Privacy policy.

INTRODUCTION

This Privacy Policy explains how Altamsun Ltd collects, uses, stores, processes, and protects your information when you use the CorHack mobile application.

CorHack is operated by Altamsun Ltd, a company registered in England and Wales. In this Privacy Policy, Altamsun Ltd may be referred to as the “Company,” “we,” “us,” or “our.” The CorHack mobile application may be referred to as the “App” or the “Service.”

CorHack is a general wellness application designed to help users track nutrition, workouts, sleep, habits, and lifestyle progress. The App may provide food-analysis results, nutrition-based T-Score estimates, badges, achievements, and general wellness suggestions.

CorHack is not a medical service, does not provide medical advice, and is not intended to diagnose, treat, cure, or prevent any disease or medical condition.

By creating an account or using CorHack, you acknowledge that you have read this Privacy Policy. Where consent is required by applicable law, we will request your consent before processing the relevant information.

If you have any questions about this Privacy Policy or your personal information, you may contact us at contact@altamsun.com.

INFORMATION WE COLLECT

When you create and use a CorHack account, we may collect your name or username, email address, age, weight, height, gender, profile image, account badges, achievements, feature requests, comments, reviews, and information required to manage your account.

We may also process information relating to your nutrition, food entries, food photographs, barcode scans, workout activity, sleep habits, T-Score history, streaks, goals, and other wellness-related activities when you choose to use the relevant App features.

Some information entered into CorHack may relate to your health or wellness. We process this information only for the purposes described in this Privacy Policy and as permitted by applicable law.

We may also collect limited technical, diagnostic, performance, and App-usage information as described in this Privacy Policy.

CLOUD-STORED ACCOUNT INFORMATION

We may store your name or username, email address, age, weight, height, gender, profile image, account badges, achievements, feature requests, comments, reviews, and other account-related information in our cloud database.

This allows your account information and saved progress to load again when you sign in on the same device or another supported device.

We do not sell your personal information to advertisers or other companies.

LOCALLY STORED INFORMATION

Your food-log history, locally saved food images, workout logs, sleep logs, T-Score history, nutrition targets, streaks, and certain wellness-related activity data are intended to remain stored locally on your device.

This locally stored information is used to provide the App features you choose to use. It is not intended to form part of your permanent cloud account profile.

Some locally stored information may be displayed inside the App while you use relevant features. Where session-replay analytics are enabled, we use masking controls and recording exclusions intended to prevent sensitive wellness information from being visibly included in session recordings.

If you uninstall CorHack or remove the App data from your device, locally stored information may be permanently deleted. Altamsun Ltd may not be able to restore locally stored information after it has been deleted from your device.

You are responsible for maintaining the security of your device and protecting access to your phone.

FOOD IMAGES AND FOOD ANALYSIS

When you submit a food photograph for analysis, the image may be transmitted to our backend systems in a digital format so that CorHack can analyse the food and return nutrition-related information and a T-Score estimate.

Food photographs submitted for normal analysis are processed temporarily. They are not intended to be permanently saved as part of your cloud account profile. After the requested analysis is completed and the result is returned to your device, the submitted food photograph should be removed from temporary processing systems unless you have separately agreed to an optional model-improvement feature as described below.

Barcode information may also be transmitted temporarily for product-identification and food-analysis purposes.

Food photographs are not intentionally sent to Firebase Analytics, Firebase Crashlytics, Firebase Performance Monitoring, or Microsoft Clarity as analytics data.

CorHack is designed to analyse food images. You must not upload personal photographs, images containing faces, identification documents, financial documents, or images unrelated to food analysis.

OPTIONAL USE OF FOOD IMAGES FOR MODEL IMPROVEMENT

CorHack may offer a separate optional setting that allows users to permit submitted food images to be used to improve the accuracy of food-analysis models and nutrition results.

Food images will only be used for model improvement where the user has actively enabled a clear and separate consent option inside the App. This permission must be optional. Refusing or withdrawing permission will not prevent the user from accessing the normal food-analysis feature.

Before requesting this optional permission, CorHack will provide information about how the images may be used, whether they are retained, how long they may be retained, and how the user may withdraw consent.

We do not use profile images, personal photographs, or images containing faces for food-analysis model improvement.

Where you have agreed to model improvement, you may withdraw your consent through any available in-App setting or by contacting us at contact@altamsun.com. Withdrawing your consent will not affect processing that was lawfully completed before your withdrawal request.

T-SCORE AND WELLNESS INFORMATION

The CorHack T-Score is generated using nutrition-based logic developed for the App. It considers food and nutritional information submitted by the user and may increase or decrease based on the nutritional characteristics of the selected foods.

The T-Score is an algorithmic wellness estimate. It is not a medical test, laboratory result, testosterone measurement, diagnosis, or clinical assessment.

CorHack may provide general nutrition-related suggestions and may suggest basic nutritional supplements. CorHack does not prescribe medicines, testosterone treatments, hormone therapies, or medical treatments.

You should consult a qualified healthcare professional before making significant changes to your diet, supplement use, exercise routine, or health-related behaviour.

ACCOUNT CREATION AND LOGIN METHODS

You may create a CorHack account using an email address and password. Account authentication and account-related cloud storage are supported through Supabase.

You may also choose to sign in using Google Sign-In or Sign in with Apple where those options are supported on your device.

When you choose a third-party sign-in method, the relevant provider may process certain information according to its own privacy policy.

PAID SUBSCRIPTIONS

CorHack is a paid subscription service. Users must purchase a weekly, monthly, or annual subscription before accessing the App features.

CorHack does not currently offer a free tier or a free trial.

Subscriptions are processed through the Apple App Store or Google Play Store, depending on your device. RevenueCat is used to manage subscription status, entitlement checks, and subscription restoration.

Altamsun Ltd does not directly process or store your full payment-card information. Apple, Google, and RevenueCat may process subscription-related information in accordance with their own privacy policies.

FEATURE REQUESTS, COMMENTS, AND REVIEWS

Paid users may submit feature requests, comments, reviews, and other feedback through the App.

We may store this content in our cloud database so that we can review suggestions, respond to users, moderate inappropriate content, improve CorHack, and evaluate potential new features.

You must not include passwords, financial details, private medical records, identification documents, or other sensitive personal information in feature requests, comments, reviews, or feedback.

ANALYTICS, DIAGNOSTICS, PERFORMANCE DATA, AND SESSION RECORDINGS

When you use CorHack, we may collect limited technical, diagnostic, performance, and usage information to maintain the App, identify technical problems, improve reliability, understand how features are used, protect the Service, and improve the user experience.

This information may include your device type, mobile operating system, App version, device language, country or region, installation identifiers, session information, screen visits, navigation activity, feature usage, error reports, performance measurements, and information required to maintain the security and performance of the Service.

We do not intentionally use analytics tools to collect passwords, full payment-card information, private medical records, food photographs, profile photographs, or identification documents.

11.1 GOOGLE FIREBASE ANALYTICS

We use Google Firebase Analytics to understand how users interact with CorHack.

Firebase Analytics may process App-instance identifiers, device and operating-system information, App-version information, general session information, screen visits, navigation activity, and selected in-App events.

Selected in-App events may include actions such as completing onboarding, opening the paywall, selecting a subscription plan, starting or completing a food scan, reaching a food-scan limit, opening a T-Score screen, opening a workout screen, opening a sleep screen, or submitting a feature request.

We do not intentionally send your name, email address, food photographs, profile image, T-Score values, nutrition results, workout logs, sleep logs, passwords, payment-card information, or other sensitive wellness values to Firebase Analytics as custom analytics events.

11.2 GOOGLE FIREBASE CRASHLYTICS

We use Google Firebase Crashlytics to identify, diagnose, and fix technical problems.

Crashlytics may process crash reports, non-fatal error reports, stack traces, relevant App state, diagnostic logs, App-version information, device metadata, operating-system information, and an installation identifier.

We do not intentionally include passwords, full payment-card information, food photographs, private medical records, or sensitive wellness information in diagnostic logs.

11.3 GOOGLE FIREBASE PERFORMANCE MONITORING

We use Google Firebase Performance Monitoring to identify slow loading times, delayed network requests, and technical-performance problems.

Firebase Performance Monitoring may process App-start timing, network-request performance, device information, App-version information, and selected performance measurements relating to important App features.

Selected performance measurements may include general timing information for App initialization, food-scan requests, food-scan processing, paywall loading, and subscription-purchase flows.

Performance measurements are intended to help us understand speed and reliability. They are not intended to include the content of your food images, personal wellness results, or payment-card information.

11.4 MICROSOFT CLARITY SESSION RECORDINGS AND INTERACTION ANALYTICS

We may use Microsoft Clarity to understand how users navigate CorHack, identify usability problems, understand where users become confused, and improve the App experience.

Where enabled, Microsoft Clarity may process masked session recordings, screen-navigation information, taps, scrolling activity, interaction patterns, screen names, general App-usage information, and selected non-sensitive custom events.

Session recordings are used to help us understand how the App interface is used. They are not intended to monitor users for advertising purposes or to collect sensitive personal information.

We use masking controls and recording exclusions intended to reduce the capture of sensitive content. We do not intentionally record or upload passwords, full payment-card information, email addresses, profile photographs, food photographs, food-analysis results, T-Score values, nutrition results, workout logs, sleep logs, or other personal wellness values through Microsoft Clarity.

Where required by applicable law, we will request your consent before enabling optional analytics or masked session-recording features.

Where an optional analytics control is available, refusing or withdrawing consent will not prevent you from using the core CorHack features.

DEVICE PERMISSIONS

CorHack may request access to your camera so that you can capture food photographs and scan product barcodes.

CorHack may request access to your photo library so that you can select a profile image or upload a food image for analysis.

CorHack may request permission to send notifications, including meal reminders, badge notifications, streak alerts, and habit reminders.

You can revoke device permissions through your device settings. Revoking certain permissions may prevent some App features from working correctly.

HOW WE USE YOUR INFORMATION

We may use your personal information and limited technical information to:

Create and manage your account.

Authenticate login requests.

Provide access to paid features.

Sync your profile information.

Display badges and achievements.

Process food-analysis requests.

Calculate nutrition-based T-Score estimates.

Provide general wellness features.

Manage subscriptions and subscription restoration.

Provide customer support.

Respond to requests, feedback, and comments.

Moderate inappropriate content.

Identify crashes and technical errors.

Monitor App performance and loading times.

Understand general feature usage.

Improve App usability and reliability.

Prevent fraud, misuse, and security threats.

Comply with applicable legal obligations.

We do not sell your personal information to third parties for advertising.

LAWFUL BASES FOR PROCESSING

We process account information where necessary to provide the Service requested by the user, manage subscriptions, authenticate accounts, and maintain the App.

We may process limited technical, diagnostic, security, and usage information where reasonably necessary to protect App security, prevent misuse, identify technical problems, improve reliability, respond to support requests, and maintain our legitimate business interests.

Where processing is necessary to comply with applicable law, resolve disputes, or protect legal rights, we may process information to meet those obligations.

Some information processed through CorHack may relate to health or wellness. Where required by applicable law, we will request the user’s explicit consent before processing sensitive health-related personal data.

Where required by applicable law, we will request consent before enabling optional analytics or masked session-recording features.

Where processing is based on consent, the user may refuse or withdraw that consent through available in-App settings or by contacting us at contact@altamsun.com.

Withdrawing consent will not affect processing that was lawfully completed before the withdrawal request.

THIRD-PARTY SERVICE PROVIDERS

CorHack uses third-party service providers to operate certain parts of the App.

Supabase is used for account authentication, cloud-database services, and account-related storage.

RevenueCat is used to manage subscription status, entitlement checks, and subscription restoration.

Google Firebase Analytics is used to understand general App usage and feature engagement.

Google Firebase Crashlytics is used to identify crashes, non-fatal errors, and technical problems.

Google Firebase Performance Monitoring is used to understand App performance, loading times, and selected network-request performance.

Microsoft Clarity may be used to provide masked session recordings, heatmaps, and interaction insights so that we can identify usability problems and improve the App experience.

Google Sign-In may be used as an optional account-login method.

Sign in with Apple may be used as an optional account-login method where supported.

Apple App Store and Google Play Store systems are used to process subscriptions and payments.

These providers may process limited personal information, technical information, diagnostic data, usage data, or subscription-related information where necessary to provide their services.

Their processing activities are also governed by their own privacy policies, terms, and applicable data-protection obligations.

Where personal information is processed outside the United Kingdom, we will take reasonable steps to ensure that appropriate safeguards are used where required by applicable law.

SHARING YOUR INFORMATION

We do not sell your personal information.

We may share limited personal information, technical information, diagnostic data, usage data, or subscription-related information with service providers where necessary to operate CorHack, provide authentication, manage subscriptions, process user requests, maintain App security, identify errors, monitor performance, provide technical infrastructure, or improve usability.

We may disclose information where required by applicable law, a valid court order, or a lawful request from a public authority.

We may disclose limited information where reasonably necessary to protect the rights, safety, and security of Altamsun Ltd, CorHack users, or the public.

If Altamsun Ltd is involved in a merger, restructuring, acquisition, or transfer of business assets, personal information may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

We may also disclose information for another purpose where you have provided valid consent.

DATA SECURITY

We take reasonable technical and organisational measures to protect personal information against unauthorised access, misuse, loss, alteration, or disclosure.

We use reasonable controls intended to limit the collection of sensitive information through analytics and session-recording tools.

However, no mobile application, internet transmission, third-party service, or electronic-storage method can be guaranteed to be completely secure.

You should keep your account password confidential, protect access to your device, and contact us promptly if you believe that your account has been accessed without permission.

DATA RETENTION

We retain cloud-based account information for as long as your CorHack account remains active and for as long as reasonably necessary to provide the Service.

When you delete your account, we will remove your cloud-stored email address, name or username, age, weight, height, gender, profile image, badges, achievements, feature requests, comments, reviews, and other account-related personal information within 30 days, except where limited retention is required by law or reasonably necessary for security, fraud prevention, dispute resolution, or record-keeping purposes.

Some information may remain temporarily within routine backup systems until those backups are securely overwritten or deleted.

Locally stored food logs, workout logs, sleep logs, T-Score history, and locally stored images may be deleted from your device when you delete the relevant App data or uninstall CorHack.

Analytics, diagnostic, performance, and masked session-recording information is retained only for as long as reasonably necessary for App improvement, technical support, security, and reliability purposes, subject to our settings and the applicable retention rules of the relevant service providers.

Analytics, diagnostic, performance, and session-recording information is not intended to form part of your permanent CorHack cloud account profile.

ACCOUNT DELETION

You may delete your CorHack account directly through the App settings.

When you delete your account, cloud-stored personal information linked to your account will be removed as described in this Privacy Policy.

Deleting your account does not automatically cancel an active Apple App Store or Google Play Store subscription. You must separately cancel your subscription through the subscription-management settings provided by Apple or Google.

You may also contact us at contact@altamsun.com to request access to, correction of, or deletion of personal information.

YOUR PRIVACY RIGHTS

Depending on your location and applicable law, you may have the right to:

Request access to your personal information.

Ask us to correct inaccurate information.

Request deletion of your information.

Request a restriction on certain processing.

Object to certain processing.

Withdraw consent where processing is based on consent.

Request a copy of certain information in a portable format.

Where available, manage optional analytics and session-recording preferences through the App settings.

To exercise your privacy rights, contact us at contact@altamsun.com. We may need to verify your identity before completing your request.

Withdrawing optional consent will not affect processing that was lawfully completed before your withdrawal request.

You may also have the right to raise a concern with the United Kingdom Information Commissioner’s Office or another relevant data-protection authority.

CHILDREN’S PRIVACY

CorHack is intended only for users who are at least 16 years old.

We do not knowingly allow children under the age of 16 to create an account or use CorHack.

If we become aware that personal information has been collected from a child under the minimum age, we will take reasonable steps to delete that information.

A parent or guardian who believes that a child under the age of 16 has provided personal information may contact us at contact@altamsun.com.

LINKS TO OTHER SERVICES

CorHack may contain links to third-party websites or services that are not operated by Altamsun Ltd.

We are not responsible for the privacy practices, content, or security of third-party websites or services.

You should review the privacy policy of any third-party service before providing personal information.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to CorHack, our processing activities, third-party services, or applicable legal requirements.

Where a change is important, we may notify users through the App, by email, or through another appropriate method.

The updated Privacy Policy will display a revised “Last updated” date.

CONTACT US

If you have questions, concerns, or requests relating to this Privacy Policy or your personal information, contact us at:

Altamsun Ltd

Email: contact@altamsun.com

Registered in England and Wales