01Who we are
Ketify (“the App”) — mehmetozay94@gmail.com
02What we collect
Guest use
You can use the App without signing in. On first launch the App creates a guest account with a random identifier. We receive no name or email address for a guest account. What you save as a guest (the items listed under “Information you enter” below) is stored on our servers under that identifier.
As a guest you cannot rate recipes, and you cannot use the AI features (Panda Chef recipes, ingredient swaps, and label, meal and fridge scans) unless you have Pro. For these the App asks you to sign in with Apple.
Sign in with Apple (optional)
If you sign in with Apple, we receive Apple’s identifier for your account and the name and email address you choose to share. If you hide your email, we only receive Apple’s private relay address. Signing in from a guest account links Apple to that same account, so your saved data stays. If your Apple ID already has a Ketify account, the App switches to that account instead, and the guest data is not merged into it.
Sign in with Apple is the only sign-in method in the App. If you signed in with Google in an earlier version, we still hold the name, email address and profile photo address that Google shared at that time, until you delete the account.
Information you enter
- Age, sex, height, weight, activity level, goal and daily net-carb target
- Dietary preferences, allergies, ingredients you avoid, eating style and cuisines you like
- Meals you log, water and electrolyte check-ins, weigh-ins, and blood ketone and glucose readings
- Pantry items
- Favourites, cooking history, recipe ratings, and the recipes Panda Chef wrote for you (together with the ingredients you gave it)
- Counters of how often you used free and AI features
Your shopping list, weekly meal plan and reminders stay on your device and are not sent to us.
Apple Health (only if you connect it)
If you connect Apple Health, the App reads your steps, active energy, resting heart rate and sleep, and writes the meals and water you log (energy, carbohydrates, fibre, protein, fat, water) and your weigh-ins to Health.
When you open your nutrition stats, the App saves the daily totals it read (steps, active energy, average resting heart rate and hours of sleep, one record per day) to your account on our servers, so your history is still there on a new device or after reinstalling. Individual Health samples are not uploaded.
Health data is used only to show you your own progress in the App. It is not used for advertising or marketing, not sold, not sent to the AI providers listed below, and not shared with any third party other than our hosting provider (Google Firebase). It is not shown to other users. You can stop the App reading or writing Health data with the Apple Health switch in the App or in the iOS Health app (Sharing › Apps › Ketify). Daily totals already saved stay in your account until you delete it.
Photographs
When you photograph (or choose from your library) a product label, your fridge or your plate, the image is sent through our servers to our image-recognition provider, fal.ai, only to read it. We do not store the photo: it is held only while the request is processed and is then discarded. The result (product name, nutrition values, recognised foods) is shown to you, and is saved to your account only if you add it to your log or pantry.
Voice commands
If you turn on voice control in cooking mode, the App uses Apple’s speech recognition, which may send the audio to Apple to recognise commands such as “next step”. We do not receive or store the audio or the recognised text.
Automatically collected
- Crash reports (Firebase Crashlytics): device model, operating system and app version, and technical details of the crash
- Usage events (Firebase Analytics): for example that a screen was opened, a scan was used or the Pro screen was shown, together with device type, operating system, app version, language and approximate region. Analytics uses an app-installation identifier created by Firebase. It is not linked to your account and does not include the advertising identifier.
- Push notifications: if you allow notifications, Firebase Cloud Messaging assigns your device a push token so that we can send announcements. The token is held by Firebase, not in our database.
- App integrity check: the App uses Firebase App Check with Apple’s App Attest service to confirm that requests come from a genuine copy of the App. This check does not give us any personal information.
- Server logs: our server functions log technical events, which can include your account identifier.
Your location, contacts, the advertising identifier and your payment details never reach us. Payments are handled entirely by Apple (App Store) or Google (Google Play), depending on where you installed the App; we do not see your card details.
03Why we process it
| Purpose | Data used |
|---|---|
| Calculate your calorie and macro targets | Age, sex, height, weight, activity level, goal |
| Show recipes that suit you and hide those that do not | Preferences, allergies, avoided ingredients, favourite cuisines |
| Write recipes and suggest ingredient swaps with AI | The ingredients you enter, recipe name, allergies, avoided ingredients, eating style, meal type, cuisine, net-carb target, language |
| Read labels, meals and fridge contents from photos | The photo you take or choose, language |
| Track your progress | Meal, water, electrolyte, weight, ketone and glucose records; Apple Health daily totals |
| Keep your data across devices | Account identifier; Apple account details if you sign in |
| Manage your subscription | Purchase status |
| Prevent abuse of the free AI allowance | Usage counters; a keyed one-way hash of your Apple account identifier (see section 6) |
| Find and fix faults, understand which features are used | Crash reports, usage events, server logs |
Legal bases: performance of a contract (providing the service) and legitimate interests (fixing faults, preventing abuse). Health data (weight, height, ketone and glucose readings, Apple Health data) is processed with your consent. You can withdraw it by disconnecting Apple Health or deleting your data. Before the first AI feature is used, the App asks for your permission to send your input to its AI providers.
The App gives general cooking and nutrition information. It is not medical advice; talk to a doctor before changing your diet.
04Who processes it
We do not sell your data and we do not use it for advertising. To run the service we use these providers:
- Google Firebase / Google Cloud — authentication, database, server functions, file storage for catalogue images, crash reports (Crashlytics), usage analytics (Analytics, without the advertising identifier), push notifications (Cloud Messaging) and app integrity checks (App Check).
- Google Gemini API — writes Panda Chef recipes and ingredient swaps. It receives the data listed for that purpose in section 3, never your name, email address, photos or Apple Health data.
- fal.ai (USA) — reads labels, meals and fridge photos. It receives the photo, your language and, for fridge scans, the names of the foods recognised in it, and passes them to the AI model it runs. It never receives your name, email address or Apple Health data.
- Pollinations.ai — recipe cover images. When a recipe has no stored photo, your device requests a generated image directly from Pollinations, using the recipe’s name and short description. Pollinations sees your device’s IP address and that text, but no account data.
- RevenueCat — subscription status. It receives your account identifier and your App Store or Google Play purchase information.
- Apple — payments, Sign in with Apple, Apple Health (on your device), speech recognition for voice commands and App Attest.
We may also disclose data to competent authorities where the law requires it.
05Where it is stored, and for how long
Your account data (the database) and our server functions are located in the European Union. Some providers above, including parts of Firebase (authentication, analytics, crash reports, messaging), the Gemini API, fal.ai, Pollinations and RevenueCat, may process data in the United States or other countries outside the EU. Where the law requires it, these transfers rely on the European Commission’s standard contractual clauses or another recognised safeguard.
| Data | How long |
|---|---|
| Profile, everything you enter, pantry, favourites, logs, AI recipes, ratings, usage counters, Apple Health daily totals | Until you delete your account (or your guest data) |
| Photos sent for scanning | Not stored by us; discarded once the result is returned |
| Server logs | 30 days |
| Crash reports | 90 days |
| Usage events (analytics) | At most 14 months; reports without any identifier may be kept longer |
| Records of processed subscription events (event type, account identifier, time) | Deleted automatically after 60 days |
| Free AI allowance record (keyed hash, see section 6) | Kept after account deletion; no fixed end date |
| Per-network AI request counters (a keyed hash of your network address, for IPv6 of its /64 prefix, never the address itself), used to limit abuse of the AI features | Deleted automatically after 2 days |
Guest data stays on our servers until you delete it. Deleting the App from your phone does not delete it, and after reinstalling, the App cannot reconnect to the earlier guest account. If you sign in with an Apple ID that already has a Ketify account, the App switches to that account and deletes the guest account and the data you saved as a guest. To remove guest data, use Delete my data before you remove the App, or back up with Apple so you can sign in again later.
06Deleting your data
In the App: Profile › Account › Delete account (for a guest: Delete my data). This permanently deletes, straight away and without a backup copy:
- your profile and everything stored in your account, including the Apple Health daily totals and the recipes Panda Chef wrote for you;
- your recipe ratings and any reports you sent;
- any files that earlier versions of the App uploaded for you;
- your customer record at RevenueCat;
- your sign-in account.
The App also clears its local copies on your device. If you published a recipe to the shared catalogue in an earlier version, it stays there without any link to you; unpublished ones are deleted.
What remains after deletion:
- If you used free AI features while signed in with Apple and without Pro, we keep one record: a keyed one-way hash (HMAC) of your Apple account identifier with the number of free AI uses you consumed per feature and the time of the last update. It cannot be turned back into your identifier and contains nothing else. It exists only so that deleting and re-creating an account does not reset the free AI allowance (abuse prevention, legitimate interest).
- Records of processed subscription events, server logs and crash reports, until the periods in section 5 end.
- Your purchase history at Apple or Google, which they keep under their own privacy policies.
Deleting your account does not cancel an App Store or Google Play subscription; cancel it in your Apple ID settings or in Google Play › Payments & subscriptions › Subscriptions. You can also ask for deletion without the App: see Delete your Ketify account. You can stop using Sign in with Apple with Ketify at any time in iOS Settings › [your name] › Sign-In & Security › Sign in with Apple.
07Your rights
- Access your data
- Ask for it to be corrected
- Ask for it to be deleted
- Object to processing
- Receive a copy of your data
- Withdraw consent at any time
- Lodge a complaint with your data protection authority
You can delete your data yourself in the App (see section 6). For anything else, write to mehmetozay94@gmail.com; we respond within 30 days at the latest.
08Tracking
The App does not track you across other companies’ apps or websites. It does not collect the advertising identifier, contains no advertising, and does not ask for tracking permission.
09Children
The App is not directed at anyone under 16 and we do not knowingly collect data from that age group. If we become aware of such data, we delete it.
10Security
Data is encrypted in transit and at rest. Access is limited to the smallest number of people needed to run the service. No system is completely secure, however; in the event of a breach we will notify affected users and the competent authorities within the legally required timeframes.
11Changes to this policy
We may update this policy. We will notify you in the App of significant changes. The date at the top of this page shows the most recent update.
12On Android (Google Play)
The Android version of the App works the same way and processes the same data, with these platform differences:
- Payments: Ketify Pro is sold and processed by Google through Google Play Billing. Google handles your payment information under the Google Privacy Policy. RevenueCat receives the equivalent purchase information from Google Play (product, dates, order identifier, Play country).
- Health Connect instead of Apple Health: only if you connect it, the App reads your steps, active energy, resting heart rate and sleep from Health Connect and writes the meals and water you log and your weigh-ins to it, exactly as described for Apple Health above. You can revoke the access at any time in the Health Connect settings of your phone. Health Connect data is used only to show you your own progress, never for advertising, and is not shared beyond what this policy lists.
- Voice control: the App uses Android’s speech recognition, which runs on your device where available and may otherwise send the audio to Google to recognise commands. We do not receive or store the audio or the recognised text.
- App integrity check: Firebase App Check uses Google Play Integrity instead of Apple’s App Attest. It does not give us any personal information.
- Sign in with Apple works on Android through Apple’s web sign-in page; we receive the same information as on iPhone.
- Backups: Android may include the App’s settings in your own Google backup and restore them on a new device. Those backups are controlled by you and Google.
- Google also acts as a processor for Play distribution, payments and Play Integrity checks, under its own privacy policy.
To delete your account without the App, see Delete your Ketify account.