Privacy Policy
Effective date: June 9, 2026
This Privacy Policy describes how Clinton St, Inc. ("we," "us," or "our") collects, uses, and handles your information when you use the Bites mobile application ("Bites" or the "App"). By using Bites, you agree to the practices described here.
2. What We Collect
Account and contact information. When you create an account, we collect your email address (if you sign in via email one-time code), phone number (if you sign in via SMS one-time code), and your name if Apple provides it on first Sign in with Apple.
Profile and health data. During onboarding we collect your nutrition goal, current weight, goal weight, height, sex, date of birth or age, activity level, dietary preferences, and food likes/avoids. This information is used solely to personalize your restaurant and menu recommendations.
Location. The app requests your device location to show nearby restaurants and find the closest store.
Usage and analytics. We collect information about how you interact with the app, including screens visited, features used, and in-app restaurant search queries, via PostHog, our product analytics provider. This data is tied to your account.
Purchases. We collect your subscription status and purchase history for the Bites Pro auto-renewing subscription, processed via Apple's StoreKit and Superwall.
User-generated content. If you use the Scan feature, the app captures a photo of a menu for analysis. If you use the Ask AI feature, the messages you type are sent to our backend. Both are tied to your account.
3. How We Use Your Information
- To provide, operate, and improve the App
- To personalize your menu recommendations based on your nutrition profile
- To process and manage your Bites Pro subscription
- To analyze product usage and fix issues (via PostHog)
- To send authentication codes (via Twilio for SMS, Resend for email)
We do not use your information to serve ads or build advertising profiles.
4. Third Parties and Data Processors
We share data with the following service providers only to the extent necessary to operate the App:
- Apple — Sign in with Apple; StoreKit subscription processing. apple.com/privacy
- Google — Google Sign-In. policies.google.com/privacy
- Convex — Backend infrastructure and data storage. convex.dev/privacy
- PostHog — Product analytics. posthog.com/privacy
- Superwall — Paywall and subscription orchestration. superwall.com/privacy
- Twilio — SMS one-time codes for phone sign-in. twilio.com/privacy
- Resend — Transactional email for email one-time codes. resend.com/privacy
We do not sell your personal data to any third party.
5. Tracking and Advertising
As of this version of the App, we do not track users across other companies' apps or websites for advertising purposes. No Meta pixel, CAPI, or cross-app attribution SDK is active. If this changes in a future version, we will update this policy, update the App Store privacy label, and add the required in-app tracking permission prompt before any tracking begins.
6. Account and Data Deletion
You can delete your account and all associated data directly in the App: go to Profile, then Settings, then Delete Account. Deletion is permanent and removes your data from our servers. This satisfies Apple App Store guideline 5.1.1(v).
7. Data Retention and Security
We retain your data for as long as your account is active or as needed to provide the App. Data is encrypted in transit (TLS) and at rest. When you delete your account, your data is hard-deleted from our backend.
8. Children's Privacy
Bites is rated 4+ on the App Store. The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us at contact@clinton.st and we will delete it.
9. GDPR (EU / UK)
If you are located in the EU or UK, you have the right to access, correct, or delete your personal data; restrict or object to processing; and data portability. Our legal bases for processing are performance of a contract (account and subscription) and legitimate interests (analytics and product improvement). To exercise your rights, use the in-app deletion feature or contact us at contact@clinton.st.
10. CCPA / CPRA (California)
If you are a California resident, you have the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of sale or sharing. We do not sell or share personal information as defined under the CCPA/CPRA. Categories collected are described in Section 2 above. To exercise your rights, contact us at contact@clinton.st.
11. Changes to This Policy
If we materially change our data practices, we will update this policy and revise the effective date above. For significant changes, we will notify you via the App or by email.
12. Contact
Clinton St, Inc.
Email: contact@clinton.st
26 Clinton St APT 5A, New York, NY 10002-8705