We value your ("User," "You," or "Your") privacy and recognize the sensitivity of your personal information. We are committed to protecting your personal information and using it only as appropriate to provide you with the best possible service, products, and opportunities, as described in this Privacy Policy.
This Privacy Policy explains the online information practices of SHAREIT WIDGET PTE. LTD. (collectively, “Company,” “SHAREIT WIDGET,” “we,” “us,” or “our”) which hosts the mobile application PicCal (collectively, the “Application”). We think it is important to explain what information We collect, what We do with it and to describe the rights you will have with respect to your personal data processed by us. SHAREIT WIDGET strictly complies with the applicable data protection laws and regulations. SHAREIT WIDGET is the data controller for any relevant local legislation.
Please note that when using the Application, this Privacy Policy should be read in conjunction with our Terms of Use. By accessing the Application, you acknowledge that the Privacy Policy and the Terms of Use govern your use of the Application.
Privacy and personal data protection principles vary from one country to another. When you access or visit a third party website or application, you are subject to the privacy policy of that website or application. Please read the third party’s privacy policy to determine the privacy practices that apply to information or data maintained by the website or application.
1. What Information We Collect and How It Is Used
We may collect and hold personal information related to you that is necessary for the purpose of conducting our business, including (without limitation) to deliver products, services or information, improve our services to offer better experience, and to fulfill our regulatory obligations. We will tell you when we ask for your personal information whether it is a statutory or contractual requirement to give us the information and the consequences of not providing the information.
To undertake above goals, we may collect the following personal information related to our users:
User profile: If you are a user of the Application, creating a user profile is optional. If you register for a user account with the Application, we may collect certain information such as your e-mail address, username and password. You can also use your social media login (such as sign in with Apple) to register with us. Note, however, that we do not collect information from your social media account.
Personal data, including health data (such as weight, exercise habits, nutrition intake), may also be collected from other sources if you choose to connect the app with other third party apps (such as Apple Health, Google Fit). You can control what data are stored and accessed and you can modify the settings at any time. We do not collect information about you from any third party unless we get permission from you. We will process this data to provide you with better dietary and fitness experience. When you choose to have this data imported you are subject to the Apple Health and Google Fit privacy policies and practices.
Please do not submit financial account numbers, social security numbers, identity documents, pictures of other individuals, or other confidential information that is unnecessary for the feature you request. If you choose to use a feature that processes dietary, nutrition, or other health-related information, provide only the information needed for that feature, subject to the disclosures and choices in this Privacy Policy.
AI food recognition: We collect food photos that you choose to capture or select and submit. With your separate explicit permission, we send only those photos to Volcengine's Doubao model service in mainland China for food recognition and nutrient estimation, including protein, calories, carbohydrates, and fat. Section 3 explains the data flow, recipient, purposes, retention, and your choices.
We may also collect information that you submit when you contact the customer support, or otherwise submit information to the Company, including email address, and other information submitted during your use of the Application.
Financial Data: We utilize Apple and Google to process all financial transactions and SHAREIT WIDGET is not provided with any personal data related to your transaction.
Please note that we may share your activity logs with Apple to help verify your usage of the app if you request a refund. This process simply ensures a fair and transparent review of any accidental subscription claims, and your privacy is important to us.
Device and Internet Usage: If you download the Application, we may collect information from your device, including identifiers to help us identify your device’s hardware and operating system. Device information may be accessed using industry standard identifiers such as those approved by your device operating system manufacturer.
Cookies: Cookies are small files which, when placed on your device, enable the Platform to provide certain features and functionality. We and our service providers use cookies to automatically collect information, measure and analyze which pages you click on and how you use the application, enhance your experience using the application, improve our services. Cookies may include information such as your login or registration identification, user preferences, time spent on a website and pages visited. We may also use third-party tracking technology to record similar information regarding you and your activity on the Application. Google Analytics may collect your IP address, data related to the device/browser, or other information about your use of the Application and may do so using cookies. Google Analytics’ data practices are governed by the Google Privacy Policy, as it may be amended from time to time. By using the Application, you consent to our use of Cookies.
Additionally, we allow our service providers (including analytics vendors and advertising networks) to collect information about your online activities through cookies. These third parties may use this information to display advertisements on our application and elsewhere online tailored to your interests, preferences, and characteristics, subject to applicable consent requirements. Any third party with whom we share user data is required to provide the same or an equivalent level of protection as described in this Privacy Policy and required by applicable App Store rules. A third party's own privacy policy does not reduce our obligations for information shared through the Application. AI data sharing is separately governed by Section 3.
Some devices may offer a “Do Not Track” feature, however our Application does not respond to “Do Not Track” signals.
2. How Information Is Used
| Purpose | Legal Basis |
|---|---|
| To provide support and to respond to your requests and enquiries | We have a legitimate interest to respond to your requests and inquiries for ongoing business administration |
| To personalize your visits to the Application and to assist you while you use the Application | We have a legitimate interest in providing and improving the Application |
| To deliver the Application’s services | We have a legitimate interest in providing and improving the Application. Third-party AI data sharing is subject to your separate explicit consent, as described in Section 3. |
| To send only your submitted food photos to Volcengine's Doubao model service in mainland China and return food and nutrient estimates | Your separate explicit consent before AI data sharing. Where required, this includes explicit consent to process sensitive or health-related personal information. You may decline or withdraw as described in Section 3.4. |
| To improve the Application by helping us understand who uses the Application and how it is being used | We have a legitimate interest in providing and improving the Application |
| To share data with our service providers | We have a legitimate interest in using vendors to provide business services, except where consent or another legal basis is required. Sharing with a third-party AI service requires your separate explicit consent under Section 3. |
| To share data with our affiliates | We have a legitimate interest in improving our services |
| To send emails and push notifications to existing customers/users for own similar goods and services provided that customers/users have been properly informed beforehand and can cancel such messages/notifications at any time. | We have a legitimate interest in sending emails and push notifications to existing customers/users for own similar goods and services. |
| To respond to law enforcement organization, or other government officials where we have a legal obligation, including complying with legal demands and complying with production and court orders. We will notify user of the information request or submission as, and if, allowed. | We have a legitimate interest in complying with applicable legal or regulatory obligations |
| The day to day running and management of the business including to monitor, maintain and improve the processes, information and data, technology and communications solutions and services we use; protect our legal rights and interests; and share such personal information with third parties that acquire or are interested in acquiring all or part of our assets or shares, or that succeeds us in carrying on our business; | We have a legitimate interest to manage our business including to maintain ongoing operations and to improve and strengthen our operations |
Your Right to Object - Please note that you have a right to object to processing of your personal information where that processing is carried out for our legitimate interest.
3. AI Model Services and Data Transmission
3.1 Model Provider and Purpose
PicCal uses the Doubao large language model through Volcengine's Volcano Ark platform for AI-assisted food recognition and nutrition estimation. The recipient is Volcengine (Beijing Volcano Engine Technology Co., Ltd.), which provides access to the Doubao model service. The service processes the food photos described in Section 3.2 in mainland China to identify foods, estimate serving sizes, calories, protein, carbohydrates, fat, and other nutrients, and return related explanations. We obtain your separate, explicit permission before sharing your food photos with this third-party AI service.
3.2 Information Submitted and Transmission Process
Information you actively provide: When you take a food photo or select a photo and submit it for AI analysis, we collect that image for the requested analysis. The only user-provided content we send to the AI model is the food photo. We do not send food names, serving-size entries, text descriptions, or correction instructions entered by you to the AI model. The submitted image includes any visible background content, so please avoid including faces, documents, or other unnecessary personal information. Camera or photo-library permission enables image capture or selection; it does not authorize third-party AI sharing.
After you explicitly agree to AI data sharing, the processing flow is: your device to PicCal backend services, then to Volcengine's Doubao model service, then back to PicCal backend services and your device. The model processes only the submitted food photo for food recognition and nutrition estimation. Generated results may contain food names, estimated serving sizes, calories, protein, carbohydrates, fat, and other nutrient estimates. We display these results and, if you choose to save them, use them to create your food records.
We limit the user data shared with the AI model to the food photo you submit for the requested analysis. This AI permission does not authorize sending your account profile, contact details, payment information, location, Apple Health or Google Fit data, or unrelated records. If a future AI feature requires additional categories of personal information, we will identify those categories and obtain separate permission before sharing them. We may also process limited operational information, such as request timing, status, error information, and payload size, to operate the service, investigate failures, prevent abuse, and maintain stability. This operational processing does not authorize additional AI uses of your submitted content.
Please avoid submitting unnecessary sensitive personal information, identity documents, financial information, private messages, or content involving other people unless you have the right to submit it and it is necessary for the requested feature.
3.3 Scan Inputs, Saved Results, and Retention
Our server does not retain the original scan image or scan input after the scan request has been processed. If you separately choose to save the generated result as a food record or save related information through an app feature, the resulting record is retained as part of your app records. Local records remain on your device unless you delete them, reset the app, or remove the app data.
Limited technical logs may be retained for service operation, security, troubleshooting, and legal compliance for as long as reasonably necessary. These logs are limited to operational information such as request timing, status, error information, and payload size, and are not intended to include original image content. We do not use your private food records for unrelated advertising profiling.
The statement about our server's retention of original scan inputs describes our own server practices. It does not mean that information has not been transmitted to the AI service provider or that the provider follows the same retention arrangements. Provider-side processing, including any retention needed for service delivery, security, or legal compliance, is subject to the applicable enterprise service terms and data-protection requirements described in Section 3.7. You may contact us using Section 9 to request information about retention or to request deletion; we will coordinate with the provider where necessary. Deleting a local record does not automatically delete information already processed by a provider.
3.4 Explicit Permission and Your Choices
Before your first AI submission, PicCal presents a separate in-app notice identifying the data to be shared, Volcengine and the Doubao model service as the recipient and service, mainland China as the AI processing location, and the purposes of processing. The notice provides a link to this Privacy Policy and clear options to agree or decline. We do not send your inputs to the AI provider unless you actively select the agreement option. Accepting this Privacy Policy or the Terms of Use, granting camera or photo access, or continuing to use the Application does not replace this permission.
If you decline, we will not send the inputs to the AI provider and cannot complete that AI recognition request. You can continue to use features that do not require third-party AI processing. You may withdraw your AI-sharing consent at any time by contacting contact@shareitwidget.top. We will act on your withdrawal without undue delay and stop future AI sharing covered by that consent. To prevent new submissions while the request is being handled, do not submit further AI requests. Withdrawal does not affect the lawfulness of processing already carried out or automatically recall data already transmitted. Requests to delete information are handled under Section 4.
Your permission applies only to the disclosed AI feature, data categories, recipient, and purposes. Before introducing a new AI recipient or materially expanding the information shared or the purpose of processing, we will explain the change and obtain renewed explicit permission. Where submitted content contains health-related or other sensitive personal data and applicable law requires explicit consent, the consent request will specifically cover that information. You can also manage camera and photo access in your device settings; changing a device permission does not by itself withdraw AI-sharing consent or delete saved records.
3.5 Processing Locations
The Doubao model service used by PicCal processes AI submissions in mainland China. If you use PicCal outside mainland China, the information described in Section 3.2 is transferred to mainland China for this processing after you explicitly agree. Our Application hosting arrangements in Singapore, described in Section 6, are separate from the AI provider's processing location. Data-protection laws in mainland China may differ from those in your country. We require the protections in Section 3.7 and comply with applicable requirements for international transfers; your in-app permission does not replace any other transfer safeguards required by law.
3.6 Limitations of Model Outputs
AI-generated outputs are for general informational and personal tracking purposes only. They may be inaccurate, incomplete, delayed, misleading, or unsuitable for your circumstances. We do not guarantee the accuracy, reliability, completeness, freshness, safety, or suitability of any scan result, nutrition estimate, food identification, ingredient inference, allergy-related inference, or health-related explanation.
PicCal and its model outputs are not a substitute for professional medical advice, diagnosis, treatment, or nutrition counseling. If you have allergies, medical conditions, pregnancy-related needs, child nutrition needs, an eating disorder history, chronic illness, or other health concerns, consult a qualified healthcare professional.
3.7 Third Party Protection and Provider Terms
We require every third party with whom PicCal shares user data, including Volcengine as the provider of the Doubao AI service, to provide the same or an equivalent level of protection as stated in this Privacy Policy and required by applicable App Store privacy rules. These protections apply to data received for processing and are not waived by accepting a provider's separate terms. We remain responsible for the personal information we disclose in accordance with applicable law.
As a condition of sharing, we require appropriate contractual and security safeguards covering limited processing purposes, confidentiality, access controls, secure transmission, retention only for necessary service or legal purposes, deletion or return when no longer required, and assistance with data-rights requests. Any further provider engaged to process the shared data must be subject to equivalent protection obligations. If the required protection cannot be maintained, we will suspend the affected sharing.
Permission to use AI food recognition covers the requested analysis and its necessary delivery; it does not authorize unrelated advertising, profiling, or training of general-purpose AI models. Under the published Doubao Model Service Agreement, inputs and outputs are not used to train, retrain, or improve foundation models unless the customer separately authorizes that use, including through certain data-authorization or rewards programs. We will not authorize such use of your personal information on the basis of your food-recognition consent. The provider may conduct content-safety checks to meet legal requirements, as described in its service agreement.
The following provider documents describe the enterprise AI service and its privacy terms. These documents supplement the explanation above and do not replace PicCal's own obligations or your separate in-app permission:
4. Data Rights
You have the right (subject to certain limitations) to: (i) request access to personal information we hold about you; (ii) the correction of your personal information when incorrect, out of date or incomplete; (iii) request that we delete your personal information; (iv) opt-out of any marketing communications that we may send to you and to object to us using / holding your personal information if we have no legitimate reason to do so; and (v) the portability of personal information i.e., ask for a copy of your personal information to be provided to you, or a third party, in a digital format. Where we are relying on your consent to handle your personal information, you have the right to withdraw your consent to this use at any time. We do not sell personal information to third parties for their own business/commercial uses.
For more details in relation to your rights, including how to exercise them, please contact us using the contact details below.
You also have the right to lodge a complaint about the handling of your personal information with an EU data protection authority or other relevant regulator.
California residents may request certain information about our disclosure of personal data during the prior calendar year to third parties for their direct marketing purposes. We do not share your personal data with third parties or corporate affiliates for their direct marketing purposes.
5. Security
We maintain security standards and procedures designed to prevent unauthorized access to your data by anyone, including our staff. We use commercially reasonable means such as (but not limited to) data encryption, firewalls and server authentication to protect the security of your personal information. The Company and our staff and any third parties hired to provide support services will be required to observe our privacy standards and to allow us to audit them for compliance. However, no information security defenses are impenetrable, and we cannot guarantee the security of our applications, servers or databases, nor can we guarantee that information you supply will not be intercepted while being transmitted to us over the Internet.
6. International Audience
The Application is hosted in Singapore. Personal information collected through the Application may therefore be transferred to and processed in Singapore. Separately, when you explicitly authorize AI food recognition, the inputs described in Section 3.2 are transmitted to Volcengine's Doubao model service for processing in mainland China, as explained in Section 3.5. Data-protection laws in these locations may differ from those where you live. We require recipients of user data to provide the same or an equivalent level of protection as described in this Privacy Policy and comply with applicable international-transfer requirements.
You may decline third-party AI sharing without losing access to features that do not require it. For questions about international transfers, applicable safeguards, or your data rights, contact us using the details in Section 9.
7. Children’s Privacy
We do not knowingly collect personal information from children under the age of 13, and in the event that we learn that a child under the age of 13 has provided information on the Application, we will delete that information as soon as possible.
8. Changes
This Privacy Policy sets out our current policies and demonstrates our commitment to your privacy. We may change the content or services found on the Application and update this Privacy Policy from time to time. We will post the updated policy at this link and revise the date above. Where a change materially affects AI data sharing, we will also provide an in-app explanation and obtain renewed permission before sharing data under the changed scope, as described in Section 3.4.
9. Your Queries
If you have any queries regarding privacy issues or if you wish to exercise your data rights as described above, email us for more information. To ensure that we carry out your instructions accurately, to help us continually improve our service and in the interests of security, we may monitor and/or record your telephone calls with us.
Our contact email: contact@shareitwidget.top