Privacy Policy

ByteDiet is the data controller responsible for your personal data. If you have questions about this Privacy Policy or our data practices, you can contact us through the app's support channels.

We collect and process the following categories of personal data:

a. Account Data Email address (used for registration, authentication, and communication); password (stored in hashed form; we never see or store your plain-text password); account role (e.g., user or administrator).

b. Meal Data and Images Photographs of food that you upload or capture for nutritional analysis; AI-generated nutritional estimates (calories, protein, carbohydrates, fats, health score, ingredient identification, and analysis text) derived from those photographs; date and time stamps of each scan; meal history records associated with your account.

c. Technical Data Browser language preference and locale settings; device type and operating system (as transmitted by standard HTTP requests); app usage data (e.g., features accessed) for service improvement; browser cookies and IP-based tracking used for session management, guest scan limits, and service functionality (see Section 12d for details).

We process your personal data under the following legal bases as defined in Article 6 of the GDPR:

• Performance of a contract (Art. 6(1)(b)): Processing your account data, meal images, and nutritional results is necessary to provide the Service you requested upon registration.
• Legitimate interests (Art. 6(1)(f)): We use aggregated, anonymized data to improve our AI models, service quality, and user experience.
• Consent (Art. 6(1)(a)): Where we process data for optional purposes beyond core service delivery, we rely on your freely given consent, which you may withdraw at any time.

We use your personal data to:

• Create and manage your user account
• Analyze food images using AI vision models and return nutritional estimates
• Store and display your meal history, daily summaries, and progress tracking
• Generate personalized nutrition tips and meal suggestions
• Provide educational content in your selected language
• Maintain the security and functionality of the Service
• Comply with legal obligations

We do not use your personal data for profiling, targeted advertising, or sale to third parties.

When you upload a food photo, it is transmitted to a third-party AI vision model for analysis. The AI identifies ingredients, estimates portion sizes, and calculates nutritional values. The generated results (nutritional data and text) are stored in your account. Uploaded images are stored to allow you to review your meal history. The AI's output is automated; no human reviews your food images unless required to investigate a specific technical issue you report.

• Your account data and meal history are stored for as long as your account is active.
• You may delete individual meal records at any time within the app.
• Upon account deletion, all associated personal data (including images, nutritional results, and history) is permanently deleted from our systems within 30 days.
• Aggregated, anonymized data that cannot be linked back to you may be retained for analytics and service improvement.

We share personal data only with the following categories of recipients:

• AI service providers: Third-party AI vision model providers process your food images to generate nutritional analysis. These providers act as sub-processors and are bound by data protection agreements.
• Cloud hosting providers: Infrastructure providers that host the application, database, and uploaded files.
• Legal authorities: Where required by applicable law or legal obligation.

We do not sell, rent, or trade your personal data to any third party.

Your data may be processed by sub-processors located outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data to a standard equivalent to EU law.

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15): You may request a copy of all personal data we hold about you.
• Right to rectification (Art. 16): You may request correction of inaccurate or incomplete data.
• Right to erasure / "right to be forgotten" (Art. 17): You may request deletion of your account and all associated personal data. This can be initiated directly within the app or by contacting us.
• Right to restrict processing (Art. 18): You may request that we limit processing of your data under certain conditions.
• Right to data portability (Art. 20): You may request your data in a structured, machine-readable format for transfer to another service.
• Right to object (Art. 21): You may object to processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3)): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us through the app's support channels. We will respond to your request within 30 days, as required by Article 12 of the GDPR.

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encrypted transmission of data (HTTPS/TLS)
• Hashed password storage
• Row-level access controls ensuring each user can only access their own data
• Regular security reviews of our infrastructure

The Service is not directed to children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us and we will promptly delete it.

ByteDiet allows you to use the meal scanner and view nutritional analysis without creating an account ("Guest User"). The data processing practices and privacy standards described in this Privacy Policy apply equally to Guest Users.

a. Data Collected from Guest Users When you use the Service as a Guest User, we process: the food photograph you upload or capture for analysis; AI-generated nutritional estimates (calories, macronutrients, health score, ingredient identification, and analysis text) derived from that photograph; and technical data (browser language, device type) as described in Section 2.

b. Legal Basis Processing of Guest User data is based on your consent (Art. 6(1)(a) of the GDPR), given when you voluntarily upload a photograph for analysis. You may withdraw this consent at any time by discontinuing use of the Service.

c. Retention of Guest User Data Guest User scan results and uploaded images are not permanently stored or linked to an account. They are retained only for the duration necessary to display the analysis to you and are then automatically deleted. Guest Users do not have access to progress tracking, history, or personalized features, as these require a registered account.

d. Cookies and IP Tracking for Guest Session Management To manage the daily limit of free guest scans and prevent abuse of the Service, we use browser cookies (stored on your device) and IP-based tracking. These mechanisms allow us to count the number of scans performed within a 24-hour period and enforce the guest session limit, even if you clear your browser cache or close and reopen the application. Cookies are set with a daily expiration and do not contain personal data. IP-based tracking is used solely for the purpose of rate-limiting and service functionality; IP addresses are not stored permanently or linked to your identity. No data collected through cookies or IP tracking is sold or shared with third parties.

e. Your Rights Guest Users retain all GDPR rights described in Section 9. To exercise these rights, contact us through the app's support channels. To save your scan history and access long-term tracking and AI coaching features, you may create an account at any time.

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by email. The "Last updated" date at the top of this page indicates when the policy was last revised.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us through the in-app support channels. You also have the right to lodge a complaint with your local data protection supervisory authority.