App's Privacy Policy

Latest update on 20th December 2025



This Privacy Policy explains how SnackurAI (“App”, “we”, “us”, “our”) collects, uses, stores, and protects your personal data when you use our mobile application. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable laws.

⸻

1. Data Controller

SnackurAI is operated by a sole proprietorship based in Croatia. We are the data controller for all processing activities described in this Policy.

Contact Email:
📧 app@snackurai.com

⸻

2. What Data We Collect

We collect and process the following types of data:

a) Account Data
   •    Name (if provided)
   •    Email address
   •    Authentication identifiers (via Firebase)

b) Meal Content and Results
   •    Meal photos you upload
   •    AI-generated analysis results linked to your account (e.g., calories/macros and educational insights)
   •    Timestamps and meal history/journal entries

c) Technical & Usage Data
   •    Device information (model, OS, language)
   •    App usage events and interactions (for performance and reliability)

d) Subscription Data
   •    Subscription/entitlement status and plan type (tracked via RevenueCat)
   •    We do not process or store payment card details

e) Feedback
   •    Feedback messages you submit (may be linked to your user ID)

⸻

3. Health-Related Data and Consent

We do not request health metrics such as height, weight, sex, step count, or exercise logs in SnackurAI v2.

However, meal photos and AI-generated insights may relate to wellbeing. We process your meal photos and generate results only to provide the App’s features, and we rely on your consent and/or the performance of our contract with you (providing the Service you requested). You can withdraw your consent by deleting your account.

⸻

4. How We Collect Your Data

We collect data:
•    Directly from you when you create an account, input personal data, or upload photos
•    Through third-party tools including:
•    Google Firebase & Firestore (data storage, auth)
•    Google Cloud & Vertex AI (image processing)
•    RevenueCat (subscriptions)
•    Meta Pixel (advertising tracking, only if you consent)

⸻

5. Advertising and Tracking Technologies

We use marketing tools such as Meta Pixel to help us optimize advertising campaigns. These tools may collect:
•    Device ID
•    App events (installs, opens, etc.)
•    IP address or region (if available)

If we use marketing or advertising tracking tools (such as Meta Pixel), tracking is activated only with your prior consent (where required). You can withdraw consent at any time. If SnackurAI does not use such tools in your version/region, this section does not apply.
You may withdraw this consent at any time by emailing us at app@snackurai.com. Upon request, we will delete your account and all associated data from our systems in accordance with Section 8 of this policy.

⸻

6. AI Processing Disclosure

We use Google Vertex AI to analyze meal images and provide nutrition estimates. This is an automated process. No solely automated decision-making with legal or significant effects is performed.

⸻

7. International Data Transfers

Your personal data is primarily stored in the EU via Firebase. However, some third-party processors (e.g. Meta, Google) may transfer or process data outside the EU/EEA, including in the United States.

All such transfers are protected using:
•    Standard Contractual Clauses (SCCs) approved by the European Commission
•    Additional safeguards where necessary

⸻

8. Data Retention

We retain your data:
   •    for as long as your account is active, or
   •    as needed for legal or operational purposes.

When you delete your account, we delete or anonymize personal data within a reasonable period, unless retention is required by law. Backups may persist briefly.


⸻

9. Security Measures

We apply technical and organizational safeguards to protect your personal data, including:
•    Secure storage via encrypted databases
•    HTTPS for all transmissions
•    Role-based access controls (RBAC) for internal systems

Despite these efforts, no system is 100% secure. You use the App at your own risk.

⸻

10. Your Rights Under GDPR

You have the right to:
   •    access your personal data,
   •    correct inaccurate data,
   •    request deletion,
   •    restrict or object to certain processing,
   •    data portability,
   •    withdraw consent at any time,
   •    lodge a complaint with a supervisory authority 

To exercise your rights:
📧 app@snackurai.com

⸻

11. Children’s Privacy

SnackurAI is not intended for users under 16 years of age. We do not knowingly collect data from children. If we learn that a child has used the App without appropriate permission, we will delete the data promptly.

⸻

12. Changes to This Policy

We may revise this Privacy Policy over time. The most current version is always accessible in the App.

⸻

13. Contact Us

If you have questions or would like to exercise your data rights, contact us at:
📧 app@snackurai.com