Privacy Policy

Data we collect

Account: your email address, for authentication (provider: Stack Auth).

Profile: your display name, sex, date of birth, height and activity level.

Health and nutrition: your meal and food logs, food groups, water intake, body measurements (weight, waist, neck, hip) and values calculated from them such as BMI, BMR and TDEE. Your weight comes from what you type or, if you connect it, from Apple Health or Health Connect (details below).

About Sini: the short notes Sini takes for you, the cards it prepares, your weekly notes, what it notices in your logs and the report shares you create (details below).

Ramadan: if you turn on Ramadan mode, your fasting preference, your city, your reminder preferences, the health conditions you mark during setup and the days you say "not fasting today" (details below).

Usage: your logging dates and in-app activity such as your afiyet rhythm, plus usage events such as which screens you opened, how long you stayed and how long the app took to launch. We keep these to fix the product, not for advertising or profiling: they answer the question "is this where people get stuck". Your meal list and what you write in conversations never go into an event. The one exception is food search: the word you type into the search (up to 40 characters of it) and the name of the food you pick from the list, including the name of a food you added to Menüm yourself, go into the event. If you type a sentence, only its length goes, not the sentence. We look at these to see which foods cannot be found and to fix our food list, and delete them after 90 days.

Notifications: if you allow them, your device's anonymous push token so we can send reminders and announcements. You can turn notifications off in your device settings at any time.

Social: your table memberships, friendships, greetings, weekly table records, invite links, who invited you, your blocks, your reports and the consents you give for social features (details below under "Tables, the weekly table and friends").

Why we process data

To make the app work: storing your logs, managing family profiles and showing you balanced eating summaries.

So that Sini can talk with you by looking at your logs and prepare notes, suggestions and reports for you. The permission for this is described below under "Sini and your data"; you can withdraw it at any time.

We also keep the photos you send to Afi to check and improve how it recognizes dishes.

We use your waist, neck and hip measurements (tape) to estimate your body fat and to set your daily protein range.

We do not show ads, we do not sell your data, we do not share it with third parties and we do not track you.

Health data (Apple Health and Health Connect)

You can connect afiet to Apple Health on iPhone and to Health Connect on Android. Connecting is optional. If you do not connect or do not grant permission, afiet never accesses your data in Health.

What we read: once you connect and grant permission, only your weight is read. On the first connection the last 30 days of weight come in, then new weights each time you open the app. If your profile has no height, your height is read once. Steps, heart rate, sleep and any other health data are not read.

What we write: if you allow it, the weight you type in afiet is also saved to Health. If you correct or delete a weight in afiet, its copy in Health is corrected or deleted too. You can turn this off with the "Write my typed weight to Health" switch on the health connection screen in the app.

What we use it for: weight from Health is added to your weight history just like a weight you type. Your daily energy and protein targets and your path to your goal are calculated from that history. Weights from Health are left out when "The note we keep about you" described below is written. When you ask Sini how your weight is going, though, Sini looks at your weight history: if a day's weight came from Health, that weight goes too, marked as coming from Health, to Microsoft Azure's AI service in the European region to produce the reply (details under "Assistant conversations").

Where it is kept: weights from Health are stored on our server with your account, like your other measurements.

We do not sell your health data, we do not use it for advertising or marketing and we do not share it with third parties. The AI service processes it only on our behalf, to produce the reply.

You can disconnect at any time with "Disconnect" on the health connection screen in the app. Disconnecting stops reading and writing; weights that already came in stay in your history. You can also revoke permissions in the Health app settings on iPhone or in Health Connect settings on Android.

Deleting your account deletes the weights that came from Health along with your other measurements. Weights afiet wrote to Health stay in Health on your phone; you can delete them from the Health app or Health Connect.

Assistant conversations

What you write to Afi, to Sini (the nutrition conversation) and to Demi (the support conversation) is stored on our server together with your account. The same goes for your getting-to-know-you chat with Sini. The purpose is that a conversation carries across devices and the assistants come to know you over time.

What we store is what you wrote and what the assistant wrote. We do not derive scores or labels from your conversations. During a conversation the assistants may take short notes that will help in later conversations; these go into "The note we keep about you" below, which explains how you can see and delete them.

To produce a reply, your message, the earlier messages of the conversation and a short summary of "The note we keep about you" and your recent logs are forwarded to Microsoft Azure's AI service in the European region; they are not used for model training there.

Azure keeps every reply the three assistants produce, together with the request that went to it, for 30 days. That copy does not follow our deletions: when you delete a conversation or your account, the copy at Azure is not deleted; Azure deletes it when the 30 days are up. Azure may also keep content it finds inappropriate separately, under its own rules, to monitor abuse.

Conversations are never used to train AI models, never used for advertising and never shared with third parties.

What is discussed in the support conversation may relate to mental health, which data protection law treats as a special category. The support conversation is therefore stored only with your explicit consent; you can withdraw that consent at any time and delete your conversations.

Deleting a conversation removes it from our server and from the phone you deleted it on. Deleting your account removes your conversations from our server too.

Conversations are deleted automatically 24 months after their last message: a conversation with no new message for 24 months is removed from our server. Lines that went from a conversation into "The note we keep about you" are not removed with it; the note stays as described below.

Your conversations are also kept on your phone, tied to your account. Signing out does not delete that copy; someone signing in to another account on that phone does not see it. Deleting your account from the app also deletes that copy from that phone.

Copies on other phones, and the copy on your phone when you have your account deleted by e-mail, stay until you delete the conversation in the app or remove the app.

Sini and your data

Sini is afiet's nutrition companion. While talking with you and while preparing something for you, Sini looks at your logs: your meal logs, your energy and nutrient targets, your weight and tape measurements, your water logs, your saved plates and what you ate often in the last 30 days, your quests and your league standing. When it looks at something during a conversation, it shows you.

Permission: the permission for Sini to look at your logs is part of the consent text you accept when you create your account; it is not asked again on a separate screen. If you opened your account before this update, the permission starts on. You can turn it off at any time in the app under Profile > Account settings, with the "Let Sini use my data" row.

If you turn it off, Sini does not look at your logs, the chat with Sini pauses until you turn the permission back on, and none of the preparations below are made. Your earlier logs, notes and conversations are not deleted because of this; you can delete them separately.

Prepared in the background: the weekly note, the midweek check-in, the "What I noticed this month" section about something that repeats in your logs, the end-of-month report, Sini's line on the widget and the Ramadan plate. All of them are prepared only while the permission is on.

Sini never logs anything on your behalf. When it suggests a meal, a correction, a reminder, weight and water or a goal direction, it shows a card; nothing is written until you tap the button on the card, and for a short time you can take it back with Undo.

The logs needed for replies and preparations are forwarded to Microsoft Azure's AI service in the European region; they are not used for model training there and are kept for 30 days as described under "Assistant conversations". When Sini looks at your weight history, weights from Health go too. We keep a technical record of which tool Sini used and when, but the data it read never goes into that record.

Sini's extra rules for people under 18 are under "Children" below.

The note we keep about you

Starting from your logs and your conversations, afiet keeps a short note about you: what you came for, how you eat, where your rhythm holds and where it slips, the trend in your body, who you eat with and topics left open. This note is written by AI.

The note does not hold your meal list, your measurements or your weight; those stay in their own tables. What is kept is the interpretation, such as "steady on weekdays, slips at the weekend".

During a conversation Sini may add a short line to this note or remove one. When it does, it shows a "Noted" or "Removed from my notes" line in the conversation; you can take it back right away with Undo, and you can also ask Sini to delete a note. The answer you choose in the "What I noticed this month" section may be written to this note too; "I don't know" is not. Afi and Demi may also take short notes from a conversation.

It exists so the assistants do not have to get to know you from scratch every time; Afi and the specialist assistants read it while talking to you.

Our team can also read the note and write one of its sections by hand, so that whoever answers a support request understands your situation. Every version is kept, so a wrong interpretation can be rolled back.

Deleting your account deletes this note too.

Adding by voice, fridge photos and recipes

Add by voice: what you say is turned into text by your phone's speech recognition; for this your phone may use Apple's or Google's speech recognition service. We do not keep the recording and no audio reaches our server. The sentence, once it is text, is forwarded to Microsoft Azure's AI service in the European region to work out the plate.

Dinner from your fridge: the photo of your fridge or counter is forwarded to the same AI service to read the ingredients. The photo is deleted once the ingredients are read; unlike the food photos you send to Afi, it is not kept.

Add your recipe: the photo of your recipe, the text you paste or the link you give is forwarded to the same AI service to read the recipe. If you give a link, afiet's server opens the page; nothing about your account goes to that site. The recipe photo does not go into Afi's photo archive.

The recipe that is read (its name, its ingredients, how many portions it makes and the value of one portion) is kept in My Menu as your own food. It goes when you delete the recipe; meals you already logged stay as they are.

Widgets and Live Activity

Home screen and lock screen widgets take what they show from the afiet app on your phone; the widget is never given your account's sign-in key. Information such as your remaining energy, your water and your rhythm stays on your phone. The view you choose for the widget is also kept only on your phone.

With afiet+, a short line from Sini also appears on the widget. This line is prepared on our server, and only while Sini's permission is on.

Widgets can also appear on the lock screen. Calories and weight are hidden on the lock screen while your iPhone is locked. If you are under 18, the widget shows food groups instead of calories.

The "One glass" button on the widget keeps your water on the phone first; it is added to your account when you open the app. Nothing else is written from the widget without your confirmation.

Live Activity: in Ramadan mode, the iftar countdown starts on the lock screen 8 hours before iftar; before that only the iftar time is shown. The countdown is calculated from your city's times and closes by itself shortly after iftar.

Sini's notifications

Sini sends at most two notifications a week, three with afiet+; at most two for people under 18. The weekly note, the midweek check-in, plan reminders you set with Sini and the end-of-month report count toward this limit. Reminders you set yourself do not count.

You can turn each kind off separately in the SİNİ group of the Notifications settings in the app. Sini's notifications are prepared only while Sini's permission is on.

Notifications reach your phone through Expo's notification service and Apple's or Google's notification service; the text of the notification passes through these services.

Shared report

With afiet+, you can show the report prepared at the end of each month to your own dietitian, doctor or trainer through a link. Only you create the link; we never share your report with anyone.

You choose what is visible: the summary is always there; meal details, weight, tape measurements and Sini's notes are turned on and off one by one. Your conversations are never shared under any circumstances.

The information you choose counts as health data. That is why every share asks for its own consent, and no link is created until the consent line is ticked. Which version of the consent text you accepted is kept with the share.

The report is frozen as it was when you created the link; if you change your logs later, the link still shows that version. The link closes by itself at the end of the period you chose (7, 14 or 30 days); you can close it earlier at any time from My shares. A closed link shows no content.

Anyone who has the link can open the report, so give it only to the person you want to show. We count how many times and when the link was last opened and show you; we do not keep the IP address or browser details of whoever opened it. The report page is closed to search engines.

When you delete your account, all your links close immediately and the content of your shared reports is deleted.

If you are under 18, weight, tape measurements, energy and protein are not included in a share, and you need to confirm that you are sharing together with your parent or guardian.

Ramadan mode

Ramadan mode is optional. If you turn it on, we keep the following on our server with your account: your fasting preference (yes, some days, no), your city, your reminder preferences, the health conditions you mark during setup, and the days you say "not fasting today" with the reason you chose.

Fasting information can reveal your religious belief and health markers can reveal your health; data protection law treats both as special categories. We process them only for Ramadan mode to work: sending sahur, iftar and night water reminders, cancelling that day's iftar and water reminders on a day you are not fasting, and letting Sini talk with Ramadan in mind.

Sahur, iftar and night water reminders are sent from our server as notifications and are turned off one by one in the RAMAZAN group of the Notifications settings.

Sini receives which day of Ramadan it is, the imsak and iftar times and whether you are fasting that day; when you say "not fasting today", the reason you chose also goes into Sini's context and nowhere else. Your health markers are not sent to Sini.

You can turn Ramadan mode off at any time; turning it off stops the reminders. Deleting your account deletes this information too.

Subscription and payment

You buy the afiet+ subscription through the App Store or Google Play. Payment goes through your store account; your card details, billing address and payment information never reach us and are never stored by us.

We use a service called RevenueCat to track the state of your subscription. What goes to it is the store purchase record and your afiet account id; your name, your email and your nutrition data do not.

We also keep the state of your subscription (which product, which store, valid until when) on our own server, because that is what decides which features the app unlocks.

Tables, the weekly table and friends

A sofra is the group of friends you sit with; you can be at up to three. Your tablemates see your name, your emoji, whether you logged that day, how many days you logged this week and whether you reached your water goal. You can say "afiyet olsun" to each other once a day.

The weekly table: every week you sit at a table of about six people, and you may not know most of them. The table shows your name, your emoji, your spice step and how many days you logged this week; no ranking is shown in the bottom half of the table. If you are 18 or over you are seated automatically; if you would rather not be, you can choose to sit on your own in the table settings.

Your profile: your friends, tablemates and the people at your weekly table can open your profile. It shows your name, your emoji, your level, your title, your spice step, a few badges you earned and the history you share.

What you ate, your calories, your weight, your measurements, your sex, your height and your daily energy balance do NOT go to a sofra, the weekly table or your profile.

Invite links: when you invite a friend with a link, we record who invited whom, to seat them at your table, make you friends and grant the invite reward. On Android the link is matched with Google Play's install information, on iPhone with the code you paste; the app never looks at your clipboard on its own. For the invite reward we check the device's installation ID so nobody invites themselves from the same device; the reward is granted through RevenueCat.

If you arrived without a link, you can search for the person who invited you by name and send a request. That search only shows the name and emoji of people aged 18 or over who shared an invite link in the last 14 days.

Blocking and reporting: when you block someone, you no longer see each other at a sofra, at the weekly table or on profiles. When you report someone, we keep the text you wrote so we can review it; the person you reported is not told.

Frequent logging guard: if we see an unusual number of meals logged on several days in a row, we pause weekly table notifications for a while. For this we only look at how many meals you logged.

Sending Afi a photo in the app

You can ask Afi about a dish you do not recognize by sending a photo. So that we can recognize the dish, the photo is forwarded through afiet's own server to Microsoft Azure's AI service in the European region; it is not used for model training there.

When you ask Afi with a photo, Azure opens a conversation record for that exchange; it holds what you write, Afi's replies and, with the first message, a summary of "The note we keep about you" and your recent logs. The photo file is deleted from Azure once the reply arrives, but we do not delete these conversation records; how long they stay at Azure depends on Azure's own retention. Deleting a conversation or your account does not reach that record.

We keep the photo you send together with the reply Afi gave to it. The purpose is to check and improve how well Afi recognizes food: finding the dishes it got wrong and correcting our food list. Photos are kept in our storage at Cloudflare in the European Union region for as long as your account exists, and only the afiet team can access them.

If you are under 18, the photos you send are not kept in this archive: Afi answers your photo and the photo is not stored. Photos sent before this rule stay until your account is deleted.

When you delete your account, your photos are deleted from our storage too.

Your photos are never used for advertising and never shared with third parties.

Crash and error reports

If the app closes unexpectedly, a technical record (device model, operating system version, the screen where the error happened) is collected through Sentry so we can find and fix the problem.

These records contain no meal or health data; they are not used for advertising or profiling.

Website analytics (afiet.co)

To understand visits to afiet.co we keep first-party, anonymous and aggregate statistics on our own server, without external tools (Google Analytics etc.): which pages were viewed, where visitors came from (search/social/link), approximate country, device and browser type.

For this, a random cookie that contains no identity (afiet_vid / afiet_sid) is written to your browser; it exists only to estimate unique visitors. We do not store your IP address, share it with third parties, use it for ad targeting or profiling, or track you across sites.

Ad measurement: if you arrived at afiet.co from an ad, the link carries the ad network's click identifier (gclid for Google). To see which ad worked we store that identifier, whether you clicked a store link or signed up for the newsletter, and when; we then upload only "this click converted to a store link at this time" to the ad network, by hand. Your email address, IP address or the pages you visited are not sent, and no ad network code or cookie runs on the site. The link to the Play store carries the same identifier and the page you came from so the app knows which channel it was installed from. This goes through the same consent gate: if you choose "Decline", the identifier is neither stored nor added to the link.

In the help center (afiet.co/destek) we count two more things: your answer to "Was this article helpful?" (only yes or no) and search queries that returned no results. The second exists to show us which topics we have not written yet; neither is linked to your name or account. Please do not type personal or health information into the search box.

We also count, with or without your consent, how many times each page is opened per day: only the page address, the day and the kind of place you came from (search, social media, AI, another site, direct or a campaign link) are added to a total. This counter writes no cookie to your browser, keeps no identifier of you or your device and does not store your IP address; nobody can tell from it who opened which page.

Cookie-based analytics (the visitor cookie, ad measurement and the two help center counts) runs only with your explicit consent: you can choose "Decline" in the notice shown on your first visit, turn on your browser's Do Not Track setting, or delete your cookies to stop being counted. With Do Not Track on, you are not added to the page counter either.

Asking Afi a question on afiet.co

A question you type into the "Ask Afi" section of the site is sent to afiet's own server so the answer can be generated. We do not ask for your name, email or an account; the chat uses a random session id created by the server that lives only while your tab is open and is not stored on your device.

We keep the questions and Afi's answers to improve Afi and to see which topics we should explain better. We do not store your IP address; to limit abuse we keep only an irreversibly hashed form of it for a short time. Questions are never used for advertising and never shared with third parties.

There is no need to write personal health information; please do not. Afi gives general information, not medical advice or personalized nutrition plans.

To generate the answer, your question is forwarded to Microsoft Azure's AI service in the European region. It is not used for model training there.

To protect this section from automated abuse we use Cloudflare Turnstile. Turnstile runs silently, shows nothing on screen and only steps in after many rapid questions; it never runs for a visitor who just reads the page. During this check Cloudflare sees the network information of the request. Details are in Cloudflare's Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/

Where it is stored

Your data is stored on a server we manage, located in Türkiye; the database runs on the same server. Transfer between your device and the server is encrypted with HTTPS.

We take a daily backup of the database so the data can be restored if the server is lost entirely. Backups are kept in Cloudflare's object storage in the European region and are deleted after 30 days.

Photos you send to Afi in the app are kept in our object storage at Cloudflare, in the European Union region; photos from people under 18 are not kept.

Authentication and sign-in emails are provided by Stack Auth.

Newsletter and notification emails are sent through Resend.

Transfers abroad

Your data is stored on our server in Türkiye. For some jobs we work with service providers located abroad; under Turkish data protection law this counts as transferring personal data abroad. Each of them receives only what that job needs.

Microsoft Azure (European region): replies from Afi, Sini and Demi; reading food, fridge and recipe photos; the sentence turned into text when adding by voice; and the logs needed for the weekly note, "What I noticed this month", the end-of-month report, Sini's widget line and the Ramadan plate. Azure keeps these for 30 days; details under "Assistant conversations".

Cloudflare (European Union region): database backups, the photos you send to Afi, and the abuse check on afiet.co.

Stack Auth: account and sign-in. Resend: emails. RevenueCat: subscription state. Sentry: crash and error reports. Expo, Apple and Google: notifications.

Deleting your data

You can delete your account from the app: menu → My account settings → "Delete account and all data". This permanently removes your meal, measurement and profile records.

At the same time Sini's notes, your recipes and your Ramadan information are deleted; your report links close immediately and their content is deleted.

The copy at Azure of the messages sent to the assistants is not deleted with your account. Your conversations on the phone you delete your account from are deleted; copies on other phones stay. Both are described under "Assistant conversations".

The photos you sent to Afi are deleted from our storage too.

If you cannot access the app, see the "Delete your account" page for the steps or write to destek@afiet.co to request deletion; we process requests within 30 days at the latest.

When you delete your account, your table memberships, friendships, weekly table records, invite links, blocks and the consents you gave are deleted too. The text of a report you made, or one made about you, stays for review, but its link to your account is removed.

Children

afiet is for users aged 13 and over. We do not knowingly collect data from anyone under 13; if we notice such an account we close it and delete its data, including the photos it sent to Afi.

If you are under 18, we ask you to use the app with your parent or guardian's knowledge. On Sini's screens and in its tools, calorie and weight numbers are not mentioned to people under 18: Sini does not look at weight history, does not suggest a goal direction and does not look for calorie-based patterns; the widget shows food groups instead of calories.

The end-of-month report notification is not sent to people under 18. To share the report you need to confirm that you are sharing together with your parent or guardian; weight, tape measurements, energy and protein are not included in the share.

afiet+ prices and the purchase button are not shown to people under 18.

Photos that people under 18 send to Afi are not kept in Afi's photo archive.

Sofras, the weekly table, friendships and invites are closed for people under 13. The first time you touch something social, we ask for your birth year if it is not on file, and we store only the year.

People under 18 join a sofra or the weekly table only after reading what will be shown and giving their own consent. They never appear in the invite search, and a stranger cannot find them by friend code.

Changes

We may update this policy from time to time; important changes are announced on this page. The effective date is written above.

Contact

For questions and requests: destek@afiet.co

You can send formal requests about your personal data to kvkk@afiet.co.