1. Controller
The controller of your personal data is MR Marcin Ruciński, ul. Wolności 546c/6, 41-806 Zabrze, Poland, Polish tax ID (NIP) 6482808866. Contact: oriee.app@gmail.com. This is a translation of the Polish original, which remains the binding version.
2. What data we process
- Profile data: sex, age, height, weight, activity level, goal — provided during onboarding.
- Food diary: logged meals, portions, nutritional values, streak.
- Weight and weight trend (including data imported from Apple Health / Health Connect with your consent).
- Account: identifier, email address (if you create an account), subscription status.
- When signing in with Google: first and last name and the profile picture URL that Google passes at authentication. We do not use them in the app — our authentication provider stores them and they disappear together with the account.
- When signing in with Apple: the email address and the first and last name that Apple passes at authentication (name only on first authorisation). If you choose "Hide My Email", we only receive a relay address in the privaterelay.appleid.com domain — we never learn your real address. We do not use the name in the app; our authentication provider stores it and it disappears together with the account.
- Content for AI recognition: meal text, voice recording converted to text, photos of meals/labels — processed in order to recognise and calculate the values.
- Technical data necessary for operation (e.g. server-side error logs).
3. Purposes and legal bases (GDPR)
- Providing the service (calorie counting, diary, trends) — Art. 6(1)(b).
- AI meal recognition — performance of the contract (point b).
- Health data (weight, Health) — based on your explicit consent (Art. 9(2)(a)); you can withdraw consent at any time in your system / app settings.
- Subscription settlement — legal obligation and performance of the contract.
- Security and correct operation of the service (server-side error logs) — our legitimate interest (Art. 6(1)(f)).
The calculations (BMR/TDEE, calorie target) are produced automatically, but are purely indicative — we do not take automated decisions that produce legal effects concerning you or similarly significant effects.
4. Recipients / processors
We use trusted providers only to the extent necessary for the service to work:
- Supabase (database, authentication, server functions) — EU region.
- Anthropic (Claude AI model, USA) — processing meal text/photos for recognition.
- RevenueCat and Apple App Store / Google Play — subscription and payment handling.
- Open Food Facts — a public product database (ODbL) used for search.
We do not sell your data. We do not use nutrition or health data for advertising. Transfers outside the EEA: content sent for AI recognition goes to Anthropic in the United States. Anthropic participates in the EU-US Data Privacy Framework (an adequacy decision), and the transfer is additionally safeguarded by the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR). Other account data is kept in the EU region (Supabase).
5. Photos and AI
We send photos of meals/labels for processing in order to recognise them. We do not keep the photos after processing — we do not store them on our servers. We do not use your photos to train models.
6. Shared product database
So that the app works faster and more accurately for everyone, we store in our database:
- the normalised text of a meal description together with the recognised result (a cache that means the same description does not require another AI request),
- names and nutritional values of products recognised by AI or read from a label.
These records are not linked to your account or identifier — they cannot be used to establish who entered a given description. We do not store voice recordings or photos in this way.
7. Retention
We keep the data for as long as you have an account and actively use the app. Local data sits on your device; account data in Supabase (EU). After you delete your account we erase server data promptly, except for data we must keep longer: subscription billing records (a tax-law requirement) and data necessary to establish or defend legal claims — for the period laid down by law, after which we delete it.
8. Your rights
You have the right of access, rectification, erasure, restriction and portability, and the right to object. You can delete your account and its associated server data in the app: Profile → "Delete account" (except for data we retain on legal grounds under point 7). You can also write to us: oriee.app@gmail.com. You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
9. Children
The app is not intended for people under 16 — this is the age of consent for data processing that applies in Poland. We do not promote weight-loss mode to minors: below the age of 18 the app recommends consulting a doctor instead of a deficit.
10. Changes
We will announce material changes in the app at least 14 days in advance. Continued use after the changes take effect means acceptance of the updated policy; this does not limit the rights you have under the GDPR.
11. Contact
Privacy questions: oriee.app@gmail.com.