Fit Me That!

Privacy Policy

Last updated: September 8, 2026

This Privacy Policy explains what information Codeplement Studio Inc. ("Codeplement Studio," "we," "us," or "our") collects through Fit Me That! (the "Service"), how we use it, and who we share it with.

1. Information We Collect

Account information: your email address and other account information you provide. Authentication credentials are handled by our authentication provider, Supabase; we do not receive or store your password in plain text.

Payment information: handled entirely by Stripe. We never see or store your full card number - we only receive and store your subscription status, trial status, and Stripe customer/subscription IDs.

Content you provide: recipe text and ingredients you paste or type, the nutrition goals and dietary restrictions you select, barcodes you scan or type, and any product corrections you submit to the shared community database.

Usage data: records of AI requests (type of request, token counts, and estimated cost) used for internal cost monitoring and abuse prevention - this is operational data about requests, not a personal health profile, and it's never sold or shared for advertising.

Automatically collected data: IP address and basic request metadata, used only for rate-limiting and abuse prevention.

2. How We Use Your Information

  • To provide and operate the Service (your account, saved recipes, product library);
  • To process payments and manage your subscription and free trial;
  • To generate AI-adapted recipes based on the goals and restrictions you select;
  • To prevent abuse and enforce usage limits;
  • To maintain and improve the shared community product database;
  • To monitor and control our own operating costs (visible only to Codeplement Studio administrators, never to other users).

3. Who We Share Information With

We don't sell your personal information. We share data only with the service providers that run the Service on our behalf:

  • Supabase - database, authentication, and file storage;
  • Stripe - payment processing and subscription billing;
  • Anthropic - processes the recipe text and goals you submit to generate an adapted recipe;
  • Vercel - application hosting;
  • Open Food Facts - a public product database we query by barcode; we send the barcode number, not your personal information.
  • USDA FoodData Central - a public nutrition database we may query by ingredient name to obtain nutrition information when a suitable match is not available in our own database.

Information submitted for AI-powered features may be transmitted to Anthropic for processing. Please do not include unnecessary personal, medical, or sensitive information in recipe text or other free-text fields.

Recipe imports: If you choose to import a recipe from a website, our server retrieves the content of the URL you provide in order to extract recipe information. We send only a request for that page's content - we don't send your account information to the website you're importing from.

Any product name/brand/nutrition correction you submit is added to a database shared with all Fit Me That! users - don't include personal information in a product correction.

We may also disclose information if required by law, or to protect the rights, safety, or property of Codeplement Studio or our users.

4. Data Retention

We keep your account information and content for as long as your account is active. If you'd like your account and associated data deleted, email us at codeplementstudio@gmail.com and we'll process the request, subject to what we're legally required to keep (e.g. billing records).

We may retain limited billing, security, fraud-prevention, transaction, and operational records for longer where reasonably necessary for legal, accounting, security, or business purposes.

5. Your Rights

Depending on where you live, you may have rights to access, correct, or delete your personal information, or to object to certain uses of it. To exercise any of these rights, contact us at codeplementstudio@gmail.com.

6. Cookies

We use essential cookies to keep you signed in and to operate the Service securely. We don't use third-party advertising or tracking cookies.

7. Children's Privacy

The Service is not directed at, and not intended for use by, anyone under 18 (see our Terms of Service). We don't knowingly collect personal information from anyone under 18.

8. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and access controls on our database. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

9. International Data Transfers

Codeplement Studio Inc. operates from Canada. Our service providers may process or store information outside Canada, including in the United States. When information is processed in another country, it may be subject to the laws of that jurisdiction.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll make reasonable efforts to notify active users. Continuing to use the Service after a change takes effect means you accept the updated policy.

11. Contact

Questions about this Privacy Policy? Email us at codeplementstudio@gmail.com.

Privacy Contact: Codeplement Studio Inc. - codeplementstudio@gmail.com