Privacy Policy

This Privacy Policy explains how personal data collected, processed, and stored by Dietolog ("App") is used. By using the App, you accept this policy. Our policy has been prepared in accordance with applicable data protection regulations.

1. Data Controller

The data controller for the personal data covered by this policy is the developer publishing the App. Contact: destek@diyetasistanim.app.

2. Data We Collect

When you use the App, we may collect data in the following categories:

• Account data: email address, password (encrypted), Apple authentication credentials.
• Health profile: age, height, weight, target weight, activity level, dietary preferences, allergies, chronic conditions.
• Documents: blood tests, images, or PDF documents uploaded by the user, and text extracted from these documents.
• Interaction data: AI chat messages, daily check-in responses, badges, streaks.
• Subscription data: subscription status and billing information received from the Apple App Store (payment details are managed by Apple; we do not see them).
• Technical data: device type, operating system version, language, push notification token.

3. How We Use Your Data

• To generate personalized nutrition recommendations and AI responses.
• To send daily check-in and weekly summary notifications.
• To verify subscription status and manage access to premium features.
• To improve the App, debug errors, and maintain security.
• To fulfill legal obligations.

We do not sell your personal data to third parties for advertising purposes.

4. Service Providers

The App uses the following service providers. Data passing through these providers is necessary to deliver the service.

• Supabase: database, authentication, file storage (EU/US regions).
• Google (Gemini AI): AI chat, document understanding, recipe and plan generation. Detailed in the section below.
• Apple: authentication, payments, push notifications.
• Expo: mobile infrastructure and notification delivery.

5. Sharing Data with Artificial Intelligence (AI)

AI features (chat assistant, nutrition plan generation, food/menu analysis, document interpretation, weekly summaries) are powered by the Google Gemini API provided by Google LLC. When you use these features, the following data is sent to Google servers solely to generate a response:

• The text of messages you write in the chat
• Context from your health profile (age, gender, height, weight, goal, activity level, dietary preferences, allergies, and chronic conditions)
• Text and images extracted from documents you upload (blood tests, diet plans, etc.)
• Photos taken in food-scan or menu-analysis features
• Compressed summaries of previous conversations

The sole purpose of this data sharing is to generate personalized responses for you. Google does not use this data to train its models (per the Gemini API paid-usage terms). Data is deleted by Google shortly after the request completes.

You can review Google's privacy protections and data-handling terms at ai.google.dev/gemini-api/terms and policies.google.com/privacy. You will be asked for explicit consent to this sharing the first time you use an AI feature; if you decline, AI features remain disabled.

6. Health Data and Medical Disclaimer

The App is not a medical device and does not provide diagnosis, treatment, or medical advice. All recommendations in the App are for educational purposes. Always consult a qualified healthcare professional for health-related decisions. In an emergency, call your local emergency number.

7. Data Retention

We retain your data while your account is active. To delete your account, use the "Settings → Delete Account" option in the App. All personal data is permanently deleted within 30 days of a deletion request. Data that must be retained by law is kept for the relevant period.

8. Your Rights

Under applicable data protection regulations, you have the right to:

• Learn whether your personal data is being processed.
• Request information about processing if it is.
• Learn the purpose of processing and whether it is used appropriately.
• Request correction of incomplete or incorrect data.
• Request deletion or destruction of your data.
• Object to automated processing.

You may submit your request to destek@diyetasistanim.app. We will respond within 30 days.

9. Children

The App is not intended for users under the age of 13. Users under 18 should only use it with parental consent.

10. Security

Data is protected with TLS during transmission and encrypted at rest. Row-level security (RLS) policies at the database level ensure you can only access your own data.

11. Updates

This policy may be updated from time to time. You will be notified in the App of significant changes. The effective date of the updated policy is shown at the top of this page.