Privacy Policy

1. Scope

This policy covers the My Food AI mobile app (iOS; Android planned). No website collection. The app helps users choose food based on their diet. We designed it to avoid collecting personal identifiers.

2. What we collect (minimal)

Account/subscription (required): App Store/Google Play purchase receipts and platform‑provided identifiers needed to validate subscription status. We do not ask for your name, email, or phone.

User content: photos of menus/ingredient labels you submit for analysis. By default, images are processed and then deleted.

Diagnostics/usage: basic app events, crash logs, device/OS/app version, IP at connection (for fraud/security). No IDFA‑based tracking; no targeted ads.

3. How we use data

Provide and improve the app (image/label analysis, subscription checks, reliability); secure the service; respond to support.

No marketing emails, and no sale or sharing for cross‑context behavioral advertising.

4. Image processing

We send images to OpenAI (our processor) solely to run the analysis you request. We configure services not to use your data for model training. OpenAI may process data on servers outside your region; see their policy for details. We don't perform face recognition and ask you not to include people in photos.

5. Retention

Images: deleted after analysis.

Receipts/identifiers: kept as needed to validate active subscriptions and comply with tax/audit duties.

Diagnostics/logs: kept only as long as needed for security and reliability.

6. Legal bases (EEA/UK)

Contract (to provide the app) and legitimate interests (security/analytics).

7. Sharing

Processors only (hosting, analytics/crash, OpenAI inference, Apple/Google for billing). Legal disclosures if required. We do not sell personal information.

8. Your choices & rights

In‑app: delete account, manage subscription via Apple/Google.

Rights (access, delete, portability, objection, consent withdrawal) available where applicable—email Loading.... We'll verify using your platform account/subscription info.

9. Children

Not for children under 13 (or under 16 in EEA/UK without parental consent). We do not knowingly collect personal data from children.

10. Security

Encryption in transit, restricted access, least‑privilege controls. No system is 100% secure.

11. International transfers

Data may be processed in countries outside your own. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses).

12. Changes

We'll post updates here and update the "Effective" date. Material changes will be notified in‑app.