DietFlow · EN
Privacy Policy
This policy explains how Mageomni Sp. z o.o. processes data in the DietFlow mobile application and website.
Controller and operator
Mageomni Sp. z o.o., NIP 9462720489, D-U-N-S 849453354, Bluszczowa 6/2, 20-224 Lublin, Poland. For support, email michal@sagan.dev.
Data we process
- Account data: email address, name, and the user identifier supplied by Keycloak.
- User content: imported PDF files, recipes, meal calendars, shopping lists, pantry data, and photos/names of products you report to the Open Food Facts database.
- Technical data: IP address, device and operating-system information, and error logs when needed for security and diagnostics.
Purposes and legal bases
We process data to create and operate accounts, provide DietFlow features, process imported meal plans, keep the service secure, and respond to reports. Depending on the purpose, the legal basis is contract performance, legitimate interest, or a legal obligation.
Service providers and sharing
We use Keycloak for authentication, hosting and storage providers in the European Economic Area, and OpenAI for automated meal-plan structure extraction when that feature is used. If you report a new food product in the app (a barcode not recognised by Open Food Facts) along with a name and optional photos of the packaging or nutrition label, that data may be shared with and published on the public, open Open Food Facts database (Open Food Facts Association, France) under its open licence — once published it becomes public data outside our control; changes or removal require contacting Open Food Facts directly. We do not sell personal data. We disclose data to public authorities only when required by law.
Retention and deletion
We retain data for as long as needed to provide the service, maintain security, and meet legal obligations. When an account is deleted, we remove the account, membership, tokens, and data belonging only to that user. Shared household data remains for other members; when the user is the last member, the household and its data are removed as well.
Your rights
You may request access, correction, deletion, restriction, portability, or object where applicable. You may also complain to the relevant data protection authority. Send requests to the email address below.
Security and local storage
We use HTTPS/TLS and access controls. The app stores session tokens in the device secure store, and some working data may be stored locally to support offline use. Sign-out or account deletion should also be completed on the device.
Cookies
The website uses only cookies and storage needed for operation, security, or preferences where enabled by the deployment.