Privacy Policy
Last Updated: November 2025
1. Introduction
Cratox ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our nutrition database and related services.
2. Information We Collect
2.1 Information You Provide
- Contact information when you reach out to us
- Account information if you create an account (when app launches)
- Feedback and correspondence
2.2 Automatically Collected Information
- Usage Data: Pages visited, time spent, browser type, device information
- Cookies: We use cookies and similar technologies for functionality and analytics
- IP Address: For security and analytics purposes
- Language Preferences: To provide content in your preferred language
3. How We Use Your Information
We use the collected information to:
- Provide and maintain our services
- Improve user experience and website functionality
- Analyze usage patterns and optimize our content
- Respond to your inquiries and support requests
- Send important updates about our services
- Detect and prevent fraud or abuse
- Comply with legal obligations
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
- Essential Cookies: Required for basic website functionality (admin authentication)
- Analytics Cookies: Help us understand how visitors use our website
- Preference Cookies: Remember your language and display preferences
You can control cookies through your browser settings, but disabling certain cookies may limit functionality.
5. Data Sharing and Disclosure
We do not sell your personal information. We may share data in the following circumstances:
- Service Providers: Third parties that help us operate our services (hosting, analytics)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
6. Third-Party Services
Our services use third-party providers:
- Hosting: Vercel (see their privacy policy)
- Database: Supabase (see their privacy policy)
- AI Services: OpenAI for content generation
- Images: Pexels for food photography
These providers have their own privacy policies and we are not responsible for their practices.
7. Data Security
We implement appropriate technical and organizational measures to protect your information:
- Encrypted connections (HTTPS)
- Secure authentication for admin access
- Regular security updates and monitoring
- Database security measures
However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
8. Your Rights (GDPR/CCPA)
Depending on your location, you may have the following rights:
- Access: Request access to your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data
- Portability: Request transfer of your data
- Objection: Object to processing of your data
- Opt-out: Opt out of marketing communications
To exercise these rights, please contact us using the information provided below.
9. Children's Privacy
Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our services, you consent to such transfers.
11. Changes to Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated "Last Updated" date.
12. Contact Us
If you have questions about this Privacy Policy or our data practices: