Polski · Français SmartDiet

Privacy Policy

Last updated: 21 October 2026

This Privacy Policy explains how the SmartDiet mobile application ("the App", "we", "us") collects, uses and protects your personal data. The data controller is Łukasz Krawczak (individual developer), contact: lukasz634@gmail.com.

1. Data we collect

CategoryExamplesPurpose
Account dataEmail address and first name (sign in with Apple or Google)Authentication, account management
ProfileAge, sex, height, activity level, goal, diet and allergiesCalculating your energy and nutrient targets
Health & fitnessFood diary entries, calories, macro- and micronutrients, body weight, water intake, fasting, steps, active calories and workouts imported from Apple HealthKitCore app functionality — tracking and targets
User contentMeal photos you submit for recognition; products, dishes and photos you add to the catalogue; diary notes; AI coach conversations and your “About me” text; the text of voice commandsAI features, the product catalogue and your diary
Child profilesName, date of birth, body measurements and diary entries entered by a parent or legal guardianKeeping the child’s diary and age-appropriate reference values
IdentifiersInternal user ID, subscription identifiersLinking your data and entitlements
Usage & diagnosticsBasic app logs, error/diagnostic dataStability and security

2. How we use your data

3. Third parties and processors

We share the minimum data needed with the following service providers, who process it only on our behalf:

ProviderData sharedWhy
AnthropicMeal photos and related text you submit; AI coach messages and the nutrition context needed to answer them (e.g. your weight, calorie and macronutrient targets, activity summary including steps, dietary preferences and allergies, recent diary entries, diary notes and your “About me” text); the text of voice commands the App could not interpret on its ownAI meal recognition, nutrition estimates, personalised AI nutrition coaching and voice commands. Never used for advertising or marketing. Not used for child profiles
GoogleEmail address, name and Google account identifierSign in with Google
RevenueCatSubscription and purchase identifiersSubscription management and validation
AppleSign in with Apple, HealthKit data (on-device), In-App Purchase, push notifications, speech recognition for dictationPlatform features you enable

Application data is stored on our own self-hosted backend infrastructure. We do not sell your personal data and we do not use it for third-party advertising.

What other users see. Products you add to the catalogue and photos we approve for it are visible to all users of the App; photos are shown without your name. Shopping lists, dishes and child profiles you share with people you invite in the App are visible to those people.

4. Apple HealthKit

Data obtained through Apple HealthKit (e.g. steps, workouts) is used only to provide features inside the App. We never use HealthKit data for advertising or marketing, never sell it, and never share it with third parties for those purposes. You can revoke HealthKit access at any time in the iOS Settings > Privacy & Security > Health.

5. Legal basis (GDPR)

6. Data retention

We keep your personal data for as long as your account is active. When you delete your account, your associated data is deleted or anonymised, except where we must retain limited records to comply with the law.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent. To exercise any right, email lukasz634@gmail.com. You also have the right to lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, UODO).

8. Account & data deletion

You can delete your account and associated personal data at any time directly in the App (Profile > Delete account). Deletion is processed without undue delay and your data is removed or anonymised, except where limited records must be kept to comply with the law. If you need help, you can also contact lukasz634@gmail.com.

9. International transfers

Some processors (Anthropic, Google, RevenueCat) may process data outside the European Economic Area, including in the United States. Where this happens, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

10. Security

Data is transmitted over encrypted HTTPS connections and access to our infrastructure is restricted. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.

11. Children

You must be at least 16 years old to create an account. A parent or legal guardian can create a profile for their child in the App; the parent enters the child's data and consents to its processing. We use that data only to keep the child's diary and calculate age-appropriate reference values. It is never sent to AI providers, only the parent and the caregivers they invite can see it, and the parent can delete the profile at any time.

12. Changes

We may update this Policy. Material changes will be reflected by the "Last updated" date above. Continued use of the App after changes means you accept the updated Policy.

13. Contact

Łukasz Krawczak — lukasz634@gmail.com