Privacy Policy

Effective Date: October 25, 2026

This Privacy Policy explains how Maximo Holdings Company LLC ("Picklee," "we," "us," or "our"), the operator of the Picklee AI mobile application (the "Service"), collects, uses, stores, and protects information when you and your household use the Service. We take privacy seriously, especially regarding children. Questions: support@picklee.co.

1. Who This Policy Covers

This policy covers you (the adult who creates an account), the adults you invite to your household, any adult in the household who tracks their own nutrition (a "You" profile — including adults who use Picklee only for themselves), and the children and teens under 18 whose nutrition you track. Children do not create accounts or interact with the Service directly. Teens do not create accounts either; a teen profile is created and managed by an adult in the household. All child and teen information is entered by an adult, and we do not knowingly collect information directly from children or teens.

2. Information We Collect

About You (the adult)

• Email address (required)
• Name (captured automatically if you sign in with Apple or Google)
• Optional profile details: display name, role (such as Mom, Dad, or Guardian), birthday, profile photo, country, and preferences
• Optional onboarding responses about your household's eating habits and goals
• Your device's time zone, inferred automatically to schedule features correctly

Payment information is not collected or stored by us; subscriptions are handled entirely by Apple (App Store) or Google (Google Play), depending on your device.

Before you create an account. You can add a profile and scan a first meal before signing up. That information is stored under a temporary anonymous account on our servers and becomes part of your account when you sign up. If you never sign up it stays associated with that temporary account, not with your name or email; contact us and we will delete it.

Profiles you create (children, teens and adults)

You choose what to enter. For a child or teen this may include a name (required), date of birth or age, photo, sex, activity level, food preferences, dietary concerns, and for 9–12-year-olds whether to show a kid-style or teen-style profile. For an adult (yourself or another adult in the household) this may include a name, date of birth, sex, photo, activity level, the nutrients you want to focus on, and the meals you log for yourself. Most fields are optional.

Body and goal data (adult profiles only, optional)

An adult can set up a personal plan: current weight, height, goal weight and a weekly pace. We use these together with your date of birth, sex and activity level to calculate a daily calorie budget for your own profile. This calculation happens in the app; the values are stored with your profile on our servers so they appear on all your devices, are visible only to your household, are never sent to our AI providers, and are never used for advertising. You can change or remove them at any time from your profile, and they are deleted with the profile. Body and goal data are never collected for children or teens.

Health and activity data (adult profiles only, optional)

If you create a You profile you can connect your phone's health data: Apple Health on iPhone, Health Connect on Android. With your permission we read your daily step count, active energy and resting (basal) energy from Apple Health on your iPhone, or your daily steps, active energy and total energy burned from Health Connect on your Android phone. If you don't connect it, on iPhone you can instead allow step counting from the motion sensor. We only ever READ: we never write anything back to Apple Health or Health Connect, and we never read in the background. Only the phone of the person a You profile belongs to reads their Health data; we never read Health data for anyone else's profile from your phone.

So that the other members of your household see your daily balance on their own devices, we store your daily totals (steps, active energy and total energy burned per day) on our servers, alongside your profile. These totals are visible only to your household and are deleted when you delete that profile or your account. We never use Health or activity data for advertising or marketing, never sell or share it with third parties, and never send it to our AI providers. You can disconnect at any time: on iPhone from the profile's Apple Health card or in iOS Settings → Health → Data Access & Devices, and on Android from the profile's Health Connect card or in Health Connect → App permissions → Picklee. Disconnecting stops all reading immediately.

Voice Log (optional)

You can describe a meal by speaking instead of typing. When you use Voice Log, your phone's built-in speech recognition (Apple on iOS, Google on Android) turns your speech into text; depending on your device settings that processing may happen on the device or on Apple's or Google's servers under their privacy policies. We never receive, record or store audio. Only the resulting text reaches us, and it is treated exactly like a typed meal description (see Section 4).

Meals, Scans, and Related Content

• Photos of meals and, if you use the feature, photos of your refrigerator
• The AI-estimated nutritional breakdown of scanned meals
• Meal times, meal types, notes you add, and which household member logged each meal
• Saved recipes, your grocery list, and its in-fridge/needed status

Household and Referral Data

• Household membership and roles, and invitations you send or accept
• Referral codes you generate or redeem, and records of which account redeemed which code (to operate the referral program and its limits)

Automatically Collected

• Device information (model, OS, app version, language)
• Pseudonymous product-usage analytics (via PostHog), tied to an internal account identifier, never to your email or your child's identity
• Crash and performance data (via Sentry)
• A push notification token, to deliver notifications
• Subscription status (via Apple and RevenueCat), linked to an internal account identifier
• Information about how you found Picklee: whether you installed the app from one of our ads on Facebook or Instagram, and on Android the Google Play install referrer (the store page or campaign the install came from)
• App events shared with Meta to measure our ads (see “Advertising measurement” in Section 3)

We do not collect your location or contacts. We request camera and photo permissions to enable scanning and avatar selection, the microphone and speech recognition permissions only while you use Voice Log, and Motion & Fitness, Apple Health or Health Connect permissions only if you choose to track your own activity on a You profile. Each is asked for with your consent and can be revoked in your device settings.

3. How We Use Information

We use information to provide and operate the Service: scan meals and estimate nutrition, track each child's nutrition over time, track an adult's own nutrition, daily energy balance and progress toward a weight goal if they choose to, transcribe voice meal logs into text, suggest recipes, generate grocery lists, enable household sharing, power widgets, run the referral program, process subscriptions, send notifications you've enabled, improve the Service through aggregated analytics, prevent fraud and abuse, and comply with law.

Advertising measurement. We advertise Picklee on Facebook and Instagram. To learn which ads lead people to install and subscribe, the app includes Meta's software development kit (SDK), and our subscription provider RevenueCat reports subscription events to Meta. Meta receives:

• that the app was installed and opened;
• when a free trial starts, with the plan, its price and currency, and an estimated value we calculate;
• subscription purchases, renewals and refunds;
• device information (model, operating system, app version, language) and identifiers for this app installation: an anonymous ID Meta assigns, your internal Picklee account ID, the Google advertising ID on Android, and on iPhone the advertising identifier only if you allow tracking when the app asks.

Meta never receives anyone's name, email address, photos, meals, nutrition, health, activity, body or goal data, or any information about children or teens. Meta uses this information under its own terms and privacy policy to measure and improve our ads.

We do not sell your personal information or your children's information, and apart from this advertising measurement we do not share it with advertisers.

4. How Photos and Scans Are Processed

When you scan a meal or your refrigerator, the photo is uploaded to our secure storage (operated by Supabase on Amazon Web Services in the United States) and sent to a third-party AI provider (Google Gemini, or OpenAI as a fallback) to identify foods and estimate nutrition. Meal descriptions you type or dictate are sent to the same AI providers to identify foods and estimate nutrition. For recipe suggestions, a profile's first name may be sent to the AI provider to personalize results. A profile's age (in months) and sex are sent so estimates use the right reference intakes; this applies to child, teen and adult profiles alike. Health, activity, body and goal data are never sent to AI providers. A profile's date of birth is not sent.

Photos and scan results are visible only to you, the members of your household, and our authorized staff for operating and securing the Service.

A note on AI providers and training: We use these providers under their standard API terms, which restrict how they may use content submitted through the API. We do not separately control or configure the providers' data practices beyond those terms, and we cannot independently guarantee how a third party handles data on its own systems. We encourage you to review Google's and OpenAI's API terms for details on their handling of submitted content.

5. Where Your Information Is Stored, and On Your Device

Your account and household data are stored in our database and file storage, hosted by Supabase on Amazon Web Services in the United States.

Some information is also stored on your device to make features work:

• Your login session is stored securely in your device's encrypted keychain.
• To power Home Screen widgets, a limited set of data — including a profile's name, nutrition score, and a small cached copy of their avatar photo — is stored in your device's app storage; on Android, widget data is stored in the app's private storage. This on-device widget data and cached avatar images are not encrypted by the app beyond your device's own protections, and cached images may remain on your device until cleared by the app or your operating system, including after you log out.
• On iPhone, meal-time Live Activities on the Lock Screen and Dynamic Island use a small cached copy of a profile's name, avatar and the latest meal photo, stored in the app's shared container like widget data.
• Recent Health and step readings, and thumbnails of recently logged meals shown on the Log a meal screen, are cached on your device so those screens open instantly.
• If you start setting up before creating an account, your in-progress answers are saved on your device so you can pick up where you left off.

Because of this on-device caching, we do not claim that all data is encrypted at all times; rather, data is encrypted in transit and at rest on our servers, while some data is cached locally on your device to enable features.

6. How Long We Keep Information

We keep your information while your account is active. If you delete your account (Settings → Privacy & Data → Delete Account), we permanently delete your account, your household's data, and your children's data, including their photos, from our database and storage. Deleting an individual profile (a child, teen or adult) removes that profile, its meals and photos, and any body, goal, Health and activity data stored for it. In rare cases a specific file may fail to delete on the first attempt; when that happens, the app tells you the deletion was incomplete rather than reporting false success, and the removal is retried. We may retain limited records where required by law (such as financial records), in restricted form, for the period the law requires.

Deleting an individual meal removes it from your history; the associated photo may be retained in storage and is removed when you delete your account.

We do not currently offer an automated data-export feature. To request a copy of your data, email support@picklee.co and we will assist as described below.

7. Children's and Teens' Data

Teen profiles (ages 13–17) are created and managed by an adult exactly like child profiles; teens never sign in, and we never show a teen profile calorie-balance, weight or weight-loss framing.

We take particular care with children's information:

• Children never create accounts, sign in, or interact with the Service. All child data is entered by an adult caregiver.
• We show no advertising to anyone, and never to or about children.
• Child data we collect is limited to what makes nutrition tracking useful; most fields are optional.
• A child's meal and refrigerator photos, and a child's first name and age, are sent to our AI providers only to perform the analysis you request, under Section 4.
• A child's name, score, and a cached avatar are stored on your device to power widgets, as described in Section 5.
• When you delete your account, your children's data, including their photos, is deleted from our systems.

If you believe a child has interacted with the Service directly, or that we have collected information from a child in error, contact support@picklee.co and we will investigate and delete as appropriate.

8. Sharing Information

We share information only with the providers who help us operate the Service:

We share only what each provider needs. We may also disclose information when required by law, to protect rights or safety, or in connection with a business transaction, with notice where required.

9. Content You Share

You can create shareable images (share cards) of a day, a week or a single meal. Sharing is always started by you; the image may include a profile's first name and photo unless you choose the anonymised version ("Family member"). Once you share an image to another app or service, it is governed by that service's policies, not this one.

10. Notifications

If you enable notifications, we may send you push and in-app notifications, including household activity such as when another member logs a meal. These notifications may include a child's name and the name of the household member who acted. You can disable notifications in your device settings. We may also send reminders and re-engagement notifications about logging meals and your subscription, including a reminder before a free trial ends. You can turn each type off in Settings → Notifications in the app, or in your device settings.

11. Your Rights and Choices

You can:

• View and edit your information in the app
• Delete your account (Settings → Privacy & Data → Delete Account), which permanently removes your data and your children's data as described in Section 6. See our account deletion instructions.
• Delete an individual profile in the app
• Edit or remove your body and goal data from your profile at any time
• Disconnect Apple Health, Health Connect or step counting at any time (from the profile's health card, or in your device settings)
• Leave a household (if you are a member, not the owner)
• Withdraw permissions (camera, notifications) in your device settings
• Choose whether Picklee may track you for advertising measurement: on iPhone, answer the “Allow tracking” prompt, or change it later in Settings → Privacy & Security → Tracking; on Android, delete or reset your advertising ID in Settings → Privacy → Ads (or Google → Ads)
• Request a copy of your data by emailing support@picklee.co

If you are in the European Economic Area, the United Kingdom, or California, you have additional rights under the GDPR or CCPA, including access, correction, deletion, and (under GDPR) restriction and objection. To exercise these, email support@picklee.co. We will respond within the time the law requires.

12. Security

We use industry-standard measures to protect your information:

• Encryption in transit (HTTPS/TLS) to our servers and all providers, and encryption at rest on our hosting platform
• Row-level security across our database, so household data is accessible only to members of that household
• Login sessions stored in your device's encrypted keychain

As described in Section 5, some data is cached on your device to enable features and is protected by your device's own security rather than additional app encryption. No system is perfect; if we become aware of a breach affecting your information, we will notify you as required by law.

13. International Users

The Service is operated from the United States, and your information is processed there, where data protection laws may differ from your country's. By using the Service, you consent to this transfer. For EEA and UK users, we rely on appropriate safeguards for international transfers.

14. Marketing

We send transactional and service messages (confirmations, receipts, household notices). We do not currently send marketing emails. You can opt out of non-essential communications by emailing support@picklee.co.

15. Tracking

On iPhone, Picklee asks for your permission (App Tracking Transparency) before sharing app events with Meta in a way Apple considers tracking. If you choose “Ask App Not to Track”, the app still tells Meta about installs, app opens and trial starts, but with tracking turned off: no advertising identifier, and Meta may use them only for aggregated, privacy-preserving measurement (Apple's SKAdNetwork and Meta's Aggregated Event Measurement). Our subscription events from RevenueCat are not sent to Meta for your device. On Android, you can delete or reset your advertising ID in your device settings. We never use health, body, meal or children's data for advertising, and we use an internal account identifier for our own pseudonymous analytics.

16. Changes to This Policy

We may update this Policy. For material changes, we will notify you in the app, by email, or both, and update the Effective Date. Continued use after changes take effect constitutes acceptance.

17. Contact Us

Maximo Holdings Company LLC

1007 N Orange St, 4th Floor, Suite 5016
Wilmington, DE 19801, United States
Email: support@picklee.co
Privacy requests: support@picklee.co with subject "Privacy Request"