Privacy Policy

Data controller

The data controller is Bussolari Alessio, based at Via del Prete 123, 47841 Cattolica (RN), Italy. For data protection requests, email hello@bussolarialessio.me.

Personal data we process

• Account data: name, optional surname, email address, preferred language, and measurement unit.
• Authentication and security data: password stored only as a hash, session tokens and digests, IP address, user agent, and temporary password-reset or email-change codes.
• Photos and content: product or label images, profile photo, barcodes, optional notes, and analysis results.
• Health and dietary data, all optional: allergies, intolerances, food preferences, daily net-carb goal, portions, and consumption times.
• App activity: history, generated or saved recipes, shopping list, onboarding journey, insights, and notifications.
• Device and technical data: Firebase notification token, platform, app version, crashes, redacted logs, and performance data.

Purposes and legal bases

• Performance of contract (GDPR Art. 6(1)(b)): create and manage the account; analyze food; provide results, history, recipes, goals, insights, and the shopping list.
• Consent (GDPR Art. 6(1)(a)): enable push notifications and process optional information when consent is required. Consent may be withdrawn without affecting earlier processing.
• Explicit consent (GDPR Art. 9(2)(a)): process voluntarily selected allergies and intolerances to produce personalized warnings. Providing this data is optional and it can be removed from the profile.
• Legitimate interest (GDPR Art. 6(1)(f)): security, abuse prevention, error diagnosis, and reliability improvements using minimized and redacted data.
• Legal obligation (GDPR Art. 6(1)(c)): answer lawful authority requests and meet applicable obligations.

Allergies, intolerances, and dietary data

These data are used only to personalize warnings, suggestions, and progress. They are not used for diagnosis, advertising, or commercial profiling. èKeto is not a medical device and its results do not replace professional advice.

Providers and recipients

We use providers that process only the data needed for their assigned purpose:

• Hetzner Online GmbH: application, database, and infrastructure hosting.
• Amazon Web Services: storage of photos and other files through S3.
• Google Gemini: receives photos, label text, notes, and only the dietary preferences needed for analyses, estimates, alternatives, and recipes.
• Firebase Cloud Messaging (Google): device token and operational data needed to deliver push notifications.
• Resend: email address and transactional email content, such as OTP codes and security messages.
• CloseYourIt: crashes, redacted logs, and technical metrics for security and maintenance; identifiable personal-data sending is disabled.

International transfers

Some providers may process data outside the European Economic Area. In those cases, transfers rely on an adequacy decision, the Data Privacy Framework where applicable, or European Commission Standard Contractual Clauses, with supplementary measures where necessary.

Retention periods

• Account, analyses, recipes, preferences, consumption entries, and shopping list: until account deletion, unless the law requires longer retention.
• Analysis photos: until account deletion when photo saving is enabled; deleted after processing when the user disables this option.
• Login sessions: tokens expire within 30 days at most and are invalidated on logout or account deletion.
• Password-reset and email-change codes: expire after 15 minutes.
• Push tokens: until logout, account deletion, or invalidation by the device or Firebase.
• Logs and diagnostics: for the period configured in security and monitoring systems, and no longer than necessary.
• Backups: according to the technical rotation cycle; used only for disaster recovery and progressively overwritten.

Your rights

You may exercise access, rectification, erasure, restriction, portability, objection, and consent withdrawal under GDPR Articles 7 and 15-22 by emailing hello@bussolarialessio.me. We will reply within the legal deadline. You can delete your account and related data directly in the app. You may also complain to the Italian Data Protection Authority at www.garanteprivacy.it.

Children's data

èKeto is intended for people aged 16 or older. We do not knowingly collect data from children under 16. A parent or guardian may email hello@bussolarialessio.me to request deletion.

Automated analysis and artificial intelligence

Google Gemini processes images and context provided by the user to estimate ingredients, keto score, carbohydrates, warnings, alternatives, and recipes. Results may be wrong and do not produce legal or similarly significant effects. Users can correct an identification, run the analysis again, and contact us for clarification.

Security

We use HTTPS/TLS, irreversible password hashing, expiring and revocable tokens, secure app storage, request throttling, access controls, and redaction of credentials and personal data from logs. No system is risk-free, but we apply safeguards proportionate to the data processed.

No advertising or data sales

We do not sell personal data, display ads, use advertising IDs, or track users for advertising across third-party apps or websites.

Changes to this policy

We may update this policy when the service or applicable law changes. Material changes will be announced in the app, on the website, by email, or by push notification where appropriate.

Contact

Bussolari Alessio — Via del Prete 123, 47841 Cattolica (RN), Italy — hello@bussolarialessio.me.