Privacy Policy
Last updated: March 2026
Your privacy is important to us. This Comprehensive Privacy Policy explains how HoxLabs ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use our website, mobile applications (including Rotika: Calorie Counter), and related services. This policy is designed to comply with global privacy standards, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), and Google Play Store Developer Program Policies.
1. Information We Collect
We collect information to provide and improve our services. The types of data we collect include:
- Personal Information: Name, email address, account credentials, and any information submitted via forms or customer support.
- Sensitive Data: We may access certain sensitive data (e.g., health or fitness data in our specialized apps) only with your explicit consent and solely to provide app functionalities.
- Usage Data: Information about how you interact with our services, including pages visited, features used, session durations, and crash logs.
- Technical Data: Device information (model, operating system), IP address, unique device identifiers, and browser type.
2. How We Use Your Information (Purpose & Lawful Basis)
Under GDPR, we process your data based on legitimate interests, contract fulfillment, or your explicit consent. We use your data to:
- Provide, maintain, and personalize our services.
- Process transactions and manage your account.
- Communicate with you (updates, security alerts, and support).
- Analyze usage to improve performance and user experience.
- Comply with legal obligations and enforce our agreements.
3. Data Sharing and Disclosure
We do not sell your personal data. We may share your information only in the following circumstances:
- Service Providers: With trusted third-party vendors (e.g., cloud hosting, analytics) under strict confidentiality agreements.
- Legal Requirements: If required by law, subpoena, or other legal processes, or to protect the rights, property, or safety of HoxLabs, our users, or others.
- Business Transfers: In connection with a merger, sale of company assets, financing, or acquisition.
4. Data Retention and Deletion
We retain your personal data and usage information for as long as your account is active or as strictly necessary to provide our services and fulfill the purposes outlined in this policy. If you choose to delete your account or request data deletion, we will purge your personal data from our active systems within 30 days, except where retention is required to comply with legal obligations, resolve disputes, or enforce agreements. You can request account and data deletion directly within our app settings or by contacting us.
5. Data Security
We implement industry-standard security measures, including encryption (HTTPS) and secure server environments, to protect your data against unauthorized access, alteration, disclosure, or destruction. While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure.
6. Your Privacy Rights (GDPR & CCPA/CPRA)
Depending on your location, you have specific rights regarding your personal data:
- Right to Access & Portability: Request a copy of the personal data we hold about you.
- Right to Correction: Request correction of inaccurate or incomplete data.
- Right to Deletion ("Right to be Forgotten"): Request the deletion of your personal data.
- Right to Restrict or Object: Object to or restrict the processing of your data.
- Do Not Sell or Share My Personal Information (CCPA): We do not sell your personal data. You may opt-out of data sharing for cross-context behavioral advertising.
- Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise any of these rights, please contact us at the email address provided below. We will respond within the legally required timeframes (e.g., 30 days under GDPR, 45 days under CCPA).
7. Children's Privacy
Our services are generally not directed to children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children without verified parental consent. For apps designed for families, we adhere to strict data collection limits in compliance with the Children's Online Privacy Protection Act (COPPA) and Google Play's Families Policy. If you believe we have inadvertently collected data from a child, please contact us to have it deleted.
8. International Data Transfers
Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ. If you are located in the EEA, we ensure adequate protection for the transfer of your personal data through standard contractual clauses or other legally approved mechanisms.
9. Changes to This Privacy Policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on this page with an updated "Last Updated" date, and through in-app notifications if appropriate.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer at:
Email: support@hoxlabs.com
