Privacy Policy

Introduction

At Eatiq ("we", "our", or "us"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

Eatiq processes health-related information. We have tried to describe exactly which companies receive your data and why, rather than referring to them only as "service providers".

Who We Are

Eatiq is a service operated by Hafid Selbi, a sole trader established in Agadir, Morocco. For the purposes of the EU and UK General Data Protection Regulation, Hafid Selbi is the data controller for the personal data described in this policy.

For any privacy matter, contact the Eatiq team at privacy@eatiq.app. We do not publish a postal address; email reaches us and we answer every request.

Information We Collect

Account Information:

• Email address (for account creation and login)
• Name (optional, for personalization)
• Authentication data from Apple Sign-In or Google Sign-In

Health & Nutrition Data:

• Meal photos (processed by AI for food recognition)
• Nutrition logs (calories, protein, carbs, fat)
• Weight entries and goals
• Exercise and activity data
• Apple Health data (if you enable sync)

Under the GDPR, health and nutrition data is a special category of personal data and receives additional protection. We process it only with your explicit consent, which you give when you create an account and which you can withdraw at any time by deleting your account.

Usage Data:

• App interactions and feature usage
• Device information (model, OS version)
• Crash reports and diagnostics

How We Use Your Information

• AI Food Recognition: When you scan a meal, the photo is transmitted to Google's Gemini API, which identifies the foods in the image. Eatiq does not store your meal photos on our servers once the analysis is complete. Google's handling of the image is governed by the Google APIs Terms of Service and Google's own privacy policy.
• Nutrition Tracking: Your logged meals, exercises, and weight are stored to provide tracking features, progress charts, and personalized insights.
• Apple Health Sync: If enabled, we read and write nutrition and weight data to Apple Health for a unified health experience. Data obtained from Apple Health is never used for advertising or marketing, is never sold, and is never shared with third parties.
• App Improvement: Anonymized usage data helps us improve features and fix bugs.

Legal Basis for Processing

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:

• Explicit consent (Article 9(2)(a)) — for all health and nutrition data, including meal photos, weight entries and Apple Health data.
• Performance of a contract (Article 6(1)(b)) — to create and maintain your account and to provide the features you subscribe to.
• Legitimate interests (Article 6(1)(f)) — to keep the app secure, diagnose crashes, and prevent abuse. We balance these against your rights and use anonymized data wherever possible.
• Legal obligation (Article 6(1)(c)) — where we must retain or disclose data to comply with the law.

You can withdraw your consent at any time. Withdrawing consent does not affect processing that took place before you withdrew it, but it does mean we can no longer provide the app's core features.

Data Storage & Security

Your data is stored securely using Firebase (Google Cloud) with industry-standard encryption. We implement appropriate security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Secure authentication via Firebase Auth
• Access controls limiting data to your account only

How Long We Keep Your Data

• Account and nutrition data: kept for as long as your account exists.
• After you delete your account: removed from our active systems within 30 days, and purged from encrypted backups within 90 days.
• Meal photos: not retained by Eatiq after analysis.
• Crash and diagnostic data: retained in anonymized form for up to 12 months.

International Data Transfers

Eatiq is operated from Morocco and relies on Google Cloud infrastructure, which may process and store data in the United States and elsewhere. If you are in the EEA or the UK, this means your personal data is transferred outside your country.

These transfers are covered by Google Cloud's Standard Contractual Clauses, the safeguard approved by the European Commission for transfers to countries without an adequacy decision.

Third-Party Services

We use the following third-party services:

• Firebase (Google): Authentication and secure data storage
• Google Gemini AI: Food recognition from photos
• USDA Database: Nutrition data lookup
• Edamam: Additional nutrition data
• Open Food Facts: Barcode product information

These services have their own privacy policies and handle data according to their terms.

Data Sharing

We do not sell your personal data to third parties, and we do not share it for cross-context behavioural advertising.

We only share data when:

• Required by law or legal process
• Necessary to protect our rights or safety
• You explicitly consent to sharing

Your Rights

You have the right to:

• Access: View all data associated with your account
• Export: Request a copy of your data in a portable format
• Correct: Fix inaccurate data, from within the app or by contacting us
• Delete: Delete your account and all associated data from Settings → Account → Delete Account
• Withdraw consent: Stop our processing of your health data at any time
• Object or restrict: Object to processing based on legitimate interests, or ask us to restrict it
• Opt-out: Disable Apple Health sync or notifications at any time

To exercise any of these rights, email privacy@eatiq.app. We respond within 30 days and never charge for a request.

If you are in the EEA or the UK and you believe we have handled your data improperly, you have the right to lodge a complaint with your national data protection authority. In France this is the CNIL; in the UK, the ICO.

Children's Privacy

Eatiq is not intended for children. You must be at least 13 years old to use Eatiq, and at least 18 years old if you are in the European Economic Area or the United Kingdom.

We do not knowingly collect personal information from anyone below these ages. If you believe a child has created an account, contact us at privacy@eatiq.app and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes through the app or by email. Your continued use of Eatiq after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Email: privacy@eatiq.app