Your data, in plain terms.

CarniLedger (“we,” “us,” or “our”) provides a macro and food tracking application for people following strict animal-based dietary protocols. This policy applies to the CarniLedger mobile application and the carniledger.com website.

We collect only what we need to operate the service:

• Account information: email address, name (if you provide it), and authentication identifiers.
• Protocol settings: the diet phase you select (carnivore, keto-carnivore, elimination, lion diet) and any goals you configure.
• Food and macro logs: the meals you record, macro estimates, and any manual adjustments.
• Symptom check-ins: the daily or periodic ratings you enter (energy, digestion, sleep, etc.).
• Subscription and billing status: whether you're on a trial, monthly plan, or annual plan, and the plan's renewal state. We do not receive or store your payment card details.

Your food logs, symptom check-ins, and protocol settings are used only to power your own tracking, charts, and trends inside the app. We do not sell this data to third parties. We do not use it to target advertising. We do not share it with insurers, employers, or data brokers.

Aggregated, de-identified statistics may be used to improve the product (for example, to detect that the barcode database is missing a common item). These aggregates cannot be tied back to you.

To run the service we use a small set of processors. Each is scoped to a specific job:

• Supabase — hosts our database and handles authentication. Your account and log data are stored here.
• Resend — delivers transactional emails such as sign-in confirmations and receipts.
• Anthropic (Claude API) — parses natural-language meal descriptions (e.g., “12oz ribeye and 3 eggs”) into structured macro estimates. Per Anthropic's API terms, this content is not stored by Anthropic beyond what is needed to return the response, and it is not used to train their models.
• Open Food Facts — a public food database queried for barcode and packaged-food lookups. We send the barcode or search term; we do not send your identity.
• Apple App Store / Google Play — process all subscription payments and renewals. CarniLedger never sees or stores your raw card details; we receive only the subscription status.

We retain your data for as long as your account is active. You can request full deletion of your account and all associated data from within the app settings. Deletion is permanent and typically completes within 30 days. Backups are rotated within 60 days.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Most of these actions are available directly in the app settings. For anything else, email hello@carniledger.com and we'll respond within 30 days.

CarniLedger is a nutrition tracking tool, not a medical device. We do not diagnose, treat, cure, or prevent any condition. Consult a qualified healthcare provider before starting, stopping, or changing any diet — particularly restrictive protocols such as the elimination or lion diet.

Data in transit is encrypted with TLS. Data at rest is stored in our managed database provider with encryption enabled. Access to production systems is limited to the small number of people who need it to operate the service.

At launch, CarniLedger does not use marketing cookies, cross-site tracking, or third-party advertising analytics. If we later add privacy-respecting product analytics, we will update this policy and disclose exactly what is collected before turning it on.

The carniledger.com website collects two things, and only when you choose to submit them:

• Waitlist signups: your email address, the section of the site you signed up from (hero, pricing, footer), and the timestamp. We use it for exactly one purpose — emailing you when the app launches — plus a single confirmation email at signup. It is never sold, rented, or shared for marketing.
• Contact messages: your name, email address, and message. These are delivered by email to hello@carniledger.com so we can reply. Message contents are not stored in our marketing database and are not used for any purpose other than answering you.

Abuse protection. To stop automated spam, both forms are rate limited and include invisible bot checks. When a submission is blocked we log the event type, which form it hit, a one-way hashed identifier derived from the network address, and the browser user-agent string. We never store the raw address, and we never log the contents of a blocked message. These records exist solely to tune abuse thresholds and are deleted on a rolling basis.

Retention. Waitlist emails are kept until launch and for up to 12 months afterward, or until you unsubscribe or ask us to remove you — whichever comes first. Contact emails are kept in our mailbox for up to 24 months for support history. Abuse and rate-limit records are kept for up to 90 days.

Your rights on the website. Every launch email includes a one-click unsubscribe. You may also email hello@carniledger.com at any time to see what we hold about you, correct it, or have it erased. We act on website deletion requests within 30 days and do not require you to create an account to make one.

The website sets no marketing or tracking cookies. Nothing you type into these forms is used to train any model.

CarniLedger is not directed at children under 16 and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

We may update this policy as the product evolves. If we make material changes, we will notify you by email and, where appropriate, with an in-app notice, before the changes take effect. Non-material clarifications will be reflected here with an updated effective date.

Privacy questions, data requests, or corrections: hello@carniledger.com.