Privacy Policy

Version 1.0 · Effective date: [EFFECTIVE DATE]

This Privacy Policy explains what data we collect when you use the EMUFIT app, what we use it for, who we share it with and what rights you have. The data controller is [COMPANY / DEVELOPER NAME]. Detailed information for users in Türkiye is in the KVKK Notice.

1. Data we collect

Account information

• Full name, email address, password (stored only in hashed form), optional phone number
• If you sign in with Google or Apple: the name, email and user ID from that account
• Profile photo, bio and other details shown on your profile

Body and health data

• Height, weight, target weight, age, gender, activity level and fitness goals
• Health conditions and energy targets you add to your profile
• Meal logs, food photos, water and step logs, sleep logs, appetite check-ins, workout history and progress data
• If you allow it, step and sleep data read from Apple Health (HealthKit) or Health Connect. We only read this data and never write to these services.

Content you create

• Barcodes you scan and nutrition labels you capture
• Questions you ask the EMUFIT Assistant
• Your messages and files in dietitian chat
• Reports and support requests you send

Purchase information

• Membership tier, purchased plans, store transaction IDs and promo codes used. Your card details never reach us; payments are processed by the App Store or Google Play.

Technical data

• AI analysis usage counts, session data, app language and notification preferences
• When you watch a rewarded ad, device and advertising ID data processed by the ad provider (Google AdMob)

2. How we use data

• To create your account, sign you in and verify your email
• To calculate calorie and water targets and personalize nutrition and workout plans
• To analyze food photos and find product information from barcodes and labels
• To run dietitian chat and the EMUFIT Assistant
• To manage memberships, purchases and usage rights
• To send reminders and goal notifications
• To block inappropriate content, review reports and prevent abuse
• To meet our legal obligations

We do not use health data for advertising, marketing or selling profiles. Data read from Apple Health and Health Connect is never used for advertising and never sold to third parties.

3. Service providers we share data with

We do not sell your data. To provide the service, we share only the necessary data with:

• Supabase: database, authentication, file storage and server functions. Your account and app data are stored here.
• OpenAI: food photo analysis, EMUFIT Assistant answers and product research. A photo or question is sent to generate a response.
• Google: Google sign-in, Google Play payments, Health Connect, AdMob rewarded ads and barcode product research (Gemini).
• Apple: Sign in with Apple, App Store payments and Apple Health.
• Product databases and web search (Open Food Facts, Camgöz, Serper): only barcode numbers and product names are sent, never your personal data.
• Resend: sending verification and password reset emails.

If you use the dietitian service, your assigned dietitian can see your meals, targets and chat for counseling purposes.

We may share data with authorities when required by law or a valid official request.

4. International transfers

Our service providers' servers may be located outside Türkiye (for example in the European Union and the United States). These transfers are made in line with Article 9 of the KVKK. Details are in the KVKK Notice.

5. Retention

Your data is kept while your account is open. When you delete your account, your account and app data are deleted. Records we must keep by law are kept for the required period and then deleted. Copies in backups are deleted when the backup cycle completes.

6. Security

Data is transmitted over encrypted connections (HTTPS). Row-level access rules in the database ensure each user can only access their own data. Files are stored in user-specific folders and served through time-limited links. No system is completely secure; in the event of a data breach we will meet our legal notification obligations.

7. Your rights and choices

• You can view and correct your profile details in the App.
• You can delete your account and data under Profile > Privacy & Security.
• You can turn off notification, Apple Health / Health Connect, camera and photo permissions in your device settings at any time.
• You can withdraw your explicit consent to health data processing. Features that need health data will then stop working.
• For your other rights under Article 11 of the KVKK, see the KVKK Notice.

8. Children

EMUFIT is not designed for people under 18. If we learn that someone under 18 has sent us data, we will delete it.

9. Changes

We may update this policy. We will notify you in the App about significant changes.

10. Contact

[COMPANY / DEVELOPER NAME]

Address: [ADDRESS]

Email: [CONTACT EMAIL]