Privacy Policy

This policy applies to the Dodo Nutriva mobile app only. It explains what the app collects, why it processes it, who it is shared with, and what rights you have over your data.

1. What we collect

The app collects the data types below. This list matches the privacy labels published on the App Store and the app's own privacy manifest exactly.

Metrics read from Apple Health are not on this list: they never leave your device and are never written to your account (see section 3).

Alongside the types above, your profile holds the details you enter yourself and the app uses for its calculations: your date of birth (kept so the app can work out your age), height, weight, target weight, gender, activity level, diet preference and the health conditions you list.

What we do not collect: location, contacts, device identifiers, browsing history or advertising identifiers.

Phone number and the booking form. The app does not collect your phone number: there is no phone field anywhere in the app, and no phone number is ever written to our database. The booking calendar opens inside the app as a page hosted by Cal.com (Cal Inc.), and that calendar belongs to the dietitian's own practice. The form asks for your name and your email address; anything else you add there — a note about the appointment, or the email addresses of guests you invite — goes to Cal.com along with them and appears in the dietitian's Cal.com calendar as part of your appointment. None of it is written into the app's database, which is why none of it is on the list above or in the App Store privacy labels.

2. No advertising, no tracking

The app contains no ad network, no analytics SDK and no tracking technology. Your data is never matched with data from other apps or websites, never used for advertising, and never sold or rented to data brokers.

One detail worth naming plainly: the typeface the app is set in ships inside the app — it is not downloaded. It used to be fetched from Google's font service on first launch, which showed your IP address to Google; the faces are now bundled, so that request no longer happens at all.

3. Apple Health (HealthKit)

With your permission the app reads from Apple Health for two things: to draw the health dashboard inside the app, and so that the daily water total the app shows you also counts water logged by other apps or by your Apple Watch. The types read are:

• Steps and walking/running distance
• Active energy burned
• Heart rate
• Sleep (time asleep)
• Water intake
• Nutrition: energy, carbohydrates, protein and fat

The app also writes two kinds of data back to Apple Health:

• Water intake. The daily amount you log in the app is mirrored to your Apple Health daily total. To keep that total from being counted twice, the app first removes the water entries it wrote itself for that day and then writes one fresh total. Entries created by other apps or by your Apple Watch are never touched.
• Meal nutrition. When you confirm a meal, its energy, carbohydrates, protein, fat, fibre and sugar are saved to Apple Health as a meal entry, labelled with the foods in that meal. Fibre and sugar are only ever written — they are not among the types we read.

Nothing beyond water intake and these meal nutrition values is written to Apple Health.

Apple Health data stays on your device. It is read to render your dashboard, it is not sent to our servers, and it is not shared with any third party. It is not used to work out your calorie or macro targets either — those are calculated from the details you enter yourself (height, weight, date of birth, gender, activity level and goal). You can revoke the permission at any time in iOS Settings › Privacy & Security › Health. No data obtained from Apple Health is used for advertising or marketing.

4. AI features

Two features use AI, and both run only after you have given explicit consent:

Meal scan

The meal photo you take or select is sent to Google's Gemini model to estimate calories and nutrients. Meal photos are never stored — the photo is held in memory for the duration of the scan, and the temporary copy iOS writes into the app's own folder is deleted by the app as soon as it has been read. It is never uploaded to our storage, and no meal photo is kept in our database or in cloud storage. The only thing retained is the result of the analysis (dish name, calories and macros).

Dodo assistant

The messages you write to the assistant are sent to Gemini, together with the most recent turns of the conversation (up to the last 12) and a short context block so the assistant can answer accurately. That context block contains the following, and nothing beyond it:

• Your first name and your age — your date of birth itself is not sent
• Your height and current weight
• Your target weight — left out if your BMI is below 18.5
• The health conditions you entered in your profile
• Today's calorie total and your daily calorie target
• Today's macros: protein, carbohydrates, fat, fibre and sugar
• Your current sugar-free streak, in days
• Your latest blood glucose reading — only if you track diabetes or insulin resistance, and only while the reading is less than 48 hours old
• Your weight change over the last 7 days

Apple Health data is never sent to the assistant. The water, steps, sleep and heart rate figures read from Apple Health are deliberately kept out of the assistant's context; they are used only to draw your dashboard on the device. Also never sent: your email address, gender, activity level, diet preference, profile picture, account identifier, and your medication, menstrual cycle, notification and subscription records. A photo cannot be sent to the assistant at all — our server rejects it.

Requests to Gemini do not go directly from your device: they are relayed through our own server, which constrains the type and size of content that can be sent. You can withdraw AI consent at any time from the Privacy screen inside the app; once withdrawn, these features stop working.

5. Where your data is stored

Your account details and the records you enter in the app (glucose, weight, water, medication, meals, cycle, sugar-quit logs and so on) are stored on Supabase infrastructure over an encrypted connection. Every row is protected at the database level so that it is reachable only by the account that created it; no other user can see your data.

Your profile picture is kept in a separate storage area. Only you can upload, replace or delete it — but the file itself is served from a public address, so anyone who knows that exact link can open the image. Please treat your profile picture as a publicly visible photo.

Not everything lives on the server. Some data is also kept locally on your device: your preferences (language, reminder settings, the consents you gave), a cached copy of your subscription status and AI usage counters, and health-related data — today's water total, mirrored for Apple Health, and any medication dose you confirmed while offline that is still waiting to be sent. A calorie or sugar-quit card you tap share on is also written into the device's temporary folder, as an image carrying those figures, so the share sheet can read it; the app deletes that file as soon as the share sheet closes — including when you cancel the share. Everything in this paragraph goes away when you delete the app from your device.

Your data is retained for as long as your account exists. When you delete your account, all of your records on our servers are permanently deleted (see Your rights).

Appointments are not part of that. A booking is created on Cal.com, so the appointment record — your name, your email address and whatever else you typed into the booking form — is held by Cal Inc. and kept for as long as their own policy provides. It never enters our database, and deleting your account does not remove it.

6. Who we share data with

Your data is shared with no one beyond these parties. Where disclosure is legally required (for example a court order), only the minimum necessary data is provided.

7. Your rights

Under GDPR and Turkish data protection law (KVKK) you have the right to:

• Access your data and request a copy
• Have inaccurate or incomplete data corrected
• Request erasure of your data
• Object to processing and withdraw any consent you gave
• Receive your data in a portable format

To exercise these rights, write to info@dytdogukanesengul.com. We respond to requests within 30 days at the latest.

The consents you gave inside the app (AI usage, data-protection notice, and refund data sharing) can each be withdrawn at any time from Profile › Privacy.

8. Deleting your account

You can permanently delete your account and all of your data. Inside the app: Profile › Delete account. This cannot be undone and removes all of your data, including glucose, weight, water, medication, meal and cycle records. Three things it does not cover — your subscription with Apple, what the app wrote to Apple Health, and the copies that sit outside our database (what remains on your device, and your Cal.com booking) — are explained on the deletion page.

If you have removed the app from your device, or cannot sign in, you can submit a deletion request on the web: Account deletion request page.

9. Children's privacy

Dodo Nutriva is not intended for users under 15 and we do not knowingly collect data from children. If we discover that a child's data has reached us, we delete it. Please contact us if you are aware of such a case.

10. Security

Your data travels between your device and our servers over an encrypted connection (TLS) and is stored encrypted at rest. Database access is restricted at the row level: a query made by one account can only return that account's own rows. Requests to the AI service are relayed through our server, which means no secret key is ever embedded in the app.

11. Changes to this policy

When we update this policy we change the "Last updated" date on this page. If a change materially affects the data we collect or how we use it, we will also notify you inside the app.

12. Contact

For any privacy question, request or complaint:
info@dytdogukanesengul.com