Your data stays
on your device.

01 Introduction

This Privacy Policy describes how Evo Solutions ("we," "us," or "our") collects, uses, stores, and protects your information when you use the CHAR mobile application ("CHAR" or the "App"). We are committed to protecting your privacy and ensuring you understand how your data is handled.

By downloading, installing, or using CHAR, you agree to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use the App.

02 Information We Collect

2.1 Information You Provide Directly

When you use CHAR, you may voluntarily provide the following personal information:

• Profile Information: Name, date of birth, gender, height, weight, target weight, activity level, and fitness goals.
• Profile Photo: An optional profile image stored locally on your device.
• Nutrition Data: Meal entries, food descriptions, calorie and macronutrient data, water intake, custom foods, and favourite meals.
• Body Measurements: Weight logs and body composition data.
• Workout Data: Exercise type, name, duration, and calories burned.
• Fasting Data: Fasting protocols, start and end times, and completion status.
• Mood & Wellbeing Data: Mood ratings, journal notes, and associated tags.
• Habit Tracking: Habit names, completion logs, and associated notes.
• Progress Photos: Photos you choose to take or import to track your physical progress.
• Planner Data: Tasks, routines, categories, schedules, and completion logs.

2.2 Information Collected Automatically

• App Installation Date: Stored locally to manage trial period eligibility.
• Preference Settings: Your chosen units (metric/imperial), appearance mode, and notification preferences.

2.3 Information from Apple Health (HealthKit)

With your explicit permission, CHAR reads and writes the following data types from Apple Health:

You control which data types CHAR can read and write through the Apple Health app on your device. You may revoke these permissions at any time.

2.4 Camera and Microphone Data

• Camera: Used for AI-powered food recognition (scanning meals) and barcode scanning. Camera images are processed entirely on your device and are never transmitted to external servers.
• Microphone: Used for voice-based meal logging. Audio is processed using Apple's Speech Recognition framework on your device.

03 How We Use Your Information

We use your information solely to provide and improve the App's functionality:

• Nutrition Tracking: To log, calculate, and display your daily nutrition intake and progress toward your health goals.
• AI-Powered Features: To provide on-device food recognition, voice meal entry, personalised nutrition insights, and AI coaching — all processed locally on your device using Apple's on-device machine learning and Foundation Models framework.
• Health Integration: To sync nutrition and fitness data with Apple Health for a unified health overview.
• Cross-Device Sync: To synchronise your data across your Apple devices using your personal iCloud account.
• Subscription Management: To verify and manage your subscription status through RevenueCat.
• Notifications: To send local reminders for meals, water intake, goals, streaks, and planner tasks (only if you grant permission).
• Food Database Lookups: To retrieve nutrition information when you scan a barcode or search for a food item.

04 On-Device AI Processing

CHAR uses artificial intelligence to enhance your experience. It is important to understand that:

• Food Recognition: Powered by an on-device CoreML model. Camera images are analysed entirely on your device. No images are sent to any server.
• Nutrition Insights & AI Coach: Powered by Apple Foundation Models (Apple Intelligence), which runs entirely on your device. Your health and nutrition data is processed locally and never leaves your device for AI purposes.
• Voice Entry: Processed using Apple's on-device Speech Recognition framework.

05 Data Storage & Security

5.1 Local Storage

All your data is stored locally on your device using Apple's CoreData framework (SQLite database). This includes all nutrition entries, health data, habits, planner tasks, mood entries, progress photos, and personal profile information.

Progress photos and profile images are saved as files within the App's private sandbox on your device.

5.2 iCloud Sync

If you have iCloud enabled for CHAR, your data is synchronised across your devices using Apple's CloudKit service. This data is stored in your personal iCloud account and is governed by Apple's Privacy Policy. We do not have access to your iCloud data.

5.3 Security Measures

• All data in transit uses industry-standard TLS/HTTPS encryption.
• All local data is protected by Apple's hardware encryption and your device passcode/biometrics.
• We do not operate any proprietary servers. We do not store any of your personal data on our servers.

06 Third-Party Services

CHAR integrates with the following third-party services, each with their own privacy policies:

6.1 RevenueCat (Subscription Management)

We use RevenueCat to manage in-app subscriptions. RevenueCat receives:

• An anonymous, randomly generated user identifier
• App Store purchase receipts (processed by Apple)

RevenueCat does not receive your name, email, health data, or any personal content. For more information, see RevenueCat's Privacy Policy.

6.2 Open Food Facts (Barcode Lookup)

When you scan a food barcode, the barcode number (EAN-8/EAN-13) is sent to Open Food Facts, an open-source food database, to retrieve nutrition information. No personal data is transmitted. For more information, see Open Food Facts' Privacy Policy.

6.3 USDA FoodData Central (Food Search)

When you search for a food item, your search query text is sent to the USDA FoodData Central API, a free U.S. government nutrition database. No personal data is transmitted. For more information, see USDA's Privacy Policy.

6.4 Apple Services

• Apple HealthKit: Governed by Apple's strict HealthKit guidelines. CHAR never uses HealthKit data for advertising or shares it with third parties.
• Apple CloudKit (iCloud): Your synced data is stored in your personal iCloud account under Apple's privacy protections.
• Apple Intelligence (Foundation Models): All AI processing occurs on-device under Apple's privacy framework. No data is sent to Apple for AI processing.

07 Data Sharing

Your data may be shared only in the following limited circumstances:

• Apple iCloud: If you enable iCloud sync, your data is stored in your personal iCloud account.
• Apple Health: If you grant permission, nutrition and fitness data is exchanged with Apple Health.
• Service Providers: As described in Section 6, limited non-personal data (barcodes, food search queries, anonymous purchase receipts) is sent to third-party services solely to provide App functionality.
• Legal Requirements: We may disclose information if required by law, legal process, or governmental request.

08 Data Retention

Your data is stored on your device and in your iCloud account for as long as you use the App. We do not independently retain any of your data on our servers.

• Deletion by User: You can delete all your data at any time using the "Delete All Data" option in the App's Settings.
• Uninstallation: Removing the App from your device will delete all locally stored data. iCloud data may persist in your iCloud account until you delete it through your iCloud settings.
• Subscription Data: RevenueCat retains anonymous purchase records in accordance with their data retention policy.

09 Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

9.1 For All Users

• Access: View all your data directly within the App at any time.
• Deletion: Delete all your data using the "Delete All Data" feature in Settings.
• HealthKit Control: Grant or revoke Apple Health permissions at any time through the Apple Health app.
• Notification Control: Enable or disable notifications at any time through your device Settings.

9.2 For European Economic Area (EEA) Residents (GDPR)

Under the General Data Protection Regulation, you additionally have the right to:

• Request access to your personal data
• Request rectification of inaccurate data
• Request erasure of your data ("right to be forgotten")
• Object to or restrict processing of your data
• Data portability

To exercise these rights, contact us at the address provided in Section 13.

Legal Basis for Processing (GDPR): We process your data based on your consent (provided when you create a profile and grant permissions) and the necessity to perform the service you have requested.

9.3 For California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act, you have the right to:

• Know what personal information is collected and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information — we do not sell your personal information
• Non-discrimination for exercising your privacy rights

10 Children's Privacy

CHAR is not directed at children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete such information.

11 Advertising & Tracking

We do not collect device identifiers for advertising (IDFA), and we do not participate in any advertising networks.

12 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this policy. We encourage you to review this policy periodically.

Continued use of the App after changes constitutes acceptance of the updated Privacy Policy.