Privacy Policy

Data we collect

Account: your email address, for authentication (provider: Stack Auth).

Profile: your display name, sex, date of birth, height and activity level.

Health and nutrition: your meal and food logs, food groups, water intake, body measurements (weight, waist, neck, hip) and values calculated from them such as BMI, BMR and TDEE.

Usage: your logging dates and in-app activity such as your afiyet rhythm, plus usage events such as which screens you opened, how long you stayed and how long the app took to launch. We keep these to fix the product, not for advertising or profiling: they answer the question "is this where people get stuck". What you ate or wrote never goes into an event.

Notifications: if you allow them, your device's anonymous push token so we can send reminders and announcements. You can turn notifications off in your device settings at any time.

Why we process data

Only to make the app work: storing your logs, managing family profiles and showing you balanced eating summaries.

We do not show ads, we do not sell your data, we do not share it with third parties and we do not track you.

Assistant conversations

What you write to Afi, to the nutrition assistant and to the support assistant is stored on our server together with your account, so that a conversation carries across devices and the assistants come to know you over time.

What we store is what you wrote and what the assistant wrote. We do not derive summaries, scores or labels from your conversations.

To produce a reply, your message is forwarded to Microsoft Azure's AI service in the European region; it is not used for model training there.

Conversations are never used to train AI models, never used for advertising and never shared with third parties.

What is discussed in the support conversation may relate to mental health, which data protection law treats as a special category. The support conversation is therefore stored only with your explicit consent; you can withdraw that consent at any time and delete your conversations.

Deleting a conversation removes it from your device and from the server. Deleting your account deletes your conversations too. Conversations you do not delete are kept for at most 24 months.

The note we keep about you

Starting from your logs, afiet keeps a short note about you: what you came for, how you eat, where your rhythm holds and where it slips, the trend in your body, who you eat with and topics left open. This note is written by AI.

The note holds no numbers; your meal list, your measurements and your weight stay in their own tables. What is kept is the interpretation, such as "steady on weekdays, slips at the weekend". Your conversations do NOT go into this note.

It exists so the assistants do not have to get to know you from scratch every time; Afi and the specialist assistants read it while talking to you.

Our team can also read the note and write one of its sections by hand, so that whoever answers a support request understands your situation. Every version is kept, so a wrong interpretation can be rolled back.

Deleting your account deletes this note too.

Subscription and payment

You buy the afiet+ subscription through the App Store or Google Play. Payment goes through your store account; your card details, billing address and payment information never reach us and are never stored by us.

We use a service called RevenueCat to track the state of your subscription. What goes to it is the store purchase record and your afiet account id; your name, your email and your nutrition data do not.

We also keep the state of your subscription (which product, which store, valid until when) on our own server, because that is what decides which features the app unlocks.

Groups and the shared table

When you join a group, the other members see your name, your emoji, your level, whether you logged your table that day and how balanced the day was. You can say "afiyet olsun" to each other and those greetings are visible.

What you ate, your measurements and your weight do NOT go to the group. Nobody can see your meal list or your body records.

If you would rather not appear at the shared table, you can turn it off in the group settings; you stay in the group but your rhythm and balance are not shown to the others.

Sending Afi a photo in the app

You can ask Afi about a dish you do not recognize by sending a photo. The photo is forwarded, through afiet's own server, to Microsoft Azure's AI service in the European region solely so we can recognize the dish; it is not used for model training there.

Your photos are never used for advertising and never shared with third parties.

Crash and error reports

If the app closes unexpectedly, a technical record (device model, operating system version, the screen where the error happened) is collected through Sentry so we can find and fix the problem.

These records contain no meal or health data; they are not used for advertising or profiling.

Website analytics (afiet.co)

To understand visits to afiet.co we keep first-party, anonymous and aggregate statistics on our own server, without external tools (Google Analytics etc.): which pages were viewed, where visitors came from (search/social/link), approximate country, device and browser type.

For this, a random cookie that contains no identity (afiet_vid / afiet_sid) is written to your browser; it exists only to estimate unique visitors. We do not store your IP address, share it with third parties, use it for ad targeting or profiling, or track you across sites.

Ad measurement: if you arrived at afiet.co from an ad, the link carries the ad network's click identifier (gclid for Google). To see which ad worked we store that identifier, whether you clicked a store link or signed up for the newsletter, and when; we then upload only "this click converted to a store link at this time" to the ad network, by hand. Your email address, IP address or the pages you visited are not sent, and no ad network code or cookie runs on the site. The link to the Play store carries the same identifier and the page you came from so the app knows which channel it was installed from. This goes through the same consent gate: if you choose "Decline", the identifier is neither stored nor added to the link.

In the help center (afiet.co/destek) we count two more things: your answer to "Was this article helpful?" (only yes or no) and search queries that returned no results. The second exists to show us which topics we have not written yet; neither is linked to your name or account. Please do not type personal or health information into the search box.

Analytics runs only with your explicit consent: you can choose "Decline" in the notice shown on your first visit, turn on your browser's Do Not Track setting, or delete your cookies to stop being counted. This also covers the two help center counts.

Asking Afi a question on afiet.co

A question you type into the "Ask Afi" section of the site is sent to afiet's own server so the answer can be generated. We do not ask for your name, email or an account; the chat uses a random session id created by the server that lives only while your tab is open and is not stored on your device.

We keep the questions and Afi's answers to improve Afi and to see which topics we should explain better. We do not store your IP address; to limit abuse we keep only an irreversibly hashed form of it for a short time. Questions are never used for advertising and never shared with third parties.

There is no need to write personal health information; please do not. Afi gives general information, not medical advice or personalized nutrition plans.

To generate the answer, your question is forwarded to Microsoft Azure's AI service in the European region. It is not used for model training there.

To protect this section from automated abuse we use Cloudflare Turnstile. Turnstile runs silently, shows nothing on screen and only steps in after many rapid questions; it never runs for a visitor who just reads the page. During this check Cloudflare sees the network information of the request. Details are in Cloudflare's Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/

Where it is stored

Your data is stored on servers we manage (Google Cloud, European region); transfer between your device and the server is encrypted with HTTPS.

Authentication is provided by Stack Auth.

Deleting your data

You can delete your account and all your data from the app: menu → My account settings → Delete account and all data. This permanently removes your meal, measurement and profile records.

If you cannot access the app, see the "Delete your account" page for the steps or write to destek@afiet.co to request deletion; we process requests within 30 days at the latest.

Children

afiet is for users aged 13 and over. We do not knowingly collect data from anyone under 13; if we notice such an account we close it and delete its data.

Changes

We may update this policy from time to time; important changes are announced on this page. The effective date is written above.

Contact

For questions and requests: destek@afiet.co

You can send formal requests about your personal data to kvkk@afiet.co.