. |
Photo transmission and retention. When you use the food-photo feature, your photo is transmitted to Google Gemini (via the Cloudflare proxy) for analysis. NextWave.Studio's proxy does not store or persistently log your photos; the image exists only in memory for the single analysis request and is then discarded. Google's handling and retention of data submitted to the Gemini API are governed by Google's applicable terms and privacy policy for that API.
SnapFuel also includes a built-in food reference database (Korean and international foods) that ships inside the app for text search. Browsing or searching this local catalog happens entirely on your device and does not transmit any of your data.
5. Data Retention
- Food photos: not retained by NextWave.Studio. They are processed transiently in memory by the proxy and discarded after each request.
- Health/activity data, food log, profile, and on-device analytics: stored locally on your device for as long as the App is installed. You can delete this data by clearing the App's data or uninstalling the App.
- Device identifier: kept on your device for the life of the installation. On the server, the rate-limit counters keyed to this identifier are short-lived and expire automatically (within minutes to hours; abuse blocks expire within 24 hours).
- Subscription data: retained by Google Play according to Google's policies; NextWave.Studio does not maintain its own copy.
6. Your Choices & Rights
Because SnapFuel stores most data locally and has no account system, you remain in direct control of your information:
- You can decline or revoke camera access; without it, the food-photo feature simply will not be used.
- You can decline or revoke health-data permission at any time via Health Connect / your device settings; the health integration is entirely optional.
- You can delete all locally stored data by clearing the App's storage or uninstalling the App.
- You can manage or cancel your subscription at any time through Google Play.
6.1 California residents (CCPA / CPRA)
If you are a California resident, you have the right to know what personal information is collected and how it is used, the right to request deletion, the right to correct inaccurate information, and the right not to be discriminated against for exercising these rights. NextWave.Studio does not sell or share your personal information for cross-context behavioral advertising, and does not use sensitive personal information for purposes other than those described in this Policy. Because the App is account-free, most data resides on your device under your control; you can exercise deletion directly by removing the App's data. For any additional request, contact us at the address below.
6.2 European Economic Area, UK, and Switzerland (GDPR)
If you are located in the EEA, the UK, or Switzerland, NextWave.Studio acts as the data controller for the limited processing described above. Our legal bases are:
- Consent (Art. 6(1)(a) GDPR, and Art. 9(2)(a) for health data) — for processing food photos via the AI feature and for the optional health-data integration. You may withdraw consent at any time by ceasing to use the feature or revoking the permission.
- Performance of a contract (Art. 6(1)(b)) — for providing and maintaining your subscription.
- Legitimate interests (Art. 6(1)(f)) — for rate limiting and abuse prevention via the device identifier and IP address, and for anonymous on-device usage measurement.
You have the rights of access, rectification, erasure, restriction, objection, and data portability, and the right to lodge a complaint with your local supervisory authority. Note that food photos are not retained by us and most other data is stored only on your device, which you can erase directly. Where food photos are transmitted to Google Gemini, that transfer may involve processing outside your region; such transfers are subject to the relevant provider's safeguards.
7. Children's Privacy
SnapFuel is intended for users aged 12 and older. The App is not directed to children under 12, and NextWave.Studio does not knowingly collect personal information from children under 12. If you believe a child under 12 has used the App in a way that provided personal information to us, please contact us and we will take appropriate steps to address it. Users under the age of majority in their jurisdiction should use the App only with the involvement of a parent or guardian.
8. Security
We take reasonable measures to protect the limited data the App processes. All network communication between the App, the Cloudflare proxy, and Google Gemini is encrypted in transit using HTTPS. Food photos are processed transiently and not stored on our infrastructure. Data stored locally on your device is protected by your device's own operating-system security controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
9. Changes to This Policy
We may update this Privacy Policy from time to time, for example to reflect new features (such as the planned iOS release and Apple Health integration) or legal requirements. When we make material changes, we will update the "Effective date" above and, where appropriate, provide notice within the App. Your continued use of SnapFuel after an update constitutes acceptance of the revised Policy.
10. Contact
If you have questions, requests, or concerns about this Privacy Policy or your data, please contact the data controller, NextWave.Studio, at:
Email: nextwave.studio7@gmail.com