Privacy Policy

MyOutFood collects the following information to provide the service:

• Photos: Outfit photos you capture or select. They are sent to third-party AI services for analysis and are stored in your private account area so they can appear in your history.
• Location: With your permission, your approximate device location. You can also type a location manually instead of granting location access.
• Account information: Email address and name provided by your Google or Apple sign-in.
• Usage and diagnostics: Crash reports, performance data and in-app interactions, used to keep the app working and to serve ads.
• Purchase information: Subscription status and transaction records from the App Store or Google Play.

• Analyze your outfit photo to identify style and colors
• Suggest matching cuisines and find restaurants near your location
• Generate a food image, and a short food video if you request one
• Keep your analysis history and favorites
• Process subscriptions and, for free users, show rewarded ads
• Diagnose crashes and improve performance

We do not sell your personal data. We share it only with the following providers:

• Google Gemini (AI): Your outfit photo is sent to Google's Gemini models to analyze your style. We ask for your explicit permission before the first analysis; nothing is sent until you allow it.
• fal.ai (AI): Your outfit photo is sent to fal.ai on every analysis to create an image of you at a restaurant table. If you generate a video, a temporary signed link to that image is sent to fal.ai as well.
• Supabase: Our backend provider for authentication, database and photo storage.
• Google Places: Your approximate location or the location text you enter is sent to find nearby restaurants.
• OpenStreetMap (Nominatim): When you type a location, or tap the button to use your current location, the text you type, or your coordinates rounded to about 100 m, are sent from your device — together with your IP address — to the OpenStreetMap Foundation's Nominatim service to look up place names and addresses.
• Google AdMob: Advertising identifier and ad interaction data. The ad service starts when the app opens; rewarded ads are for free users. See section 6.
• RevenueCat: Subscription and purchase status.
• Sentry: Crash and performance diagnostics.
• Apple / Google: Sign-in identity, and subscription billing handled by the App Store or Google Play.

We require these providers to protect your data at a level equal to or better than described in this policy, and to use it only to deliver the service described here.

• Outfit and generated food photos are stored in your private storage area for as long as the related history item exists. They are not public and are not shared with other users.
• Deleting a history item deletes its stored photos. You can do this at any time from the History tab.
• Deleting your account deletes your account record, history, favorites and stored photos. Profile → Delete Account.
• Analysis history is also cached on your device; removing the app removes that local copy.
• Diagnostic data (crash and performance reports) is retained by Sentry under its own retention schedule. Your account id is not attached to it — Sentry adds only a randomly generated device identifier.
• What we send to each AI provider — your outfit photo to Google Gemini and to fal.ai, and a link to the generated image to fal.ai when you create a video — is processed under that provider's own policy; we do not control their retention. Deleting your account or a history item removes the copies we store; it does not reach copies a provider keeps, including a generated video hosted by fal.ai.

• Withdraw AI permission at any time: Profile → Privacy & Data → AI data sharing. When it is off, no photo is sent for analysis. Your existing history is kept.
• Ad tracking: On iOS you can decline the App Tracking Transparency prompt, or change it later in iOS Settings → Privacy & Security → Tracking. Ads continue but are not personalized.
• Camera and location: Revoke at any time in your device settings. You can type a location manually instead.
• Access and deletion: Delete individual history items, or delete your entire account from Profile → Delete Account.
• Questions or requests: contact us at the address in section 10.

Free users may see rewarded video ads served by Google AdMob. On iOS we ask for App Tracking Transparency permission before initializing ads. Where the law requires consent (for example in the EEA and the UK), Google's consent form is shown before ads are requested, on both iOS and Android; if you do not consent, no ads are requested. If you allow tracking, your device advertising identifier (IDFA or Android advertising ID) and ad interaction data may be used by Google and its partners for personalized advertising and measurement. If you decline, ads are still shown but are not personalized. Paid subscribers are not shown ads automatically, although the ad service still starts when the app opens.

We use industry-standard security measures including:

• Server-side API key management (keys never exposed to client)
• JWT token authentication for all API requests
• CORS origin restrictions
• Encrypted data transmission (HTTPS)

MyOutFood is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy. The "last updated" date at the top changes when we do. Continued use of the app after an update means you accept the revised policy.

For privacy questions or data requests:

cerarslan@myoutfood.app