Privacy Policy
This policy explains what personal data we collect through dietoria.app and the Dietoria app, why we process it, and what rights you have. Last updated: August 2026.
1. Who is responsible
The data controller is Oğuzhan Yavaş, the individual who builds Dietoria. You can reach us at contact@dietoria.app about anything on this page.
2. What we process
Waitlist: your email address, your name if you give one, the moment you consented, and your language. Account: email, an irreversible hash of your password, and the profile you enter (age, height, weight, goal, activity level, dietary preferences and allergies if given). Usage: the meals, water and weight you log. Information amounting to health data is processed only to the extent you enter it, and only to produce your own goals and suggestions.
3. Why
To create and protect your account; to calculate your daily targets; to store the meals you log and show them back to you; to send the launch announcement if you consented; and to keep the service secure. Nothing else.
4. Legal basis
Performance of a contract for the account and the service; your explicit consent for the waitlist and marketing email; legitimate interest for security and abuse prevention. Health-related information is processed on explicit consent alone, and you may withdraw it at any time.
5. Photographs
When you use meal photo analysis, the photograph is sent to an AI provider for the sole purpose of naming the food in it. It is not stored permanently on our servers and is not used to train any model. Nutrition figures come from a verified food database, never from the photograph.
6. Who we share with
Only the providers needed to run the service: hosting, email delivery, the food database and image analysis. Each sees only what its job requires. We never sell personal data or share it for advertising.
7. How long we keep it
For as long as your account exists. Deleting your account deletes your meal and profile data. Leaving the waitlist marks your address inactive; write to contact@dietoria.app if you want the record removed entirely.
8. Your rights
You may ask whether we hold data about you, request a copy, have it corrected or erased, learn who it has been shared with, object to a decision reached by automated analysis, and claim compensation for damage. Write to contact@dietoria.app; we answer within thirty days.
9. Security
All traffic is encrypted in transit. Passwords are stored irreversibly, and session tokens live in your device's secure store (Keychain / Keystore). No system is perfectly safe; in the event of a breach we will notify you and the supervisory authority without delay.
10. Children
Dietoria is not intended for anyone under 18, and we do not knowingly collect data from that age group.
11. Changes
If we update this policy we will change the date above, and email registered users about anything significant.