Privacy Policy

1. Purpose of this Privacy Policy

This Privacy Policy explains how ciboAI collects, uses, stores, and protects your personal data. We attach great importance to the protection of your privacy and personal data and aim to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Our goal is to be transparent about:

• What data we collect
• Why we collect it
• How long we keep it
• What rights you have over your data

2. Who this Privacy Policy applies to

This Privacy Policy applies to all users of ciboAI, regardless of their country of residence. The App is intended for users at least 16 years old.

If you are under the legal age required in your country, you must not use the App without the consent of a parent or legal guardian.

If you believe that we may have collected personal data from a minor without proper consent, please contact us immediately.

3. What personal data we collect

3.1 Account and identification data

• Email address
• Name or username
• User ID
• Authentication data via third-party providers (e.g. Clerk)

3.2 Nutrition and health-related data

• Weight entries
• Food diet preferences (e.g. classic, pescatarian)
• Allergies (e.g. nuts, eggs)
• Food and ingredient data stored in your virtual fridge
• Quantities of food items
• Meal and recipe usage

These data are provided voluntarily and are used solely to deliver the core features of the App.

3.3 Usage and technical data

• App usage logs
• Device information
• IP address
• Error and performance logs

3.4 Images

Photos you choose to upload (such as fridge photos for ingredient detection) are processed only to provide the scanning functionality and are not reused for any other purpose.

4. Why we process your data and legal basis

• To provide and operate the core features of the App
• To create and manage your user account
• To save and sync your data across sessions and devices
• To analyze images for ingredient detection
• To improve app stability, performance, and user experience
• To respond to support requests

Legal bases for processing include:

• Performance of a contract
• Your consent (for optional features such as image scanning)
• Legitimate interest (security, analytics, improvement)
• Legal obligations where applicable

5. Data retention

• Account and profile data: while your account is active
• Nutrition and weight data: until account deletion
• Uploaded images: processed temporarily and not stored longer than necessary
• Technical logs: up to 12 months
• Subscription and billing data (if applicable): according to legal obligations

6. Who can access your data

Your data may be accessed only by our internal team when strictly necessary and by trusted technical service providers (such as hosting, authentication, and cloud services).

We do not sell your personal data.

7. Data transfers outside the European Union

We aim to process data within the European Union. If data is processed outside the EU, appropriate safeguards such as standard contractual clauses are applied.

8. Data security

• Encrypted communications (HTTPS)
• Secure authentication mechanisms
• Restricted access to databases
• Regular security monitoring and updates

9. Your rights

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time

To exercise your rights, contact us at: ciboai@proton.me

10. Cookies and similar technologies

The App uses only technical identifiers necessary for authentication and core functionality. No third-party advertising cookies are used without explicit consent.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date will reflect the most recent changes.

12. Contact

If you have questions about this Privacy Policy, contact us at:

ciboai@proton.me