Privacy Policy
Who we are
KetoSpot is operated by Oleg Sharshakov (SHYBER, Belgrade, Serbia). For questions: [email protected].
Account-free by design
KetoSpot does not require an account. You can use the app without signing in or giving us your name or email. Your plan and scan history stay on your device.
What we collect
- Anonymous device identifiers — an anonymous app install ID, OS/version, and app version. Used to attribute crashes and bug reports to the right build and to enforce your monthly scan quota.
- Menu photos & free-text dish descriptions — sent to our AI provider (OpenAI) to identify keto-friendly items. Images are not stored after the verdict is returned.
- Scan history — stored locally on your device. It is not tied to a personal account.
- Diagnostic events — anonymous analytics (Mixpanel) and crash reports (Sentry) about which screens are opened and which features are used. Does not include menu content, your photos, or your name.
- Subscription state — managed by Apple App Store / Google Play and validated via RevenueCat. We see only the subscription tier, not your payment info.
What we do not collect
- Payment cards or bank details (handled by Apple/Google).
- Health, biometric, or location data.
- Address book, calendar, contacts, or files outside the app.
- Your real name unless you choose to put it in a feedback message.
Why we collect it
To run the core feature (menu → keto verdict), to enforce the free-tier scan quota, to fix bugs you hit, and to understand which features actually help. No data is sold or shared with advertisers.
Where data is stored
- Local device (your scan history and plan).
- Supabase EU region (anonymous scan processing and quota state, keyed to the install ID).
- OpenAI / Mixpanel / Sentry / RevenueCat — each only the strict subset listed above.
Retention
Diagnostic events: 90 days. Scan history: kept on your device until you delete it or use "Delete my data" in Settings, which also clears the anonymous quota state on our backend.
Your rights (GDPR & CCPA)
You can delete all local data at any time from Settings → "Delete my data". For access, correction, or export requests, email [email protected] with the subject "Data request". We respond within 30 days.
Children
KetoSpot is not intended for users under 16.
Changes
If we materially change this Policy, users get an in-app notice 14 days before it takes effect.