Legal

Privacy Policy

Effective Date: July 18, 2026 · Last Updated: July 18, 2026

Byte-Sized Bits, LLC (“Byte-Sized Bits,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information when you use:

  • Our website at https://bytesizedbits.com;
  • Our mobile applications, including Spectra and BioPace;
  • Other applications, websites, products, and services operated by Byte-Sized Bits, LLC that link to this Privacy Policy.

Collectively, these are referred to as the “Services.”

By accessing or using the Services, you acknowledge the practices described in this Privacy Policy. Where required by law, we will request your consent before collecting or using certain personal information.

1. Personal Information We Collect

The information we collect depends on the Service you use, the features you enable, your device permissions, and how you interact with us.

Information You Provide

We may collect information you provide directly to us, including:

  • Your name;
  • Email address;
  • Account username or profile information;
  • Information submitted through forms, support requests, feedback, surveys, or other communications;
  • Images, photographs, videos, recordings, files, or other content you choose to upload, capture, scan, or submit;
  • Information you enter while using an app feature;
  • Preferences, settings, and consent choices.

Please do not provide information that you do not want us or our service providers to process.

Account and Social Sign-In Information

We may allow you to create an account or sign in using a third-party authentication provider, such as Apple, Google, or another social or identity provider.

When you use social authentication, we may receive information authorized by you and the provider, such as:

  • Your name;
  • Email address;
  • Account identifier;
  • Profile image;
  • Authentication tokens or confirmation that your account was authenticated.

We do not receive your password for the third-party account. The third-party provider’s handling of your information is governed by its own privacy policy.

Location Information

Some Services may request access to your device’s location.

Depending on the feature and permissions you select, we may collect:

  • Approximate location;
  • Precise GPS location;
  • Location derived from your IP address;
  • Location-related metadata associated with content you submit.

We use location information only for features that require it, for security and fraud prevention, to understand general usage patterns, or for other purposes disclosed when permission is requested.

You can disable location access through your device settings. Some features may not work correctly without location access.

Precise geolocation may be treated as sensitive personal information under applicable law. Where required, we will request consent before collecting or processing it.

Camera, Photos, and Media

Our applications may request access to your camera, photo library, microphone, or media storage.

We may process:

  • Photographs and videos you capture or select;
  • Image metadata;
  • Camera input used for scanning, identification, measurement, analysis, or other app features;
  • Audio recordings when an app feature requires microphone access;
  • Results, classifications, measurements, or other information generated from submitted media.

We access this information only when you grant permission or actively use a related feature.

Depending on the Service, media may be processed locally on your device, transmitted to our servers, or processed by service providers that help us operate the requested feature. We do not use your private photos, videos, or recordings for unrelated advertising purposes without additional notice or consent.

You can revoke camera, photo, or microphone permissions through your device settings.

Device and Technical Information

When you use the Services, we and our service providers may automatically collect technical information, including:

  • Device type and model;
  • Operating system and version;
  • App version;
  • Browser type;
  • Language and regional settings;
  • IP address;
  • Mobile advertising identifiers;
  • Device identifiers or installation identifiers;
  • Network and connection information;
  • Referring URLs;
  • Dates and times of access;
  • Pages, screens, buttons, and features used;
  • Crash reports, diagnostics, performance information, and error logs.

Usage and Analytics Information

We may use analytics technologies to understand how users interact with the Services.

Analytics information may include:

  • Pages or screens viewed;
  • Session length;
  • Navigation paths;
  • Features used;
  • Button interactions;
  • App installations and launches;
  • General location derived from an IP address;
  • Device and browser characteristics;
  • Subscription, conversion, or advertising events;
  • Crash and performance data.

We use this information to improve usability, troubleshoot technical issues, understand product performance, measure marketing, and develop new features.

Cookies and Similar Technologies

Our website and Services may use cookies, software development kits, pixels, local storage, mobile identifiers, and similar technologies.

These technologies may be used to:

  • Keep the Services functioning;
  • Remember preferences;
  • Authenticate users;
  • Prevent fraud;
  • Measure traffic and usage;
  • Diagnose errors;
  • Measure marketing campaigns;
  • Deliver or measure advertisements;
  • Personalize content where permitted.

Where required by applicable law, non-essential cookies and similar technologies will be used only after we obtain consent.

You may control cookies through your browser settings and, where available, through our consent management tools. Blocking cookies may affect the availability or operation of some features.

Advertising Information

We may display advertisements in some Services or use advertising providers to deliver and measure advertisements.

Advertising providers may collect or receive:

  • Advertising identifiers;
  • IP address;
  • Device and browser information;
  • App usage or interaction information;
  • Approximate location;
  • Advertisement impressions, clicks, and conversions;
  • Information about interactions with our Services.

Depending on your location, device settings, consent choices, and the configuration of a particular Service, advertising may be contextual or personalized.

You can limit personalized advertising through your device privacy settings. On supported devices, you may also be asked whether you permit tracking across applications and websites owned by other companies.

2. How We Use Personal Information

We may use personal information to:

  • Provide, operate, maintain, and improve the Services;
  • Create, authenticate, and manage user accounts;
  • Provide features requested by you;
  • Process images, audio, location information, and other submitted content;
  • Save your preferences and personalize your experience;
  • Respond to support requests and communications;
  • Send service-related notices and account messages;
  • Provide updates, promotional communications, or marketing where permitted;
  • Analyze usage, engagement, performance, and product trends;
  • Diagnose crashes, bugs, and technical problems;
  • Develop and test new products and features;
  • Measure advertisements and marketing campaigns;
  • Display advertisements;
  • Prevent fraud, abuse, unauthorized access, and security incidents;
  • Enforce our agreements and policies;
  • Comply with legal obligations;
  • Establish, exercise, or defend legal claims;
  • Protect the rights, property, and safety of our users, Byte-Sized Bits, and others.

We may aggregate or de-identify information so it can no longer reasonably identify you. We may use and disclose aggregated or de-identified information for lawful purposes, provided we maintain it in de-identified form and do not attempt to re-identify it except as permitted by law.

3. Legal Bases for Processing in Europe

If you are located in the European Economic Area, United Kingdom, or another jurisdiction that requires a lawful basis for processing, we rely on one or more of the following legal bases:

Performance of a Contract

We process information when necessary to provide the Services you request, manage your account, deliver app functionality, or fulfill our obligations to you.

Consent

We may rely on your consent for activities such as:

  • Accessing precise location;
  • Accessing your camera, photos, microphone, or media;
  • Using non-essential cookies;
  • Delivering personalized advertising;
  • Sending certain marketing communications;
  • Processing information where consent is otherwise legally required.

You may withdraw consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.

Legitimate Interests

We may process information for legitimate business interests, including:

  • Improving and securing the Services;
  • Understanding product usage;
  • Preventing fraud and abuse;
  • Troubleshooting technical problems;
  • Providing customer support;
  • Measuring the effectiveness of our Services and marketing.

We consider the impact of this processing on your rights and do not rely on legitimate interests when our interests are overridden by your data-protection rights.

Legal Obligations

We may process information when necessary to comply with applicable laws, regulations, court orders, legal processes, or valid governmental requests.

Protection of Vital Interests

In limited circumstances, we may process information when necessary to protect someone’s life, safety, or vital interests.

4. How We Disclose Personal Information

We may disclose personal information in the following circumstances.

Service Providers

We may disclose information to vendors and contractors that provide services on our behalf, such as:

  • Cloud hosting and data storage;
  • Account authentication;
  • Analytics;
  • Crash reporting and diagnostics;
  • Customer support;
  • Email and communication delivery;
  • Payment and subscription management;
  • Image, audio, or data processing;
  • Artificial intelligence or machine-learning functionality;
  • Security and fraud prevention;
  • Advertising and marketing measurement.

These providers may process information only as permitted by their agreements with us and applicable law.

Authentication Providers

When you use social sign-in, we exchange information with the authentication provider as necessary to authenticate your account and maintain the sign-in connection.

Advertising and Analytics Partners

We may disclose device, usage, advertising, and conversion information to analytics and advertising partners.

Certain disclosures for targeted or cross-context behavioral advertising may be considered a “sale,” “sharing,” or “targeted advertising” under some U.S. state privacy laws, even when no money is exchanged.

We do not sell personal information for money. Where applicable law provides an opt-out right, you may opt out as described in the “Your Privacy Rights” section.

Legal and Safety Disclosures

We may disclose information when we reasonably believe disclosure is necessary to:

  • Comply with a law, regulation, subpoena, court order, or legal process;
  • Respond to a lawful government request;
  • Investigate fraud, security incidents, or violations of our policies;
  • Protect the rights, property, or safety of Byte-Sized Bits, our users, or others;
  • Establish, exercise, or defend legal claims.

Business Transactions

If Byte-Sized Bits is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, personal information may be disclosed or transferred as part of that transaction.

Any successor will be required to handle personal information consistently with applicable law and this Privacy Policy, unless you are provided notice of a different policy.

At Your Direction

We may disclose information when you ask us to do so, use a feature designed to share information, connect the Services to another product, or otherwise provide consent.

5. Categories of Personal Information

Depending on how you use the Services, we may collect the following categories of personal information:

  • Identifiers, such as names, email addresses, IP addresses, account identifiers, device identifiers, and advertising identifiers;
  • Customer-record information, such as contact details and account information;
  • Commercial information, such as subscription status, purchases, and transaction-related information;
  • Internet or electronic-network activity, such as browsing, app usage, interaction, analytics, and diagnostic information;
  • Geolocation information, including approximate or precise device location when authorized;
  • Audio, electronic, visual, or similar information, such as photographs, video, audio, or camera input;
  • Professional or employment information, if you voluntarily provide it;
  • Inferences, such as preferences or insights generated from activity or submitted content;
  • Sensitive personal information, such as precise geolocation or account credentials, where applicable.

We collect these categories from you, your device, authentication providers, service providers, analytics providers, advertising partners, and other sources described in this policy.

We use and disclose these categories for the business and commercial purposes described in this Privacy Policy.

6. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights:

  • The right to know whether we process your personal information;
  • The right to access personal information we hold about you;
  • The right to receive information about the categories and specific pieces of personal information we have collected;
  • The right to correct inaccurate personal information;
  • The right to request deletion of personal information;
  • The right to receive a portable copy of certain information;
  • The right to restrict or object to certain processing;
  • The right to withdraw consent;
  • The right to opt out of targeted advertising;
  • The right to opt out of the sale or sharing of personal information;
  • The right to limit certain uses or disclosures of sensitive personal information;
  • The right not to be subject to certain decisions based solely on automated processing that produce legal or similarly significant effects;
  • The right to appeal our decision regarding a privacy request;
  • The right not to receive discriminatory treatment for exercising a privacy right.

These rights are subject to exceptions and limitations under applicable law.

Submitting a Request

You may submit a privacy request by contacting:

Email: david.jenkins@bytesizedbits.com
Telephone: 948-216-0685

Please include enough information for us to understand and respond to your request. We may need to verify your identity before fulfilling certain requests. We will use information submitted for verification only to process the request.

Where legally permitted, an authorized agent may submit a request on your behalf. We may require proof that the agent is authorized to act for you and may ask you to verify your identity directly.

We will respond within the period required by applicable law. If we deny a request, you may appeal by replying to our decision or emailing us with the subject line “Privacy Request Appeal.”

Opting Out of Targeted Advertising, Sale, or Sharing

Byte-Sized Bits does not sell personal information in exchange for money.

However, the use of advertising and analytics technologies may be considered “selling,” “sharing,” or processing for targeted advertising under certain state laws.

You may submit an opt-out request by emailing david.jenkins@bytesizedbits.com with the subject line “Privacy Opt-Out.” You may also use applicable in-app privacy controls, website consent controls, or device advertising settings.

Where required by law and technically applicable, we will process recognized browser-based opt-out preference signals, such as Global Privacy Control, as a request to opt out for the browser or device sending the signal.

European Privacy Rights

Residents of the European Economic Area and United Kingdom may also:

  • Lodge a complaint with the data-protection authority in the country where they live, work, or believe a violation occurred;
  • Object to processing based on legitimate interests;
  • Request restriction of processing;
  • Request data portability;
  • Withdraw consent at any time.

You are encouraged to contact us first so that we can attempt to resolve your concern.

California Privacy Notice

California residents may request information about the categories and specific pieces of personal information we collect, the sources from which we collect it, the purposes for which it is used, and the categories of third parties to whom it is disclosed.

California residents may also request correction or deletion, and may opt out of the sale or sharing of personal information as described above.

We will not discriminate against you for exercising rights provided by California law.

California’s “Shine the Light” law may provide residents with additional rights concerning certain disclosures of personal information for third parties’ direct-marketing purposes. Requests may be submitted using the contact information in this policy.

7. App and Device Permissions

Our apps may request device permissions, including:

  • Camera access;
  • Photo-library or media access;
  • Microphone access;
  • Precise or approximate location;
  • Notifications;
  • Motion, fitness, health, sensor, Bluetooth, or nearby-device access when required by a particular feature.

The permissions requested will vary by app and feature.

You can deny or revoke permissions through your device settings. Denying a permission may prevent a related feature from functioning, but should not prevent access to unrelated features unless that permission is essential to the Service.

A permission displayed by your device does not necessarily mean we continuously collect the associated information. Collection generally occurs only when the related feature is used or as otherwise disclosed when permission is requested.

8. Health and Fitness Information

Certain Services, including BioPace or future health-related applications, may allow users to provide or connect health, fitness, activity, sensor, or wellness information.

Where applicable, we use this information to provide the user-facing feature, generate insights requested by the user, personalize the experience, maintain the Service, and improve reliability.

We do not use health information obtained through platform health APIs for advertising, marketing, or sale. We do not disclose such information to advertising providers.

Our Services are not intended to provide emergency services or replace professional medical advice, diagnosis, or treatment.

9. Automated Processing and Artificial Intelligence

Some Services may use automated systems, artificial intelligence, or machine-learning providers to analyze information, images, recordings, sensor readings, or other content submitted by users.

These systems may generate classifications, recommendations, measurements, descriptions, estimates, or other outputs.

Automated outputs may be incomplete or inaccurate and should not be treated as professional, medical, legal, financial, scientific, or safety advice unless expressly stated otherwise.

Where required by law, we will provide information about automated decision-making and honor applicable rights to object to or request review of decisions that produce legal or similarly significant effects.

10. Data Retention

We retain personal information only for as long as reasonably necessary to:

  • Provide the Services;
  • Maintain an account;
  • Complete a requested transaction or feature;
  • Comply with legal, tax, accounting, or regulatory obligations;
  • Resolve disputes;
  • Enforce agreements;
  • Prevent fraud and abuse;
  • Protect the security and integrity of the Services.

Retention periods vary depending on the type of information, the Service involved, the purpose of processing, user settings, and applicable law.

When information is no longer needed, we may delete, anonymize, or aggregate it. Information may remain temporarily in encrypted backups until those backups are overwritten or deleted through our normal retention process.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no internet transmission, electronic storage system, or security measure can be guaranteed to be completely secure. You are responsible for protecting your account credentials and maintaining the security of your devices.

Please contact us promptly if you believe your account or personal information has been compromised.

12. International Data Transfers

Byte-Sized Bits is based in the United States. Your information may be processed in the United States and other countries where we or our service providers operate.

These countries may have privacy laws that differ from the laws where you live.

Where required, we use appropriate safeguards for international data transfers, which may include contractual protections such as the European Commission’s Standard Contractual Clauses, adequacy decisions, or another legally recognized transfer mechanism.

13. Children’s Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

You may not use the Services if you are under 13.

In jurisdictions where a higher minimum age is required for a person to consent to processing, users below that age may use the Services only with authorization from a parent or legal guardian, where such use is supported by the applicable Service.

If we learn that we collected personal information from a child under 13 without legally valid parental consent, we will take reasonable steps to delete it.

A parent or guardian who believes a child has provided personal information may contact us at:

david.jenkins@bytesizedbits.com

14. Third-Party Services and Links

The Services may contain links to, integrate with, or allow interactions with third-party services.

Third parties may include:

  • Authentication providers;
  • App stores;
  • Payment or subscription providers;
  • Analytics platforms;
  • Advertising networks;
  • Social-media platforms;
  • Cloud and artificial-intelligence providers;
  • Websites or services linked from our products.

We are not responsible for the privacy practices, security, or content of third-party services. Your interactions with those services are governed by their own policies and terms.

15. Payments and Subscriptions

Payments and subscriptions may be processed by third parties, such as Apple, Google, or another payment provider.

We may receive transaction-related information, including:

  • Product or subscription purchased;
  • Purchase date;
  • Subscription status;
  • Renewal or expiration status;
  • Country or currency;
  • Transaction or receipt identifiers.

We generally do not receive complete payment-card details when purchases are processed through an app store or independent payment processor.

16. Communications

We may send transactional or service-related communications, such as account notices, security alerts, support responses, or information about material changes to a Service.

Where permitted, we may also send promotional communications. You can unsubscribe from promotional emails by using the unsubscribe link in the message or contacting us.

You may not be able to opt out of essential service-related communications while maintaining an active account.

You can manage push notifications through your device settings.

17. Do Not Track

Some browsers offer a “Do Not Track” setting. Because there is not a universally accepted standard for interpreting all Do Not Track signals, our Services may not respond to those signals in every circumstance.

Where required by applicable law, we will process legally recognized opt-out preference signals, such as Global Privacy Control.

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to:

  • Our Services;
  • Our data practices;
  • Our service providers;
  • Applicable laws;
  • Technical or security requirements.

When we update the policy, we will revise the “Last Updated” date.

If a change materially affects your rights or how we use personal information, we will provide additional notice where required, such as through the Services, by email, or through another appropriate method.

Your continued use of the Services after an updated policy becomes effective constitutes acknowledgment of the updated policy, except where applicable law requires affirmative consent.

19. Contact Us

Byte-Sized Bits, LLC is the entity responsible for the personal information described in this Privacy Policy.

Questions, concerns, complaints, and privacy requests may be directed to:

Byte-Sized Bits, LLC
Website: https://bytesizedbits.com
Email: david.jenkins@bytesizedbits.com
Telephone: 948-216-0685

For privacy requests, please use the subject line:

Privacy Request