Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you create an account, purchase a trail pass, or use the Service, we collect information you provide directly, including:

• Account information: email address and password (managed through Supabase Auth).
• Body metrics: birth year, body weight, height, biological sex, and fitness level. We use this data solely to calculate calorie targets for your meal plans.
• Dietary and allergen information: diet type, declared food allergens, food avoidances, and disliked foods. We use this data solely to filter and verify meal plan content for safety.
• Trip details: trip duration, mileage, elevation, region, month, cooking method, and meal preferences. This data is used to generate your personalized meal plan and is saved to your account as part of your plan record.
• Payment information: payment details are collected and processed by Stripe, our third-party payment processor. We do not store your credit card number, CVV, or full payment card details on our servers.
• Feedback: if you submit feedback through the Service, we collect the content of your message.

1.2 Information Collected Automatically

When you use the Service, we automatically collect certain technical and usage information:

• Usage data: we log API usage metrics (input/output tokens, cost, latency, cache status) in our session logs for cost monitoring and performance optimization. These logs do not contain the content of your meal plans.
• Analytics: we use Vercel Analytics to collect standard web analytics data such as page views, traffic sources, and general usage patterns.
• Cookies: we use session cookies to maintain your authentication state. We do not use advertising cookies or third-party tracking cookies.

1.3 Information We Do Not Collect

We do not collect health records, medical diagnoses, GPS or location data, social media account information, or information from minors under the age of 18.

2. How We Use Information

We use the information we collect to:

• Provide, operate, and improve the Service, including generating personalized meal plans.
• Calculate calorie targets using your body metrics and trip details.
• Filter meal plan content based on your dietary restrictions and declared allergens.
• Process trip-pass purchases and manage your account.
• Monitor API usage and costs to maintain the Service.
• Respond to your feedback, questions, and support requests.
• Comply with legal obligations.

We do not use your data for personalized advertising, and we do not sell your personal information.

3. How We Share Information

We share information only with the following categories of third-party service providers, and only to the extent necessary for them to perform services on our behalf:

We may also disclose information if required by law, legal process, or government request, or to protect the rights, property, or safety of SkyeStaq, our users, or others.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

4. AI-Generated Content

PackByte.app uses Anthropic's Claude AI to generate meal plans based on the trip parameters and dietary preferences you provide. When you generate a meal plan:

• Your trip details (duration, mileage, elevation, cooking method) and dietary preferences (diet type, allergens, avoidances) are sent to Anthropic's API as part of the generation request.
• Your email address, body metrics, and payment information are not sent to Anthropic.
• Anthropic processes this data according to their privacy policy and API terms. Under Anthropic's commercial API terms, inputs and outputs are not used to train their models.
• Generated meal plans are automatically saved to your account so you can access them later from Basecamp. Your trip details are stored alongside the plan output as part of your plan record.

5. Body Metrics and Sensitive Data

To calculate appropriate calorie targets for backcountry meal planning, we collect body metrics including birth year, body weight, height, biological sex, and fitness level. We want to be transparent about how we handle this data:

• Body metrics are stored in your user profile within our Supabase database. They are used exclusively for the server-side calorie calculation that informs your meal plans.
• Body metrics are not shared with Anthropic or any other third party.
• You can view and update your body metrics at any time through your account settings.
• If you delete your account, your body metrics are deleted along with all other profile data.

PackByte.app is a food logistics planning tool for wilderness travel, not a medical or dietetic service. We do not collect or process health records, medical diagnoses, or protected health information (PHI).

6. Cookies

PackByte.app uses a limited number of cookies, all of which are functional:

• Authentication cookies: session cookies set by Supabase Auth to maintain your login state. These are essential for the Service to function.
• Admin cookies: used solely for internal administrative access to management dashboards.

We do not use advertising cookies, social media tracking pixels, or third-party analytics cookies beyond Vercel's standard analytics. During checkout, our payment processor (Stripe) sets fraud-detection cookies (__stripe_mid and __stripe_sid) on your browser. These cookies are used solely by Stripe for payment fraud prevention and are governed by Stripe's privacy policy. You can manage cookies through your browser settings, but disabling authentication cookies will prevent you from using the Service.

7. Data Retention

We retain your data as follows:

• Account and profile data: retained as long as your account is active. Deleted when you delete your account.
• Saved plans: meal plans and the trip details used to generate them are retained until you delete them or delete your account.
• Session logs: API usage logs (tokens, cost, latency) are retained for operational monitoring and cost analysis. These logs do not contain meal plan content or personal identity information.
• Payment records: transaction records are retained as required by applicable tax and accounting laws.
• Feedback: retained as long as it remains useful for product improvement, unless you request deletion.

8. Data Security

We take reasonable steps to protect your information, including:

• Passwords are hashed by Supabase Auth; we never store plaintext passwords.
• Payment processing is handled entirely by Stripe using industry-standard encryption (PCI-DSS compliant). We do not store payment card details.
• API keys and secrets are stored as environment variables and never exposed to the client.
• Database access is restricted through role-based controls.

No method of electronic transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: you can view your profile data and body metrics at any time through your account settings.
• Correction: you can update your profile data at any time through your account settings.
• Deletion: you can request deletion of your account and all associated data by contacting us at [email protected]. We will process your request in accordance with applicable law.
• Withdraw consent: you may stop using the Service at any time.

To exercise any of these rights, contact us at [email protected]. We will respond in accordance with applicable privacy laws.

10. Third-Party Links

Meal plans generated by PackByte may include product purchase links to third-party retailers such as Amazon. Clicking a link takes you to the retailer's site, which may set its own cookies and is governed by its own privacy policy. PackByte.app currently earns no commission on these links.

Product selection is based on your dietary needs, calorie targets, and catalog data.

11. Children's Privacy

The Service is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a minor, please contact us at [email protected] and we will promptly delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top of this page. We encourage you to review this page periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

SkyeStaq LLC
Email: [email protected]