Privacy Policy

1. What we collect

When you use the App, we obtain:

• Profile Data: When logging in via Apple ID or Telegram (if available in your region), we only collect the minimum information required to create an account — your anonymized Apple identifier or messenger ID.
• Your Content: Photographs of food that you upload for evaluation. Please be careful and try to ensure that other people, personal documents, or infrastructure objects do not accidentally appear in the frame.
• Technical Data: The history of your scans, food recognition results, their composition, and calorie content.

2. Why we need this data

We only need this information to ensure the App works as intended:

• To recognize food and evaluate its composition from a photo.
• To synchronize your scan history across your devices.
• To help our support team fix bugs and answer your questions.

3. Who else sees your data (and why)

To recognize dishes, we use advanced neural networks from third-party providers.

• Photo Processing: Your images are sent to external AI services for analysis. Because we use global technologies, data may be transferred internationally (including to servers in the USA). We understand that algorithms can sometimes make mistakes when recognizing traditional or specific national dishes. We value cultural diversity and hope that over time, neural networks will become more accurate and inclusive.
• No AI Training: We guarantee that your photos will not be used to train our own or third-party neural networks without your explicit consent. Providers simply process the photo, return the result, and immediately forget about them.

We never sell your data to advertisers.

4. Where everything is stored

Your scan history and profile are kept in a secure, protected cloud infrastructure with servers located in the UK and/or the USA. By using the App, you consent to your data being stored and processed outside of your country, where privacy laws may slightly differ. When we transfer your data outside the UK or the EEA, we ensure it is protected by appropriate legal safeguards, such as Adequacy Decisions (including the UK-US Data Bridge) or Standard Contractual Clauses. We retain your data only for as long as your account is active or as necessary to provide our services and fulfil the purposes outlined in this Policy, unless a longer retention period is required by law.

5. Your rights

Under applicable laws (including GDPR and CCPA), you have full control over your data. At any time, you may:

• Request an archive containing all your personal information.
• Request the deletion of your account and everything associated with it (details in the "Delete Account" section).
• Request the correction of inaccurate or incomplete data.
• Restrict the processing of your data in cases provided by law.
• Object to the processing of your data.
• File a complaint with the regulatory authority in your country (e.g., the Information Commissioner's Office in the UK) if you feel your rights have been violated.

6. Children's Data Protection

EdaFit is not intended for children under 13 years of age (under COPPA in the USA and the UK GDPR) or under 16 years of age (in certain EU jurisdictions). We do not intentionally collect data from users under this age. If we accidentally receive information from a child, we will delete it immediately.

7. Privacy Contacts

If you have any remaining questions about your data or wish to exercise your rights, please write to our Data Protection Officer at privacy@breadnotes.tech.