Privacy Policy for Fitalo – AI Photo Calorie Tracker

Effective Date: 10 July 2026
Last Updated: 10 July 2026

1. Introduction

Welcome to Fitalo – AI Photo Calorie Tracker (“Fitalo”, the “App”, “we”, “us”, or “our”).

This Privacy Policy explains how we collect, use, store, disclose, and protect information when you use Fitalo on an Apple or Android device.

Fitalo is a health, nutrition, and fitness application that may allow users to:

• scan and analyze meals using photographs, text, voice, or barcodes;
• estimate calories, macronutrients, and other nutritional values;
• maintain a food and nutrition diary;
• track water consumption, weight, body measurements, activity, workouts, sleep, and other wellness information;
• synchronize selected information with Apple HealthKit or Google Health Connect;
• receive AI-generated nutrition and lifestyle insights;
• access recipes and nutritional information;
• purchase and manage premium subscriptions.

By using Fitalo, you acknowledge that your information will be processed as described in this Privacy Policy.

Where consent is required by applicable law, we will ask for your consent before processing the relevant information. You may withdraw your consent at any time, although doing so may prevent certain features from functioning.

2. Data Controller

The controller responsible for the processing of personal data through Fitalo is:

Piotr Wosinek
ul. Kasztanowa 5, 42-244 Latosówka
Poland

Email: info@dream-apps.pl

For questions concerning privacy or the exercise of your data protection rights, contact us using the email address above.

3. Scope of This Privacy Policy

This Privacy Policy applies to information processed through:

• the Fitalo mobile application;
• our servers and backend services;
• customer support;
• subscription management;
• integrations with Apple HealthKit and Google Health Connect;
• AI-powered food analysis;
• our account-deletion website and other Fitalo-related online services.

This Privacy Policy does not govern third-party websites, applications, stores, or services that operate under their own privacy policies.

4. Information We Collect

The information we collect depends on the features you use, the permissions you grant, your device, and whether you create an account.

4.1 Account and Profile Information

If you create an account, we may process:

• email address;
• name, display name, or nickname;
• internal user ID;
• authentication information;
• profile preferences;
• language and region preferences;
• account creation and last-login dates.

Passwords are not stored in readable form. Authentication may be handled by our authentication provider.

If social or platform sign-in options are offered, such as Sign in with Apple or Google Sign-In, we receive only the information that you authorize the provider to share with us.

4.2 Food, Nutrition, and Wellness Information

Depending on the features you use, we may process:

• food and meal entries;
• meal type and time;
• calories and nutritional values;
• macronutrients and micronutrients;
• ingredients, portion sizes, and serving information;
• dietary preferences;
• dietary goals;
• calorie and nutrition targets;
• water intake;
• weight and weight history;
• height;
• body measurements;
• body composition information;
• physical activity and exercise information;
• personal wellness goals;
• progress information;
• recipe selections and saved recipes;
• barcode and product information.

This information may qualify as health-related or sensitive personal data under applicable law.

4.3 Photos and Camera Content

When you use the AI meal scanner or barcode scanner, we may process:

• photographs taken using the device camera;
• photographs selected from the photo library;
• images of food, meals, labels, packaging, or barcodes;
• technical information necessary to process the image.

Photos are processed only when you choose to submit them.

Depending on the feature you use, a meal photo may be:

• processed temporarily to produce an AI analysis; or
• stored as part of your meal diary until you delete the meal entry, image, or account.

We do not use your meal photos to train our own AI models unless we first obtain separate, explicit consent from you.

You should avoid uploading photographs containing faces, identification documents, private correspondence, payment information, or other information unrelated to food and nutrition analysis.

4.4 Text and Voice Input

When you enter or dictate information about a meal, we may process:

• meal descriptions;
• ingredient lists;
• nutrition questions;
• voice recordings or audio input;
• transcripts produced from voice input;
• prompts submitted to AI features;
• AI-generated results and recommendations.

Audio is processed only when you activate a voice-related feature and grant microphone permission.

Unless a feature clearly states otherwise, audio is used to recognize or transcribe the submitted content and is not intended to be permanently stored as an audio recording.

4.5 Apple HealthKit and Google Health Connect Data

Fitalo accesses and collects health and fitness data only after the user grants explicit permission through Google Health Connect or Apple HealthKit. The collected data is used solely to provide nutrition, activity, sleep, weight, hydration, and progress-tracking features. Health data is not sold, used for advertising, or shared with third parties except service providers necessary to operate the requested features. Health data is protected using encrypted connections, access controls, and secure cloud infrastructure.

With your explicit permission, Fitalo may read or write selected health and fitness data through Apple HealthKit or Google Health Connect.

Depending on the platform, app version, and permissions you enable, this may include:

• steps;
• walking or running distance;
• workouts and exercise sessions;
• active calories burned;
• total calories burned;
• floors climbed;
• sleep information;
• weight;
• height;
• body measurements;
• body composition;
• water intake;
• nutrition information;
• heart-related fitness information where supported;
• other health or fitness data clearly identified in the permission request.

Fitalo accesses only the data types for which you grant permission.

You can review or withdraw these permissions at any time through Apple Health, Health Connect, or your device settings.

We do not use information obtained from Apple HealthKit or Google Health Connect for:

• third-party advertising;
• targeted advertising;
• advertising profiling;
• marketing unrelated to Fitalo;
• sale to data brokers;
• determining eligibility for insurance, credit, employment, or similar services.

We do not sell health or fitness information.

4.6 Subscription and Purchase Information

Fitalo may offer free trials, recurring subscriptions, promotional offers, or other in-app purchases.

Payments are processed by:

• Apple through the App Store; or
• Google through Google Play.

We do not directly collect or store your full payment card number, bank account number, or payment authentication credentials.

To verify purchases and provide premium access, we may process:

• purchased product or subscription identifier;
• transaction and receipt identifiers;
• purchase date;
• renewal date;
• expiration date;
• subscription status;
• trial or promotional offer status;
• cancellation status;
• store platform;
• storefront country or region;
• currency and pricing information;
• anonymous or account-linked app user identifier.

We use RevenueCat to validate purchases, synchronize subscription status, restore purchases, and determine whether premium features should be available.

RevenueCat receives information necessary to perform these services but does not process your full payment card details on our behalf.

Deleting the App or your Fitalo account does not automatically cancel an active subscription. Subscriptions must be cancelled through your Apple App Store or Google Play account.

Cancellation stops future renewal but does not normally remove access for a subscription period that has already been paid for.

Refund requests are handled by Apple or Google according to the applicable store rules.

4.7 Device and Technical Information

When you use Fitalo, we or our service providers may automatically process:

• device model;
• operating system and version;
• app version;
• language;
• time zone;
• screen and device settings;
• device or installation identifiers;
• push notification token;
• IP address;
• approximate country or region derived from the IP address;
• network information;
• date and time of access;
• session information;
• feature interactions;
• diagnostic events;
• crash logs;
• performance information;
• error reports.

We do not require precise GPS location for Fitalo’s core calorie-tracking and nutrition features unless a future feature clearly requests it and you grant permission.

4.8 Analytics Information

We may collect information about how Fitalo is used, such as:

• screens viewed;
• features used;
• buttons selected;
• session duration;
• app launch and activity events;
• subscription screen interactions;
• technical errors and crashes.

We use this information to understand app performance, fix errors, improve usability, and develop features.

Where legally required, non-essential analytics are enabled only after obtaining the appropriate consent.

We do not use analytics information for third-party behavioral advertising.

4.9 Notifications

If you enable notifications, we may process:

• device push token;
• notification permission status;
• notification delivery and interaction information;
• internal user or device identifier;
• notification preferences;
• limited segmentation information, such as app language or activity status.

We may use notifications for:

• meal and water reminders;
• progress reminders;
• account or service messages;
• subscription information;
• product updates;
• optional promotional communications about Fitalo.

You can disable notifications through the App or your device settings.

4.10 Support Communications

If you contact us, we may process:

• your email address;
• your name;
• the content of your request;
• screenshots or files you provide;
• device and app information;
• correspondence history;
• information needed to investigate a technical or account issue.

Please do not include unnecessary health information or other sensitive data in support requests.

5. How We Receive Information

We receive information:

• directly from you;
• from your device;
• from Apple HealthKit or Google Health Connect, with your permission;
• from Apple or Google in connection with purchases;
• from RevenueCat in connection with subscription status;
• from analytics, diagnostics, authentication, hosting, and notification providers;
• from food, barcode, recipe, and nutrition data providers;
• automatically when you interact with the App.

6. How We Use Information

We may use information to:

• create and manage your account;
• provide meal scanning and calorie-estimation features;
• analyze photographs, text, audio, and barcode information;
• maintain your food, water, weight, and activity history;
• synchronize permitted health and fitness information;
• personalize goals, calculations, insights, and recommendations;
• provide recipes and nutritional data;
• calculate calorie and nutrition targets;
• provide AI-generated responses;
• activate and manage premium features;
• validate and restore purchases;
• send reminders and notifications;
• provide customer support;
• detect and prevent fraud, abuse, and security incidents;
• monitor app stability and performance;
• fix technical problems;
• improve existing features;
• develop new features;
• comply with legal obligations;
• establish, exercise, or defend legal claims.

7. Legal Bases for Processing

Where the General Data Protection Regulation, United Kingdom GDPR, or similar legislation applies, we rely on one or more of the following legal bases.

7.1 Performance of a Contract

We process information where necessary to:

• create and operate your account;
• provide requested app features;
• maintain your diary and preferences;
• process subscription entitlements;
• provide customer support.

7.2 Consent

We rely on consent where required, including for:

• access to Apple HealthKit or Google Health Connect;
• processing special-category health information;
• camera, photo library, and microphone access;
• optional push notifications;
• optional analytics where legally required;
• other optional features clearly presented to you.

For health information treated as special-category data, we rely on your explicit consent where required by law.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

7.3 Legitimate Interests

We may process limited information based on our legitimate interests in:

• keeping Fitalo secure;
• preventing fraud and misuse;
• diagnosing crashes and technical errors;
• maintaining service reliability;
• understanding general feature performance;
• improving Fitalo;
• protecting our legal rights.

We use this basis only when our interests are not overridden by your rights and freedoms.

7.4 Legal Obligations

We may process information when required to comply with:

• tax and accounting obligations;
• consumer protection requirements;
• valid legal requests;
• court orders;
• law-enforcement obligations;
• other applicable laws.

8. Artificial Intelligence Processing

Fitalo uses artificial intelligence to analyze information submitted by users and estimate food and nutritional content.

When you use an AI feature, the relevant information may be transmitted to an AI service provider, including:

• a meal photograph;
• a food description;
• ingredient information;
• a voice transcript;
• your question or prompt;
• limited contextual information required to generate a useful response.

We currently use OpenAI API services for certain AI-powered features.

AI providers process submitted information to generate the requested analysis or response. Their processing is governed by contractual terms, data-processing terms, security measures, and privacy policies applicable to their services.

Our current AI provider states that data submitted through its API is not used to train its models by default unless the customer expressly opts in. We do not opt in to model training using Fitalo user content.

AI providers may temporarily retain limited information for security, abuse prevention, legal compliance, or service operation according to their applicable retention policies.

We do not intentionally submit your complete Fitalo profile or complete health history to an AI provider unless this is necessary for a feature you explicitly request and is clearly disclosed to you.

AI-generated calorie and nutrition information is an estimate and may be inaccurate. You should review and correct results before relying on them.

9. Health and Fitness Data

Health, nutrition, body measurement, and fitness information may be sensitive.

We process such data only to provide features reasonably expected from Fitalo, including:

• nutrition tracking;
• activity tracking;
• progress tracking;
• calorie calculations;
• wellness summaries;
• synchronization requested by the user;
• personalized health and fitness insights.

We do not:

• sell health information;
• use HealthKit or Health Connect information for advertising;
• disclose health information to data brokers;
• use health information to determine insurance eligibility;
• use health information for employment decisions;
• use health information for credit decisions;
• make health information publicly available.

Health information is not shared with other Fitalo users.

10. Service Providers and Third Parties

We use service providers to operate and improve Fitalo.

Depending on the platform, app version, and enabled features, these providers may include:

OpenAI

Used to provide AI-powered analysis of photographs, food descriptions, text, and other user-submitted content.

Google Firebase

May be used for analytics, crash reporting, authentication, cloud messaging, diagnostics, configuration, or related app infrastructure.

Supabase

May be used for account authentication, databases, backend functions, and secure cloud storage.

RevenueCat

Used to validate purchases, manage subscription entitlements, restore purchases, and synchronize subscription status.

OneSignal

Used to deliver push notifications and process notification-related device identifiers and interaction information.

Apple

Used for App Store distribution, in-app purchases, Sign in with Apple where available, Apple HealthKit integration, device services, and system-level permissions.

Google

Used for Google Play distribution, in-app purchases, Google sign-in where available, Firebase services, Google Health Connect, and Android platform services.

Food, Nutrition, Recipe, and Barcode Providers

Third-party databases or APIs may be used to retrieve:

• product information;
• barcode information;
• recipes;
• ingredients;
• nutritional values;
• food images;
• dietary classifications.

Information submitted to these services is limited to what is reasonably necessary to retrieve the requested result.

Hosting and Security Providers

We may use hosting, database, content delivery, monitoring, email, and cybersecurity providers to operate and protect the App.

These providers may process information only to perform services for us and are subject to appropriate contractual or legal obligations.

11. When We Share Information

We may disclose information:

• to service providers acting on our behalf;
• when you request or authorize a particular integration;
• to Apple or Google in connection with purchases and platform services;
• to comply with applicable law or a valid legal process;
• to protect users, our services, or our legal rights;
• to investigate fraud, abuse, or security incidents;
• in connection with a merger, acquisition, restructuring, or sale of the business, subject to legally required safeguards and notice.

We do not sell or rent personal data.

We do not share personal data for cross-context behavioral advertising.

We do not allow third parties to use HealthKit or Health Connect information for advertising.

12. International Data Transfers

Some service providers may process information outside Poland, the European Economic Area, the United Kingdom, or your country of residence.

Where required, we use appropriate safeguards for international transfers, which may include:

• adequacy decisions;
• Standard Contractual Clauses;
• the United Kingdom International Data Transfer Addendum;
• contractual data-protection obligations;
• supplementary technical and organizational safeguards.

The level of data protection in another country may differ from that in your country.

You may contact us for additional information about safeguards applicable to international data transfers.

13. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods depend on the type of information and the purpose for which it is processed.

Generally:

• account information is retained while the account remains active;
• meal, nutrition, water, weight, and progress records are retained until you delete the records or account;
• stored meal photographs are retained until the associated entry, photograph, or account is deleted;
• information submitted for temporary AI processing is retained only as necessary to provide the feature, subject to limited provider security or abuse-monitoring retention;
• subscription records are retained while needed to manage entitlements, resolve disputes, prevent fraud, and comply with legal obligations;
• support correspondence may be retained while needed to resolve the issue and maintain relevant business records;
• analytics and diagnostic information is retained according to our configured provider retention periods;
• records required for tax, accounting, legal, security, or fraud-prevention purposes may be retained for the legally required period.

Backup copies may remain for a limited time after deletion until they are overwritten through normal backup cycles.

We may retain anonymized or aggregated information that can no longer reasonably identify you.

14. Account and Data Deletion

You may delete individual meal entries and other records through the available App features.

If you have a Fitalo account, you can request deletion through:

Fitalo → Settings → Data management → Delete Account (Reset app data)

You may also submit an account-deletion request through contacting: info@dream-apps.pl

Deleting your account will initiate deletion of personal information associated with the account, except information that we are required or permitted to retain for:

• legal compliance;
• tax or accounting purposes;
• security;
• fraud prevention;
• dispute resolution;
• enforcement of agreements;
• protection of legal rights.

Information stored independently by Apple, Google, or another third party is governed by that party’s policies and may need to be managed through the relevant service.

Deleting your Fitalo account or uninstalling Fitalo does not automatically cancel an active Apple App Store or Google Play subscription.

15. Your Device Permissions

Fitalo may request the following permissions:

Camera

Used to photograph meals, food labels, products, or barcodes.

Photo Library

Used to select existing food or meal photographs for analysis.

Microphone

Used for optional voice input or meal description features.

Health Data

Used to read or write selected information through Apple HealthKit or Google Health Connect.

Notifications

Used to send reminders, progress messages, subscription notices, and app updates.

You may refuse or withdraw a permission through your device settings. Some features may not work without the required permission.

16. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including where appropriate:

• encrypted network connections;
• access controls;
• authentication controls;
• secure cloud infrastructure;
• limited employee or contractor access;
• logging and monitoring;
• data minimization;
• security updates;
• contractual safeguards with service providers.

However, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

You are responsible for protecting access to your device, email account, and Fitalo account.

17. Children’s Privacy

Fitalo is not directed to children under 13 years of age.

We do not knowingly collect personal information from children under 13 without legally valid parental or guardian consent.

Where local law sets a higher minimum age for independent consent to online services, users below that age should use Fitalo only with authorization and supervision from a parent or legal guardian.

If we learn that we have collected personal information from a child in violation of applicable law, we will take reasonable steps to delete it.

Parents or guardians who believe a child has submitted personal information may contact:

info@dream-apps.pl

Fitalo is a general wellness and calorie-tracking application and should not be used to impose unsafe dietary restrictions on children.

18. Your Data Protection Rights

Depending on where you live, you may have the right to:

• obtain information about how your data is processed;
• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• object to certain processing;
• receive certain data in a portable format;
• withdraw consent;
• object to direct marketing;
• lodge a complaint with a data-protection authority;
• appeal certain decisions concerning your privacy request.

To exercise your rights, contact:

info@dream-apps.pl

We may need to verify your identity before completing a request.

We will respond within the period required by applicable law.

If you are located in Poland or another European Economic Area country, you may lodge a complaint with your local supervisory authority. In Poland, the supervisory authority is the President of the Personal Data Protection Office.

19. United States Privacy Rights

Residents of certain United States jurisdictions may have additional rights, including the right to:

• know what categories of personal information we collect;
• access personal information;
• correct inaccurate information;
• request deletion;
• receive a copy of certain information;
• opt out of the sale or sharing of personal information;
• limit certain uses of sensitive personal information;
• appeal the denial of a request;
• receive equal service without unlawful discrimination.

We do not sell personal information.

We do not share personal information for cross-context behavioral advertising.

We use sensitive health information only to provide the features requested by the user, secure the App, comply with law, and perform other legally permitted purposes.

Requests may be submitted to:

info@dream-apps.pl

20. Automated Processing and AI-Generated Results

Fitalo uses automated systems to estimate nutritional information and personalize certain insights.

These systems may analyze:

• meal photographs;
• entered food descriptions;
• dietary goals;
• activity information;
• body measurements;
• saved nutrition information.

Fitalo does not use automated processing to make decisions that produce legal effects or similarly significant effects concerning employment, credit, insurance, housing, or access to essential services.

AI-generated information may contain errors and should be treated as an estimate.

21. Medical and Wellness Disclaimer

Fitalo is intended for general informational, nutrition-tracking, fitness, and wellness purposes.

Fitalo:

• is not a regulated medical device;
• does not provide a medical diagnosis;
• does not replace a doctor, dietitian, or other qualified professional;
• is not intended to treat, cure, prevent, or diagnose any disease;
• should not be used for medical emergencies.

Calorie, nutritional, and activity estimates may be incomplete or inaccurate.

Consult a qualified healthcare professional before making significant dietary or exercise changes, particularly if you:

• have a medical condition;
• take medication;
• are pregnant or breastfeeding;
• have a history of an eating disorder;
• are under 18;
• have special dietary or nutritional needs.

In an emergency, contact the appropriate emergency services.

22. Subscription Communications

We may send service-related communications concerning:

• activation of premium access;
• subscription status;
• failed entitlement verification;
• changes affecting premium features;
• account or security issues;
• changes to this Privacy Policy or our Terms of Use.

Apple and Google may separately send transaction, renewal, billing, price-change, cancellation, or refund communications under their own policies.

Optional promotional notifications may be disabled through your notification or communication settings.

23. Links and Third-Party Content

Fitalo may display recipes, product data, food images, or links supplied by third parties.

We are not responsible for the privacy practices of third-party websites or services that you choose to open.

Before providing information to an external service, review its privacy policy.

24. Changes to This Privacy Policy

We may update this Privacy Policy when:

• Fitalo features change;
• our service providers change;
• legal requirements change;
• our data-processing practices change.

We will update the “Last Updated” date when changes are made.

Where required, we will provide additional notice in the App or request renewed consent.

Continued use of Fitalo after an update takes effect means that the updated policy applies to future use, but it does not replace consent where consent is legally required.

25. Contact Us

For privacy questions, requests, complaints, or account-deletion matters, contact:

Piotr Wosinek
ul. Kasztanowa 5, 42-244 Latosówka
Poland

Email: info@dream-apps.pl

Privacy Policy URL: https://dream-apps.pl/privacy-policy-fitalo
Terms of Use URL: https://dream-apps.pl/terms-and-conditions-fitalo

Account Deletion: inside of app settings or by mail