FOODIENT PRIVACY POLICY

1. Introduction

This Privacy Policy explains how Infinee s.r.o., Babuskova 3, Bratislava 821 03, Slovakia ("we," "us," or "our") collects, uses, and protects your personal data when you use the Foodient mobile application ("App").

We are committed to protecting your privacy and ensuring the security of your personal information, particularly sensitive health data related to your food allergies and intolerances.

2. Data Controller

3. Types of Data We Collect

3.1 Personal Information

3.2 Usage Data

3.3 Technical Data

4. How We Use Your Data

We process your personal data for the following purposes:

4.1 Service Provision

• Providing personalized allergen detection through AI Scan based on your profile
• Delivering customized recipes matching your allergies and severity levels
• Managing your "My List" of safe foods and foods to avoid
• Providing educational content tailored to your specific allergies
• Tracking symptoms and food reactions based on your sensitivity settings

4.2 App Functionality

• Account creation and management
• Synchronizing data across devices
• Sending push notifications (with your consent)
• Processing subscription payments

4.3 Improvement and Safety

• Improving AI accuracy and app features
• Ensuring app security and preventing fraud
• Analyzing app performance and fixing bugs
• Conducting anonymized research on food allergies

4.4 Communication

• Responding to support requests
• Sending important updates about your allergies
• Marketing communications (only with consent)

5. Legal Basis for Processing

We process your data based on:

• Consent: For health data, marketing, and optional features
• Contract: To provide the App services you've requested
• Legitimate Interests: For security, fraud prevention, and app improvement
• Legal Obligations: When required by law

6. Data Sharing and Third Parties

We may share your data with:

6.1 Service Providers

• Payment Processors: Stripe, Apple Pay, Google Pay (payment data only)
• Cloud Services: Render (application hosting), Neon.tech (database storage - encrypted)
• Analytics: PostHog (anonymous usage data for app improvement)
• AI Services: OpenAI, Anthropic Claude API
• Email services: Brevo (transactional emails and notifications)

6.2 Legal Requirements

We may disclose data when required by law or to protect rights and safety.

6.3 Business Transfers

In case of merger or acquisition, data may be transferred with appropriate protections.

7. International Data Transfers

Your data may be processed in countries outside Slovakia/EU. We ensure appropriate safeguards through:

• EU Standard Contractual Clauses
• Data Privacy Framework certifications
• Adequate security measures

8. Data Security

We implement robust security measures including:

• End-to-end encryption for sensitive health data
• Secure authentication protocols
• Regular security audits
• Access controls and monitoring
• Anonymization techniques

9. Data Retention

We retain your data for:

• Active Account Data: As long as your account is active
• Health Data: Until you delete it or close your account
• Analytics Data: Maximum 2 years (anonymized)
• Legal Records: As required by law (typically 3-10 years)

10. Your Rights

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Delete your data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your data
• Objection: Object to certain processing activities
• Withdraw Consent: At any time for consent-based processing

To exercise these rights, contact us at contact@infinee.pro.

11. Children's Privacy

Foodient is not intended for children under 16. If you're under 16, please use the App only with parental supervision and consent. Parents can contact us to manage their child's data.

12. AI and Automated Processing

12.1 How AI Works in Foodient

• Food scanning uses machine learning to identify potential allergens
• Processing happens primarily on your device when possible
• AI models are trained on anonymized, aggregated data

13. Cookies and Tracking

The App uses minimal cookies for:

• Session management
• Security purposes
• Anonymous analytics (with consent)

You can manage cookie preferences in your device settings.

14. Updates to This Policy

We may update this Privacy Policy periodically. We'll notify you of material changes through:

• In-app notifications
• Email (if provided)
• Policy update date

15. Contact Us

For privacy questions or concerns:

16. Supervisory Authority

You have the right to lodge a complaint with the Slovak data protection authority:

For EU residents, you may also contact your local data protection authority.