Privacy Policy for Vibe Bites

Effective Date: September 26, 2026
Last Updated: October 4, 2026

Overview

Vibe Bites is a meal, water, and fasting tracker from Vibe Tech LLC (package com.vibetech.vibecal). This policy explains what the app stores on your device, what can leave your device, and when. It covers version 1.0.0 and version 1.0.1 of the app; where they differ, we say so.

Vibe Bites is a general consumer wellness tool. It is not a medical device and does not give medical advice, diagnosis, or treatment. Calorie and nutrition figures are estimates. The app does not give meals or foods a health score of its own.

Who we are

• Developer: Vibe Tech LLC
• App: Vibe Bites (com.vibetech.vibecal)
• Site: https://www.vibe-tech.org
• Privacy contact: freshwaterbruce2@gmail.com

No account, no Vibe Tech server

• There is no Vibe Bites account and no sign-in.
• Vibe Tech does not run a server that receives your logs, photos, or settings.
• The app has no ads, no advertising ID, and no Vibe Tech analytics.
• We do not sell personal information.

Data stored on your device

The app keeps the following in its private storage on your phone:

• meals you save: name, meal type, time, calories and macros, portion, food items, the barcode number for scanned products, and notes (for voice entries, the note can include words from your spoken text)
• water intake
• fasting start and end times, target hours, and status
• your goals and the profile you enter: sex, age, weight, height, activity level, calorie goal, unit system, and water goal
• app preferences
• your own OpenRouter API key and your own USDA API key, if you add them (see "API keys" below)

Photos are not stored. A meal photo is held in memory only while you review the result. The app does not save it to the meal log or to your gallery.

API keys

Photo estimates need your own OpenRouter API key. The key is stored only on your device. In version 1.0.1 it is encrypted with a key held in the Android Keystore and is excluded from Android backup and device transfer. In version 1.0.0 it was stored in the app's preferences.

USDA FoodData Central search (version 1.0.1) needs your own free API key from api.data.gov. USDA search stays off until you save a key. The key is encrypted on your device with a key held in the Android Keystore. You can delete it at any time with "Remove USDA key" in the app.

Android backup and device transfer

If Android backup is turned on for your Google account, Android may include Vibe Bites data in your device backup and when you move to a new phone. That includes your meals, fasts, water, goals, profile, and preferences, and, if you saved one, your USDA key in its encrypted form. Google stores the backup under Google's terms, and Vibe Tech cannot see it. In version 1.0.1 the encrypted OpenRouter key is excluded from backup and transfer. You can turn backup off in your Android settings.

What can leave your device, and when

Except for the Google ML Kit diagnostics described below, each of these happens only when you use the feature.

• Photo estimate (only with your own OpenRouter key). When you take a meal photo with the in-app camera, the app sends a reduced-size copy of the photo, with your API key, to OpenRouter. OpenRouter forwards it to Google's Gemini model to process the photo and return a food estimate. The photo is sent for processing only; we do not share it with anyone else. Without a key, no photo is sent. In version 1.0.1, photos without a key are not estimated and nothing is saved from them. Version 1.0.0 used a simple on-device fallback instead, which sent nothing.
• Barcode lookup. The barcode is read on your device. The app then sends the barcode number to Open Food Facts to get the product's nutrition data. When Open Food Facts has them, the app shows its Nutri-Score and NOVA processing values. These are Open Food Facts data, not a score from Vibe Tech.
• Food search (version 1.0.1). When you search for a food, your search text is sent to Open Food Facts.
• USDA FoodData Central search (version 1.0.1, optional). USDA search is off until you save your own USDA API key. When it is on and you search for a food, the app sends your search text and your key to USDA FoodData Central.
• Nutrition label scan. Label text is read on your device. The app does not send the label image or text anywhere.
• Voice log. When you tap the microphone, the app uses your phone's speech recognition service, such as Google's, so your voice audio may be sent to that service to be turned into text. The app receives only the text, matches it to foods on your device, and does not record or store audio. You can type instead.
• Google ML Kit. Barcode and label reading use Google ML Kit libraries on your device. These libraries may send usage and diagnostic information to Google, such as device and app information, device and per-installation identifiers, and performance and error data. Google says ML Kit sends this over HTTPS and does not transfer it to third parties.
• Sharing and export. If you use Copy or Share, the meal or summary text goes to the clipboard or to the app you pick. In version 1.0.1, Export CSV saves a file with your meals, fasts, and water to a location you choose. It contains no API keys. What happens to a shared or exported copy is up to you and the app or service you send it to.
• Restaurant menu items come from a list built into the app. Choosing one sends nothing.

OpenRouter, Google, Open Food Facts, and USDA process data under their own terms and privacy policies. Vibe Tech does not operate those services and does not receive this data.

Permissions

• Camera — meal photos, barcodes, and nutrition labels, only when you open the camera
• Microphone — optional voice meal log
• Internet and network state — the optional online features described above
• Vibration — haptic feedback

Purchases

If you buy Vibe Bites on Google Play, Google processes the payment under Google's terms. We do not receive your payment card details.

Children's privacy

Vibe Bites is not directed to children under 13, and we do not knowingly collect information from children.

Data retention and deletion

• You can delete meals and fasts in the app, and edit or undo your water total for the day.
• You can delete a saved USDA key with "Remove USDA key" in the app.
• To remove all app data, clear the app's storage (Android Settings > Apps > Vibe Bites > Storage > Clear storage) or uninstall the app. This also removes any API keys you stored.
• Copies in your Android backup are managed in your Google account under Google's backup settings.
• Vibe Tech holds no copy of your data on any server, so there is nothing for us to delete on our side.
• Data already sent to OpenRouter, Google, Open Food Facts, or USDA is controlled by those services.

Changes

We may update this policy when the app changes. The "Last Updated" date at the top will change when we do.

Contact

Questions: freshwaterbruce2@gmail.com