Privacy Policy

1. Introduction

At Foodcamera, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our food photography service. Our service transforms food images using artificial intelligence and provides optimized outputs for commercial use.

2. Information We Collect

We collect:

• Account information from Google/Apple authentication — your name and email address
• Food images uploaded or captured through the camera, and the photos we generate from them
• Subscription and purchase data — which plan or credit pack you bought, when, in which country, whether you are on a free trial, when the period renews or ends, and your credit balance. We do not receive or store your payment card details; Apple and Google handle payment.
• Usage data — the screens you open and actions you take in the app (for example starting a shoot, viewing the paywall, completing a purchase), together with app version, platform, device language and region, and a device identifier. Your approximate country is derived from your IP address.
• Onboarding answers you give us about your role, what you shoot for and how many photos you need, which we use to tailor the app and to understand who our users are.
• If you delete your account after having claimed a promotional offer, a salted hash of your email address is temporarily stored to manage a cooldown period for such offers.

3. How We Use Your Information

• Process food images using AI models (details on partners in Section 4)
• Provide image storage in EU-based cloud storage
• Secure authentication through Google/Apple SSO
• Showcase app functionality using generated content (as permitted by our Terms of Service)
• Operate subscriptions and credits: to know which plan you are entitled to, to add your monthly credit allowance, to keep your balance correct, and to restore a purchase you have already made
• Understand how the app is used, so we can fix what is broken and improve what is not working — see Section 5
• Manage cooldown periods for promotional offers: If you delete your account after redeeming a promotional offer, we use a salted hash of your email address for a limited time to prevent immediate re-signup for the same offer. This helps us prevent abuse of our promotional system.

4. Information Sharing

We share data with:

• Your image data with US-based AI processing partners (Replicate.com) andOpenAI. These transfers are necessary to provide the core AI features of our service.
• Your input form data with Google Gemini models, potentially involving data processing outside the EU.
• EU-based cloud storage providers (Cloudflare R2)
• Error tracking and performance monitoring data with Sentry. Sentry is configured not to capture any Personally Identifiable Information (PII) from your users.
• Subscription and purchase data with RevenueCat, a US-based service that manages subscriptions and purchases across the App Store and Google Play. RevenueCat receives your account identifier and the details of your purchases and renewals, so that your entitlement and credits stay correct across devices and reinstalls. It does not receive your photos.
• App usage data with PostHog, our product analytics provider, hosted in the European Union. See Section 5 for exactly what is sent. PostHog does not receive your photos.

5. Analytics, Cookies and Tracking Technologies

This website

This website does not use cookies for tracking or analytics, and sets no advertising or profiling cookies. It runs no analytics script.

The mobile app

The app uses PostHog for product analytics. This is not cookie-based tracking and we do not use it for advertising, profiling or sale of data, but it does involve personal data, so it is set out here in full:

• Events describing what happens in the app — screens viewed, onboarding steps completed, shoots started and finished, paywalls viewed, purchases started, completed, cancelled or failed — along with the app version, platform and device language.
• Once you sign in, these events are associated with your account identifier, and your name and email address are sent to PostHog so we can recognise the same person across their devices.
• The answers you give during onboarding (your role, what you shoot for, what you find difficult, how many photos you need) are stored against your profile there.
• Your approximate country is derived from your IP address.
• Our PostHog instance is hosted in the European Union, so this data does not leave the EU for this purpose.
• Analytics are disabled entirely in development builds.

We rely on our legitimate interest in understanding and improving the product for this processing. You can object at any time by writing to support@builtby.es, and we will stop analytics processing for your account and delete the data already collected. Deleting your account also removes it.

We also use Sentry for crash and performance monitoring, and RevenueCat for subscriptions; both are described in Section 4.

6. Data Retention Policy

We retain your account information and uploaded images until you explicitly request their deletion. There is no automatic expiration date for your data in our systems.

If you wish to have your data deleted, you can:

• Delete your account and all associated data directly within the application using the self-service feature (Settings > Delete Account).
• Request deletion of specific images through the application.
• Alternatively, contact us at support@builtby.es to request complete account data deletion.
• Revoke OAuth permissions through Google/Apple settings, which will prevent further access but won't automatically delete existing data.

Upon receiving a deletion request, we will process it within 30 days and send confirmation once completed.

Subscription and purchase records are kept for as long as the entitlement is active and afterwards only where we are required to, or need to, retain them — to honour a restore, to handle a refund or dispute, and to meet accounting and tax obligations under German law. Deleting your account does not cancel a subscription: cancel it through your Apple or Google account as well, or you will continue to be billed.

Please note: In cases where an account is deleted after a promotional offer (e.g., free credits) has been claimed, we retain a salted, non-reversible hash of the associated email address for a specific cooldown period (e.g., 90 days). This is solely for the legitimate interest of preventing abuse of our promotional offers. The original email address and all other personal data are deleted as per your request. This hashed identifier cannot be used to re-identify you or contact you, and is automatically purged after the cooldown period expires.

7. Data Security

We implement administrative, technical, and physical security measures compliant with GDPR/CCPA to help protect your personal information. Key measures include:

• Primary data storage within the European Union
• OAuth2 token validation for secure authentication
• Secure data transfer protocols
• Regular security assessments

While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

8. International Transfers

Your primary account information and processed images are stored within the European Union. However, to provide our AI-powered image transformation features, we need to transfer your uploaded images to our processing partners, OpenAI and Replicate, which are located in the United States. We may also utilize Google Gemini models, which could involve data processing in various locations depending on Google's infrastructure.

Subscription and purchase data is transferred to RevenueCat in the United States. Product analytics stay in the European Union: our PostHog instance is EU-hosted.

We ensure these transfers comply with GDPR requirements by relying on appropriate safeguards, such as Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework, as implemented by our partners. You can find more information in their respective privacy policies linked in Section 4.

9. Your Rights

• Request access to the personal data we hold about you
• Request deletion of uploaded images or your entire account
• Request correction of inaccurate personal data
• Export your processed images
• Revoke OAuth permissions
• Object to processing carried out on the basis of our legitimate interests, including product analytics — see Section 5
• Request that we restrict processing of your data
• Withdraw consent at any time, without affecting processing already carried out
• Lodge a complaint with a supervisory authority. We are based in Berlin, so the competent authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, but you may also complain to the authority where you live or work.

To exercise any of these rights, write to support@builtby.es.

10. Children's Privacy

Our service requires users to be at least 16 years of age. By using our service, you represent that you are at least 16 years old.

We do not knowingly collect personal information from individuals under 16 years of age. If we discover that we have inadvertently collected personal information from someone under 16, we will promptly delete this information.

If you believe we might have collected information from a user under 16, please contact us at support@builtby.es.

11. Policy Changes

Updates will be notified via email 30 days prior to changes.

12. GDPR Compliance

As an EU-based service, we adhere to GDPR requirements:

• Right to data portability (export in JPEG/PNG formats)
• Legal bases for processing:
  • Contractual necessity: Processing your images (including necessary international transfers for AI features) and account data to provide our core service, and processing subscription and purchase data to give you the plan and credits you paid for
  • Consent: For authentication through Google/Apple services, which you can withdraw at any time
  • Legitimate interests: For security, fraud prevention, and service improvement — including error tracking, performance monitoring and the product analytics described in Section 5 — where not overridden by your rights. You can object to this at any time.
  • Legal obligation: For retaining records of purchases where accounting and tax law requires it
• Data Protection Officer: support@builtby.es

13. Governing Law

This Privacy Policy is governed by German law.