Privacy Policy
PureShape provides health-related information but is not medical advice and does not replace professional consultation. The Hungarian version is authoritative.
1. Controller
The organization operating PureShape controls your data. Contact: kissszabolcs0211@gmail.com.
2. Data we process
Account
- Email and authentication data (registration, sign-in).
Profile & health data
- Name, date of birth, height, weight, goal weight, sex, activity level, goal.
- Special-category health data: dietary restrictions, allergens, intolerances, health conditions, pregnancy status, medications, eating-disorder history, only with your explicit consent, for recipe and content safety.
Usage data
- Food logs, body measurements, mood entries, cycle data (only if enabled).
- Photos: progress photos (private, only for you), avatar, community post images (if you share them).
- Generated recipes and AI conversations (Fridge-Magician, Eszti chat).
- Subscription status; push notification token.
3. How we use it
- To run the service: personalized recipes, logging, insights, community.
- Safety filtering: flagging allergen/diet conflicts in generated content.
- Subscription management and product support.
4. Processors
- Supabase - database and storage (EU region).
- OpenAI - for recipe/chat generation, your ingredients and relevant health context are processed (for safe output).
- RevenueCat and Google Play Billing - subscriptions (payment handled by Google; we never see card data).
- Firebase Cloud Messaging - push notifications (if enabled).
- PostHog (EU) - product telemetry, only with separate consent; off by default.
We do not sell your data or use it for advertising.
5. Legal bases (GDPR)
- Performance of a contract (providing the service).
- Consent (special-category health data, optional telemetry, push).
- Legitimate interest (security, abuse prevention).
6. Retention
We keep your data while your account exists. On deletion we remove data linked to you, except where law requires retention.
7. Your rights
- Access, rectification, erasure, restriction, objection, portability.
- In-app data export and account deletion are available in settings; consents can be withdrawn anytime.
- Complaints: to your local data protection authority (in Hungary, the NAIH).
8. Security
Row-Level Security on stored data, encrypted transport (HTTPS), secure on-device storage for sensitive data.
9. Children
The app is not intended for users under 16.
10. Changes
We may update this policy from time to time; material changes are announced in the app.