Privacy Policy
Who we are
KetoSpot is operated by Oleg Sharshakov (SHYBER, Belgrade, Serbia). For questions: feedback@ketospot.app.
What we collect
- Account & device identifiers — anonymous app install ID, OS/version, app version. Used to attribute crashes and bug reports to the right build.
- Menu photos & free-text dish descriptions — sent to our AI provider (OpenAI) to identify keto-friendly items. Images are not stored after the verdict is returned.
- Scan history — stored locally on your device by default. If you sign in, it syncs to our backend (Supabase) keyed to your account.
- Diagnostic events — anonymous analytics (Mixpanel) and crash reports (Sentry) about which screens are opened and which features used. Does not include menu content, your photos, or your name.
- Subscription state — managed by Apple App Store / Google Play and validated via RevenueCat. We see only the subscription tier, not your payment info.
What we do not collect
- Payment cards or bank details (handled by Apple/Google).
- Health, biometric, or location data.
- Address book, calendar, contacts, or files outside the app.
- Your real name unless you choose to put it in a feedback message.
Why we collect it
To run the core feature (menu → keto verdict), to fix bugs you hit, and to understand which features actually help during beta. No data is sold or shared with advertisers.
Where data is stored
- Local device (most scan history).
- Supabase EU region (sync if signed in).
- OpenAI / Mixpanel / Sentry / RevenueCat — each only the strict subset listed above.
Retention
Diagnostic events: 90 days. Synced scan history: until you delete your account. Beta participation logs: 12 months for support, then purged.
Your rights (GDPR & CCPA)
You can request access, correction, deletion, or export of your data. Email feedback@ketospot.app with the subject "Data request" and the email tied to your install. We respond within 30 days.
Children
KetoSpot is not intended for users under 16.
Changes
If we materially change this Policy, beta testers get an in-app notice 14 days before it takes effect.