Privacy Policy

Last updated: May 20, 2026

The "Ratsion" mobile application (the App) takes your personal data seriously. This document explains what data we collect, how we use it, and your rights.

1. Who we are

• Project: Ratsion
• Contact: mr.dovudkhon@gmail.com
• Country: Uzbekistan

2. What data we collect

2.1. Account data

• Email (for login)
• Password (stored as a hash — we cannot read it)
• Name (optional)
• Google ID (if you sign in with Google)
• Profile picture URL (from Google, if provided)

2.2. Health and body data

• Sex, date of birth, height, weight
• Activity level, weight goal (lose / maintain / gain)
• Daily calorie + macro targets (computed automatically)
• Weight log entries
• Optional (VIP): chronic conditions, allergies, diet — special-category personal data, protected separately

2.3. Food and activity data

• Foods you log (name, time, quantity, macros)
• Food photos sent for AI analysis (temporary, see below)
• Scanned barcodes and search queries

2.4. Order data (if you use the Lunch marketplace)

• Delivery address and map coordinates
• Phone number
• Order history

2.5. Technical data

• Device type (iPhone model), iOS version
• App version
• Request IP address (in logs, ~14 days)

3. How we use your data

• Create and manage your account
• Calculate your daily calorie + macro targets (Mifflin-St Jeor formula)
• AI-analyze food photos and give personalized advice
• Accept and deliver lunch orders
• Improve quality and fix bugs

4. Food photos and AI analysis

When you use the "scan photo" feature:

• The photo is temporarily uploaded to our server
• Sent to Google Gemini API for analysis
• The result (food names, calories, advice) is returned to you
• The photo is not stored permanently — deleted right after analysis

Google Gemini has its own privacy policy: policies.google.com/privacy

5. Third-party sharing

We share data with the following services, only to the minimum extent required:

• Google Sign-In — for authentication (if you choose)
• Google Gemini API — for AI analysis (only food photo and profile)
• Open Food Facts — when you search foods
• Yandex Maps — for delivery address selection
• Fly.io — server hosting (data in Frankfurt)
• Delivery partners — address + phone shared with courier (only during active delivery)

We never sell your data for advertising or third-party analytics.

6. Retention

• Account data — while the account is active
• Health, food, weight data — until you delete it, or the account is deleted
• Order history — up to 4 years (bookkeeping)
• AI photo files — deleted immediately after analysis (under 1 minute)
• Server logs — 14 days

7. Your rights

• View your data — Profile section
• Edit — anytime
• Delete account — Profile → Settings → "Delete account". All your personal data is permanently removed when you confirm
• Export — by request to the email above
• Complaint — to the appropriate Uzbekistan authority

8. Security

• Passwords — bcrypt hashes (irreversible)
• All requests via HTTPS
• Authorization — JWT tokens (stored in iOS Keychain)
• Server protected by Fly.io infrastructure
• Database (PostgreSQL) — in a private network

9. Children

The App is not intended for users under 16. If you are under 16, please do not create an account. Such accounts will be deleted on detection.

10. Changes

This policy may be updated. Material changes will be notified in the App. The current version is always on this page.

11. Contact

For any privacy questions: mr.dovudkhon@gmail.com