Privacy Policy

Last updated November 6, 2026

ChewBit is a personal food and weight tracker, operated by Kala Works LLC. Your log is yours. We collect only what the app needs to work, we never sell it or share it for advertising, and you can export or permanently delete everything at any time.

What we collect

Your account: your email address, an optional display name, and your password — stored only as a one-way bcrypt hash. We never see or store your actual password. We email you one-time codes to verify your address and reset your password, and store only a scrambled copy of each code until it expires or is used.
What you log: the food entries, weights, exercises, day notes, custom foods, saved meals, and goal settings you enter yourself.

That's it. No location, no contacts, no device tracking, no hidden data collection. ChewBit uses one sign-in cookie to keep you logged in and saves a few display preferences on your device — no advertising or tracking cookies.

How we use it

Only to run the app for you — to show your log, calculate your daily totals and trends, and build the summaries you export. We do not use your data for advertising, profiling, or any purpose beyond providing ChewBit to you. We do not sell or rent your data to anyone.

Who else touches your data

ChewBit runs on a small number of trusted services:

Neon — hosts the database that stores your log. Your data is encrypted at rest.
Resend — delivers verification and password reset emails. It receives your email address and the one-time code.
Vercel — hosts and serves the app. Its built-in analytics are cookieless and record only anonymous, aggregate page views — no personal information.
USDA FoodData Central and Open Food Facts — when you search a food or scan a barcode, that search term or barcode is sent to look up nutrition facts. These lookups are not tied to your identity.
Anthropic— the AI features (Snap a Plate, Snap a Label, describe-a-meal, Ask AI, Add via AI, and Refine) send the photo or text you submit to Anthropic's Claude API to estimate nutrition. Only what you choose to submit is sent, and only when you use those features. ChewBit doesn't keep your photos — only the food entry you confirm is saved. Per Anthropic's API terms, submissions are not used to train their models; Anthropic may keep them for a limited time under its own privacy policy.

Your rights and controls

Export everything:download all of your data at any time from the app's Settings.
Delete everything: permanently delete your account and all associated data at any time from Settings. Your data is removed from the live database immediately and this cannot be undone; short-term backups kept by our database host expire automatically within about a week.

How we protect it

Passwords are hashed with bcrypt — never stored in plain text.
All traffic runs over encrypted HTTPS connections.
Your stored data is encrypted at rest by our database host.
Access to the production system is restricted and used only to keep the service running.

Our commitment

We built ChewBit so we don't casually browse your personal log. We access individual data only when strictly necessary — for example, to fix a bug you've reported or to comply with a legal obligation — never out of curiosity.

To run the service, the app's owner sees only overall totals, such as how many accounts exist, how many people logged recently, and how many AI features were used. That view lists no individual accounts and never shows what you ate, your weight, or your notes.

Children

ChewBit is not intended for children under 13, and we do not knowingly collect data from them.

Changes to this policy

If we make a meaningful change, we'll update the date at the top of this page. Continued use of ChewBit after a change means you accept the updated policy.

Questions or data requests?

Email admin@kalaworks.appand we'll respond as soon as we can.