Privacy Policy
At a glance
- No ads, and we never sell your data.
- Your diet and allergies are used only to adapt your recipes, and only with your consent.
- On the Free plan your recipes, lists, plan and food log stay on your phone. Premium also keeps them in your account so they sync.
- Anonymous usage statistics help us improve the app. You can turn them off in Settings.
- You can export or delete everything yourself, in Settings.
1. Who we are
Dietify is made by Smart Horizon in the Sultanate of Oman ("we", "us"). We decide how your personal data in Dietify is used and we are responsible for it.
Questions about this policy or your data: dietify.support@smarthorizon.co
2. What Dietify does
Dietify adapts recipes to your diet and allergies. You give it a photo, a link to a recipe or a social video, a video file, your voice or typed text. It gives back a version that fits your diet, with the swaps it made, nutrition estimates, a grocery list, a weekly planner and a food log.
Dietify is for adults. You must be 18 or older to use it.
3. The data we process
Your diet profile
- What it holds: the diets you pick, your allergens, foods you avoid, a calorie limit per serving and how much lighter a low-calorie recipe should be.
- This is health data. We use it only with your explicit consent, which Dietify asks for during setup, and only to adapt recipes for you.
- It is kept in your account on our servers, on every plan, because the AI needs it to adapt your recipes. It stays until you change it or delete your account.
What you send us to adapt
- Photos, videos, voice recordings, typed or pasted text, and links to recipe websites or to posts on Instagram, TikTok or YouTube.
- We read the recipe from it. For a link, our server fetches the web page, or the post's text, and if needed its video or audio. The recipe is then adapted by AI and checked again by our own safety rules, which are not AI.
- Before a JPEG photo leaves your phone, the app removes the location stored in it. Photos in other formats (such as HEIC photos shared from another app) are sent as they are.
- Files you upload are deleted from our servers within 48 hours (a recipe that waits for you to confirm the diet keeps its photo while it waits). The one exception is a photo that becomes the picture of a Premium recipe; it is kept as long as that recipe.
- Videos and audio fetched from a link are deleted as soon as your recipe is ready, and always within about an hour.
- The content of each request, including the link you sent and the names of uploaded files, is removed from our records 24 hours after the request ends. What stays is a usage record without content (see below).
Recipe pictures
- A recipe from a social video can use the post's cover image as its picture. We store a copy so the recipe can show it.
- A recipe without a picture can get one made by AI from its title and a few ingredient names.
- Pictures are stored at web addresses that are not listed anywhere; someone who has an exact address could open that picture. They are deleted with the recipe from our servers: after about 24 hours on the Free plan, and when you delete the recipe on Premium.
Your recipes and lists
- Free plan: your adapted recipe is kept on our servers for about 24 hours so the app can collect it, then deleted. Your recipe box, notes, grocery list, meal plan, food log, cooked history and saved ingredient values stay only on your phone, and in your phone's own backups (iCloud or Google) if you use them. When you adapt a recipe, the app sends your saved ingredient values with it so the nutrition uses them; they are deleted with the request's content.
- Premium: the same items are also kept in your account so they sync between your devices: recipes (with your notes and categories), saved ingredient values, grocery list, meal plan, food log and cooked history. Your tweak conversations are kept too.
Your account
- Every install starts with an anonymous account with a random ID. No name or email is needed. Its sign-in key is kept in your phone's secure storage and is not copied into phone backups, so a new phone starts with a new anonymous account unless you add an email or Apple or Google sign-in.
- You can add an email to keep your recipes across devices. You sign in with a one-time code we email you, sent from
noreply@smarthorizon.co. There is no password. - Instead of an email you can use Sign in with Apple (on iPhone) or Sign in with Google. Apple gives us an ID for your Apple account and your email address, or a private relay address if you choose Hide My Email; we don't ask Apple for your name. Google gives us an ID for your Google account, your email address, your name and a link to your profile picture. Our sign-in service keeps these with your account; the app shows only your email.
- With Apple, we also keep a token from Apple so that we can withdraw Dietify's access to your Apple account when you delete your Dietify account.
Purchases
- Apple or Google handle payment. We never see your card or payment details.
- RevenueCat, which manages subscriptions for us, receives your Dietify user ID and your purchase history from the store.
- We keep your plan, its status, the product, the store, the end date, whether it renews and whether it is a trial.
Notifications
- If you allow notifications, we store your device's push token with its platform, language and time-zone offset, so a notification arrives in your language at a sensible time.
- Dietify sends a notification when a recipe is ready, couldn't be made or needs you to confirm the diet, and 48 hours before a free trial ends. Notifications never name your dish or your diet.
Emails
- If your account has an email address, we email you about your account and subscription: when your account is ready, when Premium starts, 2 days before a free trial turns paid, if a renewal payment fails, when Premium ends, and to confirm that your account was deleted. They are in the app's language and never name your diet, allergies or dishes.
- Tips, offers and a monthly summary come only if you say yes: tick "Send me tips and offers by email" when you create an account, or turn on Email updates in Settings › Privacy › Privacy choices. They may tell you about Premium or a new feature. The monthly summary (Premium) shows how many recipes you adapted and cooked and how many meals you planned the month before; it never names a recipe, diet or allergy and never uses your food log. At most one a week.
- Every one of them has an Unsubscribe link, and your mail app's own Unsubscribe button works too; you can also turn Email updates off in the app. Account and subscription emails still come.
- They all come from
hello@mail.smarthorizon.co, and replies reach our support inbox. - We keep a record of which emails went out and when, without their content or your address, so none is sent twice, and a record of each yes or no to tips and offers, with the date and the wording you saw.
Support messages
- When you write to us from the app, we receive the topic, your email, your name if you give it, your message, up to 3 screenshots, the recipe if you report one, and device details (app version, operating system, language, display and text size, phone model).
- It is delivered to our support inbox by email. Screenshots are deleted from our servers once it is sent. We keep a short record without your message or email (topic, number of attachments, time) until you delete your account, and the email itself for as long as we need it to help you.
Crash reports and usage statistics
- Crash reports (Firebase Crashlytics) contain the device model, operating system, app version, where the app failed and the names of the last screens and actions. They are not meant to contain recipes, diets, allergies or health data, and the app removes database contents from error messages before they are sent. They are always on in the released app, so we can keep it stable.
- Usage statistics (Firebase Analytics) are on unless you turn off Share anonymous usage stats in Settings › Privacy › Privacy choices; turning it off stops them at once. They record which screens you open and a few events: setting up the app, adding a recipe and whether it worked, cooking or sharing a recipe, the paywall, the plan you buy with its price and currency, and errors such as a failed purchase or sign-in. Each comes with your plan (Free, trial, Premium) and the app's language. They never contain recipe text, diet or allergy names, your email, or your account ID; Firebase ties them to a random ID for this installation. Firebase also works out a rough location (country or region) from your phone's IP address for these statistics; we never get your precise location. The advertising ID is not collected and advertising features are off.
- Performance data (Firebase Performance Monitoring) comes with usage statistics and stops when you turn them off: how long the app takes to start, how smoothly its screens draw, and how long our server takes to answer each request, with the server address only (never an ID or what you sent), the response code and size, plus your device model, operating system, app version and country. On iPhone it also times, automatically, the requests that the services built into the app make (such as RevenueCat for subscriptions); their addresses can include your account's random ID, so on iPhone this data can be linked to your account. It never includes what was sent.
- Usage records keep the time, type, outcome and processing cost of each request, for quotas, fair use and our own costs. They hold no recipe content. When you delete your account they are kept without your user ID, for our accounts.
Apple Health and Health Connect (Premium, optional)
- If you allow it, marking a meal "I ate this" writes it to Apple Health or Health Connect: meal type, recipe title, calories, protein, carbohydrates, fat, fibre, sugar and sodium.
- Dietify never reads data from these apps. This data is never used for advertising or shared with anyone else.
Only on your phone
- Home Screen widgets show your plan, grocery list, food log and recipe pictures from data already on your phone. Nothing extra is sent.
- Sharing a recipe or a list makes a PDF or text on your phone, and you choose where it goes.
4. Why we use it
| Purpose | Data | Legal basis (EU and UK) |
|---|---|---|
| Adapt recipes, show swaps and nutrition, run the safety check | What you send, your diet profile | Contract. For diet and allergy data: your explicit consent |
| Keep your account, sign-in and Premium sync | Account, recipes and lists, email, Apple or Google sign-in details | Contract |
| Subscriptions | User ID, purchase history | Contract; legal duties such as tax |
| Quotas, fair use, preventing abuse, our costs | Usage records | Our legitimate interests |
| Crash reports | Technical data | Our legitimate interest in a stable app |
| Performance data | Start time, screen drawing, server response times | Our legitimate interest in a fast, reliable app; turned off with usage statistics |
| Usage statistics | Screens and events without health data | Our legitimate interest in understanding how the app is used and improving it; turn them off in Settings at any time |
| Notifications | Push token, language, time-zone offset | Your consent, given in your phone's settings |
| Account and subscription emails | Email address, plan status and dates, app language | Contract |
| Tips, offers and the monthly summary | Email address, plan, app language, last month's numbers of recipes adapted and cooked and meals planned | Your consent; withdraw it at any time with Unsubscribe or in Privacy choices |
| Support | Your message and device details | Our legitimate interest in answering you |
| Apple Health and Health Connect | Meals you log | Your consent, given in your phone's settings |
5. Who processes data for us
| Service | What it does for us | Data it receives |
|---|---|---|
| Supabase (servers in Frankfurt, Germany) | Database, file storage, sign-in and server code | All account and cloud data |
| Google Gemini API (paid service) | AI that reads and adapts recipes, estimates missing nutrition values, makes dish pictures and, for Premium, reads recipes aloud in Cook mode | The content of that request with your diet profile, or ingredient names, or a recipe title, or the recipe step or ingredient list being read aloud. No name or email; links to the photos, videos and audio you send contain your account's random ID. Under Google's terms for the paid service it is not used to train their models |
| Google Firebase | Crash reports, usage statistics and performance data (unless you turn them off) and push notifications | Technical data, screens and events, performance timings, push token |
| Google Workspace | Sends sign-in codes | Your email address |
| Resend | Delivers support messages to our inbox, and account and subscription emails to you | Your support message; your email address and the email it delivers |
| RevenueCat | Subscription status | Your user ID and purchase history |
| Apify, and a backup service through RapidAPI | Fetch public Instagram and TikTok posts you share | The link you shared |
| YouTube and TikTok | Provide the title and description of a public video | The video's link or ID |
| Recipe websites | Our server opens the page you shared | Nothing about you; your IP address is not passed on |
| Open Food Facts | Product nutrition for barcodes you scan | The barcode number only, sent from our server |
| Google Fonts | Fonts for PDFs in Arabic, Japanese, Korean, Chinese, Thai, Russian and Ukrainian, downloaded once | Your phone's IP address, as with any download |
| AppsFlyer | The download link in shared recipes and lists, their QR codes, Share Dietify and our emails: it sends each phone to its app store | Whoever opens the link: their IP address, device and browser type, and the time. Dietify has no AppsFlyer code, so it learns nothing from inside the app |
| Cloudflare | Our web pages: the email preferences (Unsubscribe) page and the older download page | The IP address of whoever opens them |
If you use Sign in with Apple or Sign in with Google, Apple or Google confirms who you are under its own privacy policy, and learns that you use Dietify.
We do not sell personal data, and we do not use it for advertising. Dietify has no ads.
6. International transfers
Smart Horizon is in Oman, our servers are in Germany, some of the services above are in the United States, and AppsFlyer is in Israel. Where data leaves the EU or the UK, we rely on the safeguards these providers offer, such as the European Commission's Standard Contractual Clauses.
7. How long we keep data
- Uploaded files: within 48 hours, except the photo of a Premium recipe, which stays as long as the recipe.
- Fetched videos and audio: as soon as your recipe is ready, at most about an hour.
- Free results on our servers: about 24 hours. The copy on your phone stays until you delete it.
- Content of a request, including its link: 24 hours after it ends.
- Anonymous accounts: deleted after 90 days without use, unless they have an active Premium subscription.
- Apple sign-in token: until you delete your account; we then withdraw it at Apple.
- Premium data, your account and diet profile: while your account exists. If Premium ends, your cloud recipes become read-only and you can still export them; nothing is deleted because Premium ended.
- Usage records: kept for our accounts; without your user ID once you delete your account.
- Records of emails we sent: while your account exists; without your user ID once you delete it.
- Your yes or no to tips and offers: while your account exists, as proof of consent.
8. Your rights and choices
- Export everything: Settings › Privacy › Privacy choices › Export my data gives you a JSON file and a PDF.
- Delete your account: Settings › Privacy › Privacy choices › Delete account removes your account, recipes, lists, uploads, pictures and settings from our servers and from your phone. Usage records are kept without your user ID. Can't use the app? Email dietify.support@smarthorizon.co from the address on your account; we ask you to confirm, then delete it within 30 days. See Delete your account.
- Usage statistics: turn them off (or back on) at any time in Settings › Privacy › Privacy choices.
- Notifications and Health: turn them off in your phone's settings.
- Your diet data: you can change your diet profile at any time. If you withdraw your consent to using it, we can no longer adapt recipes, so you would delete your account instead.
- Other requests: to correct your data, or to restrict or object to how we use it, email dietify.support@smarthorizon.co.
- You can complain to your data protection authority.
Deleting your account does not cancel an App Store or Google Play subscription. Cancel it in your store settings.
9. Children
Dietify is for adults (18 and over). We do not knowingly process children's data. If you think a child is using Dietify, tell us and we will delete the account.
10. Security
- Data is encrypted in transit.
- Each account can reach only its own data on our servers.
- Server keys never ship in the app, and access to production systems is limited to the people who run Dietify.
11. Changes to this policy
When we change this policy, we publish a new dated version and keep the earlier ones under Version history. We will tell you in the app about important changes.
12. Contact
Smart Horizon · dietify.support@smarthorizon.co