Privacy Policy
Eatsight is a meal-tracking app made by KatiaLabs ("we", "us"). This policy explains what personal data we collect when you use the Eatsight app and this website, why we collect it, who we share it with, how long we keep it, and the rights you have. If anything is unclear, write to info@katialabs.com.
1. Who is responsible
KatiaLabs, established in Türkiye, is the data controller (veri sorumlusu) for your personal data under the Turkish Law on the Protection of Personal Data No. 6698 ("KVKK") and, for users in the European Economic Area, the United Kingdom or Switzerland, under the General Data Protection Regulation ("GDPR") and equivalent laws. You can reach us at info@katialabs.com.
2. What we collect
| Category | What it includes |
|---|---|
| Account | An anonymous account identifier created when you first open the app. If you create an account: your email address, a password (stored only in hashed form by our authentication provider) and your name. If you sign in with Google or Apple: the email address and basic profile details they share with us. |
| Profile and goals | What you tell us during setup and in your profile: name, sex, age, height, current and goal weight, goal date, activity level, diet type, allergies, number and times of meals, your reasons for using Eatsight, how you feel about your body, and, if you choose to answer, whether you have a history of disordered eating. We calculate daily calorie and nutrient targets from these. |
| What you log | Meal photos, written or spoken meal descriptions, the resulting analysis (calories, macronutrients, micronutrients, glycemic and omega estimates), water, steps, activity and weight entries, how you felt about a meal, recipes and notes. |
| Coach conversations | Your messages to Sage, Sage's replies, and the facts you ask Sage to remember about you. |
| Clubs | Clubs you create or join, club chat messages, challenge participation, and the meals and recipes shared in a club. Other members of that club can see them. |
| Purchases | Your subscription status, the plan, and purchase, renewal and expiry dates with store transaction identifiers. Payment itself is handled by Apple or Google; we never see your card details. |
| Device and usage | Device model, operating system and app version, language, time zone, notification settings, and technical logs needed to run and secure the service. |
Voice input: when you describe a meal by voice, your phone's speech recognition service (provided by Google on Android and by Apple on iOS) turns your speech into text. We receive only the text, never the audio.
Health data: some of this information, such as your weight, body measurements, diet, allergies and any eating-disorder history, is health data, which the law treats as a special category of personal data. We process it only to provide Eatsight to you, on the basis of your explicit consent. You give that consent when you enter the information, and you can withdraw it at any time by deleting the information or your account.
3. Why we use it
| Purpose | Legal basis |
|---|---|
| Create and run your account, keep your diary, analyze meals, calculate targets, answer coach questions, and run clubs and challenges | Performing our contract with you (KVKK art. 5(2)(c); GDPR art. 6(1)(b)). For health data, your explicit consent (KVKK art. 6; GDPR art. 9(2)(a)). |
| Manage subscriptions, free trials and restored purchases | Performing our contract with you. |
| Send reminders and notifications you turn on | Your consent, which you can withdraw in the app or your phone's settings. |
| Answer support requests | Performing our contract with you, and our legitimate interest in helping you. |
| Keep the service secure, prevent abuse and fix errors | Our legitimate interests (KVKK art. 5(2)(f); GDPR art. 6(1)(f)). |
| Keep purchase and accounting records | Legal obligations (KVKK art. 5(2)(ç); GDPR art. 6(1)(c)). |
We do not sell your personal data, share it for advertising, or use it to build advertising profiles.
4. How AI is used
Eatsight uses Claude, an AI model from Anthropic, to estimate the contents and nutrients of your meals, split a written or spoken day into meals, and write Sage's replies. To do this, we send Anthropic the relevant meal photo or text, your message, and the profile details needed for a useful answer, such as your goals, diet type and allergies. Anthropic processes this data on our behalf. Under its commercial terms, it does not use it to train its models.
The results are automated estimates. They are not used to make decisions with legal or similarly significant effects on you, and they can be wrong. Please read the disclaimer.
5. Who we share it with
We use the following service providers, who process data only on our instructions:
- Supabase: database, authentication, file storage for photos, and the server functions that run the app. Data is hosted on Amazon Web Services in the United States (us-east-1).
- Anthropic: AI analysis and coach replies, as described above (United States).
- RevenueCat: managing subscriptions and checking store purchases (United States). It receives your account identifier and purchase details, not your diary.
- Apple and Google: sign in with Apple or Google, in-app payments, speech-to-text on your device, and, if you enable them, push notifications (Apple Push Notification service and Firebase Cloud Messaging).
We also share data:
- with other members of a club, for the meals, recipes, messages and challenge activity you share there;
- with authorities, when the law requires it or to protect the rights and safety of users and others;
- with a successor, if Eatsight is merged, acquired or sold. This policy keeps applying to your data in that case.
6. Transfers outside Türkiye and the EEA
Our service providers store and process data in the United States. We transfer personal data abroad only with the safeguards the law requires, such as standard contracts approved under KVKK article 9 and the European Commission's standard contractual clauses, or another lawful transfer mechanism. Contact us if you want more information about these safeguards.
7. How long we keep it
- While you use Eatsight: we keep your data as long as your account exists, so your diary and history stay available to you.
- When you delete your account: it is scheduled for deletion and you are signed out. For 30 days you can sign in again and restore it. After that, your account and everything linked to it are permanently deleted: profile, diary, photos, coach conversations and club content.
- Records the law requires: purchase and accounting records, which mostly sit with Apple, Google and RevenueCat, are kept for as long as tax and commercial law require.
- Backups: deleted data can remain in encrypted backups until they are overwritten on their normal schedule.
8. Your rights
Depending on where you live, you have the right to:
- know whether we process your data, and get information about it and a copy of it;
- learn the purposes of processing and whether data is used accordingly;
- know the third parties, in Türkiye or abroad, that data is transferred to;
- have inaccurate or incomplete data corrected;
- have your data deleted, and have the parties it was shared with told about corrections or deletions;
- receive your data in a portable format (GDPR);
- object to processing based on our legitimate interests, and restrict processing (GDPR);
- object to an outcome that is against you and comes solely from automated analysis (KVKK art. 11);
- withdraw consent at any time, without affecting processing done before;
- claim compensation for damage caused by unlawful processing.
You can see and edit most of your data in the app, delete individual meals, and delete your account from the menu. For anything else, write to info@katialabs.com from the email linked to your account, or include your account details. We will answer within 30 days. You can also complain to the Turkish Personal Data Protection Authority (kvkk.gov.tr) or, in the EEA or UK, to your local data protection authority.
9. Age limit
Eatsight is for people aged 16 and over. We don't knowingly collect data from anyone younger. If you think a child under 16 has given us personal data, contact us and we will delete it.
10. Security
Data is encrypted in transit. Access to each user's data is restricted at the database level, so other users can only see what you share with them, for example in a club. Passwords are stored only as hashes. No system is perfectly secure, but we work to protect your data and will tell you and the authorities about a breach when the law requires it.
11. Changes to this policy
We may update this policy as Eatsight changes. When we do, we update the date at the top. If a change is significant, we will also tell you in the app before it takes effect.
12. Contact
KatiaLabs · info@katialabs.com