Cronometer: Calorie Counter

"For users accessing our free Services, we disclose certain limited information to Service Providers that are network advertisers, sponsors, and/or traffic measurement services (collectively, "Advertisers") to enable those Advertisers to serve targeted advertisements to you on the Site, the App or other Sites or media (e.g., social networking platforms). We allow some Advertisers to assist us with behavioral advertising by collecting and analyzing certain information when you visit our Site (e.g., click stream information, browser type, time and date, subject clicked or scrolled over)."

Free-tier users have their behavioral data shared with advertising networks for targeted ads across the site and external platforms including social media, with advertisers collecting data directly via cookies.

"Cronometer has collected the following categories of Personal Information from California Consumers within the last twelve (12) months: ... Geolocation Data (e.g. physical location or movements). ... In the preceding twelve (12) months, Cronometer has disclosed the following categories of Personal Information for a business purpose: ... geolocation data."

Cronometer collects geolocation data including physical location and movements, and has disclosed this data to third parties for business purposes in the past 12 months.

"At this time, Cronometer does not respond to Do Not Track browser settings or signals. In addition, Cronometer may use other technology that is standard to the internet to track visitors to the Site. Those tools may be used by us and by third parties to collect information about you and your internet activity, even if you have turned on the Do Not Track signal."

Cronometer ignores Do Not Track signals and allows third parties to track users' internet activity beyond the Cronometer site, even when users have explicitly requested not to be tracked.

"We may retain de-identified or aggregated information with other non-personal data indefinitely as it is no longer Personal Information and it may be useful for our business purposes. Following the deletion of information from your account, your account, or a request for deletion, we take steps to fully delete the Personal Information from our logs and systems within a reasonable time."

Cronometer retains deidentified and aggregated data indefinitely even after account deletion, and only commits to deleting personal information within an undefined 'reasonable time' after a deletion request.

"We may occasionally make changes to this Privacy Notice to ensure its accuracy. If we make changes, the revised Privacy Notice will be posted online and the date of the newest version will be listed. Please check back frequently, especially before you provide us with personal information, to determine the current scope of the notice."

Cronometer can change its privacy policy at any time by simply posting an update, placing the burden on users to frequently check for changes rather than providing direct notification or requiring consent.

""Personal Information" means information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual consumer, account or device, such as: ... Biometric information (e.g. keystrokes, behavioral or biological characteristics); Internet or other similar activity (e.g. browsing history); ... Connections (e.g. apps, devices, professionals and friends connected to your account)."

Cronometer's definition of collected personal information includes biometric data such as keystroke patterns and behavioral characteristics, as well as information about connected apps and devices, which goes beyond what a nutrition tracking app requires.

"As described below, you may request deletion of your account by making a request to privacy@cronometer.com. ... Following the deletion of information from your account, your account, or a request for deletion, we take steps to fully delete the Personal Information from our logs and systems within a reasonable time. We may retain information for a longer period as permitted by law, including for legal compliance and regulatory purposes, to prevent fraud, collect fees, resolve disputes, assist with investigations, or enforce our terms or a legal right."

Account deletion requires emailing a privacy address rather than offering a self-service option, and Cronometer reserves broad rights to retain data after deletion for vaguely defined purposes like 'business interests' with no specified timeline.