Canoz Privacy Policy

Effective date: 26 September 2026

Canoz ("the app") is an AI calorie tracker for iPhone made by Batuhan Ünverdi ("we", "us"), who is the data controller. This policy explains what data the app processes, why, who helps us process it, and the choices you have. Contact: support@canoz.app

The short version

• You do not need an account. Canoz creates an anonymous account for you on first launch.
• Meal photos are sent for AI analysis and are not stored by us.
• Your profile, goals and food log are stored so the app works across launches. You can delete everything at any time in Settings → Delete account.
• We only process your health data with your explicit consent.
• We do not sell your data, do not show ads, do not track you across other apps, and never use your health data for advertising.

What we process and why

• Meal photos you take or pick: to recognize the food and estimate calories and macros. We do not store them. The photo is sent for analysis and discarded; only the result (dish names, portions, nutrition values) is saved to your log. Photos are re-encoded on your phone first, which removes location and camera metadata.
• Meal descriptions and notes you type: same purpose as photos. The analysis result is saved with the meal.
• Onboarding answers: sex, birth date, height, weight, goal, target weight, pace, workouts per week, diet, cuisines, obstacles, goals and units. We use them to calculate your calorie and macro plan and to tailor meal recognition to your cuisines. Stored in your profile.
• Your food log: meals, portions, calories, macros, health score and time, to show your daily progress and history.
• Apple Health data you allow: active energy and body weight. Active energy is used on your phone only, to adjust your daily calorie goal, and never reaches our servers. Weight entries from Apple Health are stored in your account to show your progress. Canoz also writes the meals you log (energy, protein, carbs and fat) and the weights you enter to Apple Health; that data stays on your device and in Apple Health. Optional; you can change access in the Health app at any time.
• Water you log: the glasses of water you add and your daily water goal, stored in your account to show your intake, history and progress and to restore them on a new phone. If you allow it, Canoz also writes them to Apple Health as water intake.
• Your health-data consent: the date and time you gave or withdrew it.
• "Where did you hear about us?": to understand which channels bring users.
• Anonymous user id: to keep your data together and link your subscription.
• Email address and Apple user id, only if you choose Sign in with Apple: to restore your account on a new phone. Apple may give us a private relay address instead of your real one.
• Subscription status and purchase history: to unlock Premium and restore purchases.
• App usage events (for example "onboarding completed" or "paywall viewed") and an app-instance id: to understand how the app is used and improve it.
• Analysis records (status, response time, AI model, cost) and records of refused scan requests (for example when a daily limit is reached): to run the service, prevent abuse and control costs.

We do not collect your name, phone number, contacts or precise location.

Health data and your explicit consent

Your weight, height, goals, meals and water intake are health data, and so is anything Canoz reads from Apple Health. Your answers to the questions about your body stay on your phone until you give your explicit consent, which the app asks for before it creates your plan, with this statement: "I agree that Canoz processes my health data (weight, height, goals, meals, water and Apple Health data, if I connect it) to create my plan and, without my identity, to improve estimates for everyone, as described in the Privacy Policy." You cannot continue without checking it, and without it Canoz does not analyse meals or store Apple Health data. "Without my identity" means that Canoz may add your portion corrections and product confirmations to shared tables that contain no user id or any other identifier.

This consent is the legal basis for processing your health data under Article 9(2)(a) of the GDPR (EU/EEA and UK) and the explicit consent (açık rıza) rules of the Turkish Personal Data Protection Law No. 6698 (KVKK). You can withdraw it at any time in the app, by deleting your account in Settings, or by writing to us. When you withdraw it, we delete the data imported from Apple Health (weight entries from Apple Health) from our servers. Withdrawal does not affect processing that happened before it, but without consent Canoz cannot create your plan or analyse your meals.

We use health data only to provide the app's features. Apple Health data is never sent to the AI model and never used for analytics, advertising or marketing, and we never sell it. We do not store health data in iCloud, and we share it only with the service providers below, who process it on our behalf.

Other legal bases

• Providing the service you asked for (contract): your account, food log, subscription and support.
• Our legitimate interest: keeping the service secure, preventing abuse, and understanding aggregate usage to improve the app.
• Your consent, where the law requires it.

Service providers

• DeHost İnternet ve Bilişim Teknolojileri Ltd. Şti.: rents us the server on which our database, anonymous accounts, Sign in with Apple and server functions run, on the open-source Supabase software that we operate ourselves. Türkiye (Ankara).
• Ace Data Centers, Inc.: stores our encrypted nightly backups. They are encrypted before they leave our server, and only we hold the key. United States.
• GitHub Pages (GitHub, Inc.): hosts the website canoz.app and processes server logs (such as your IP address) when you visit it. United States.
• fal.ai: gateway that sends the photo or text to the AI model. We switch off fal's request storage, and fal does not train on customer content. United States.
• OpenRouter: routes the request to the AI model. We only allow model hosts that do not store or train on requests. United States.
• Google (Gemini model): reads the meal photo or text and returns the nutrition estimate. Reached only through OpenRouter under the no-data-collection routing.
• RevenueCat: manages subscriptions and purchase history. United States.
• Google Firebase Analytics: app usage statistics, without the advertising identifier. United States.
• Apple: payments, Sign in with Apple, Apple Health on your device.
• Open Food Facts: open product database for barcode lookups. Our server sends it only the barcode number, never your personal data. France (EU).

Our server is in Türkiye, and several of the providers above are in the United States. If you use Canoz in the EU/EEA or the UK, your data is therefore transferred to Türkiye and to the United States. These transfers are necessary to provide the service you ask for (Article 49(1)(b) GDPR). Our safeguards: all connections are encrypted, backups are encrypted before they leave our server and only we hold the key, and only we have access to the server.

AI estimates are not medical advice

Calorie and nutrition values are estimates from an AI model and can be wrong. Canoz is not a medical device and does not give medical advice. Talk to a doctor or dietitian before making big changes to your diet, especially if you are pregnant, have a medical condition, or have a history of eating disorders.

How long we keep data

• Meal photos: not kept by us.
• Everything else is kept until you delete your account. Settings → Delete account removes your profile, food log and all related records from our database immediately.
• RevenueCat keeps the purchase history of the deleted anonymous id, because Apple billing records require it. Your App Store subscription belongs to your Apple ID: deleting the account does not cancel it. Cancel it in your App Store account settings.

Your rights

Depending on where you live (for example under the GDPR in the EU/EEA and UK, the KVKK in Türkiye, the LGPD in Brazil, or US state laws), you can ask to access, correct, export or delete your data, object to or restrict processing, and withdraw consent at any time. Users in Türkiye can also use the rights in Article 11 of the KVKK. Most of this is available in the app: edit your profile in Settings, disconnect Apple Health in the Health app, and delete everything with Delete account. For anything else, write to support@canoz.app. You can also complain to your local data protection authority.

Children

Canoz is not meant for anyone under 16, and we do not knowingly collect data from children. If you believe a child has used the app, contact us and we will delete the data.

Changes

If this policy changes, we will update the effective date above and, for important changes, tell you in the app.

Contact

Batuhan Ünverdi, support@canoz.app