Privacy Policy
Effective date: 17 October 2026
In short: we collect what CarboLens needs to estimate your meals and track your goal: your sign-in details, your questionnaire answers, your meal photos and results, and your weight entries. We use service providers to run the app, including an AI model that analyzes your photos. We don't sell your data, show ads, or use advertising trackers. You can delete everything from inside the app.
1. Who we are
Taras Makota, Kulykivska St. 18a, Lviv, 79000, Ukraine, is the controller of personal data processed through the CarboLens app (the "Service"). Contact: makota.tv@gmail.com.
2. What we collect
Account information
You sign in with Apple (iPhone) or Google. Our sign-in provider, Clerk, receives your account identifier, email address, and the name and profile photo from your Apple or Google account. The app shows your name, email and photo on your Profile screen. Our own database stores your account ID and email address. If you use Apple's "Hide My Email", we only get the relay address. We don't receive your Apple or Google password.
Health and body information you provide
From the questionnaire: sex, birth date, height, weight, goal (lose, maintain or gain), target weight, pace, activity level, diet (classic, keto, vegan or vegetarian), and when you accepted the health notice. You can later add new weight entries (one per day) and set a new goal. Because this information is about your health, it may count as special-category data in some jurisdictions. We process it only to provide the Service, as you ask us to.
Meal photos and results
When you scan a meal, we store the photo (taken with the camera or picked from your library) and the analysis: dish name, food items, estimated grams, calories and macronutrients, a confidence score, and the date and time of the meal.
Settings and usage
- App language, unit system (metric or imperial) and time zone, so results and days match your location.
- How many AI scans you used each day, to apply the daily limit.
Diagnostics
The app sends crash reports, performance data and app event logs to Sentry. These include the app version, device model and operating system, the screens you visit, how long operations take, and internal IDs such as a meal's ID. We configured Sentry not to collect IP addresses or other default personal information. Sentry also records session replays, which show how screens looked and changed during a session. In our setup, all text, images and icons are masked in those replays, so your meals, numbers and photos aren't visible. During development every session is recorded; in released versions 10% of sessions, plus any session in which an error occurs.
Permissions
- Camera: to photograph meals. Only photos you choose to analyze leave your device.
- Photo library: to pick a meal photo, or to save one to your library when the upload fails. We access only the photo you pick.
- Notifications: for the daily morning reminder, which is scheduled on your device.
We don't collect your precise location, contacts, or advertising identifier.
3. What stays on your device
- Your questionnaire answers are kept on the device until you sign in. After that they are also saved to your account.
- Theme, language and reminder settings, plus the reminder schedule itself, are stored only on your device.
- Your sign-in session token is kept in the device's secure storage (Keychain or Keystore).
- Sharing a meal creates an image on your device and opens your device's share sheet. We don't receive what you share or who you share it with.
4. How we use it
- To create and secure your account and keep you signed in.
- To calculate your daily calorie and macro targets. A standard formula is used, then an AI model may refine the result within fixed limits and write a short explanation in your language.
- To analyze meal photos and show the results in your language.
- To show your daily totals, history, weight and goal progress.
- To apply the daily scan limit.
- To find and fix crashes, errors and slow screens.
We don't sell your personal data, use it for advertising, or make decisions about you that have legal or similarly significant effects. AI results are estimates you can choose to rely on or not.
5. Legal bases
If the GDPR or a similar law applies to you, we rely on:
- Contract: processing needed to provide the Service you signed up for (account, meal analysis, targets, history).
- Explicit consent: for health information (body measurements, weight, goal, diet and meal data). You give it by entering the information and confirming the health notice, and you can withdraw it by deleting your account.
- Legitimate interests: keeping the Service secure and reliable (diagnostics, abuse prevention).
6. Who receives it
We share personal data only with service providers that run the Service on our behalf:
| Provider | Purpose | Data |
|---|---|---|
| Clerk | Sign-in and account management | Account ID, email, name and profile photo from Apple or Google |
| Apple, Google | Sign in with Apple or Google | The sign-in request; their privacy policies apply |
| Neon | Database hosting | Account ID and email, questionnaire answers, meals and results, weight entries, targets, settings, scan counts |
| ImageKit | Private storage of meal photos | Meal photos, stored in a folder tied to your account ID |
| Google (Gemini API) | AI meal analysis and target refinement | A resized copy of your meal photo; your sex, age, height, weight, activity level, goal, target weight, pace and diet; your language. No name or email. |
| Trigger.dev | Running background tasks (analysis, targets, account sync) | Account ID, meal ID and task results passing through those tasks, including their logs |
| Sentry | Crash reports, performance, logs, masked session replay | Device and app details, internal IDs, masked screen recordings (see section 2) |
| Expo (EAS Hosting) | Hosting the app's server | Requests from the app |
We may also disclose information if the law requires it, to protect people's safety, or as part of a merger or acquisition, in which case this policy continues to apply to your data.
7. International transfers
Your account data, meals and photos are stored in the European Union (database at Neon, photos at ImageKit), and diagnostics go to Sentry's EU region (Germany). Some providers process data outside the EU: sign-in (Clerk), background processing (Trigger.dev) and AI analysis (Google) may take place in the United States, and we operate the Service from Ukraine. Where the GDPR applies, these transfers rely on adequacy decisions, the EU–US Data Privacy Framework, or the European Commission's Standard Contractual Clauses.
8. How long we keep it
- Account data, answers, meals, photos and weight entries: until you delete your account.
- When you delete your account (Profile → Delete your account), we immediately delete your meal photos, every record linked to your account in our database, and your Clerk sign-in account.
- Diagnostics: Sentry deletes crash reports, logs, traces and session replays automatically after at most 90 days. Background-task logs at Trigger.dev are deleted after at most 30 days. These contain internal IDs, not your photos.
- Database backups: deleted data can remain in Neon's restore history for up to 30 days before it is overwritten. It is not used during that time.
9. Security
- All traffic between the app and our servers is encrypted (HTTPS).
- Each request is checked against your signed sign-in session. You can only read your own meals and data.
- Meal photos are private. The app shows them through signed links that expire within about two hours.
- Secret keys stay on our servers and never ship in the app.
No system is perfectly secure, but we work to protect your data and will notify you as the law requires if a breach affects it.
10. Your choices and rights
- Delete: in the app, Profile → Delete your account removes your data as described above.
- Correct: log a new weight or set a new goal in Profile. For anything else, contact us.
- Access and portability: the app doesn't have an export feature yet. Email makota.tv@gmail.com and we'll send you a copy of your data.
- Notifications: turn the morning reminder on or off in Profile, or in your device settings.
- Permissions: you can withdraw camera, photo or notification access at any time in your device settings.
- Depending on where you live, you may also have the right to object to or restrict processing, withdraw consent, and complain to your data protection authority.
11. Children
CarboLens isn't directed at children under 16, and we don't knowingly collect their data. If you believe a child has given us personal data, contact us and we'll delete it.
12. Changes
We'll update this policy when our practices change. For significant changes we'll tell you in the app or by email before they take effect. The effective date at the top shows the current version.
13. Contact
Taras Makota
Kulykivska St. 18a, Lviv, 79000, Ukraine
Email: makota.tv@gmail.com