Privacy policy

About this notice

This notice is prepared under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"). It sets out what personal data Almora processes, for what purposes, and on what legal basis.

To exercise any of the rights described here, or to ask a question, write to privacy@getalmora.app.

What we process

Identity and contact: your name or display name, username, email address and profile picture.

Use of the app: the meals you log (the food's name, meal type, when you ate it, any photo you attach), the seven ratings you give a meal, the check-ins you answer, the food history and insights the app builds from them, your chosen health goals, your wake-up time and your notification preferences.

Health data: the symptoms you report and your ratings for sleep, digestion, energy, focus, mood, performance and inflammation. This is special-category personal data under Article 6 of the KVKK, which is why it is named separately here.

Held only on your device: the sleep, activity and calorie figures you enter, your theme and language, the corrections the app learns from how close its predictions were, and local caches. None of it is sent to our servers.

Why we process it

To create your account and keep it open safely; to store what you log and show it back to you; to work out the relationship between what you eat and how you feel, and present it as your Plate Score, your food history and your insights; to send the reminders you ask for; and to keep the service running and free of abuse.

Your data is not used for advertising, is not sold, and is not shared with third parties for marketing.

Legal basis

For your account and the app's core functions, processing rests on the performance of a contract and on our legitimate interests, under Article 5(2) of the KVKK.

For health data — symptoms and the seven ratings — processing rests on your explicit consent, under Article 6. You may withdraw that consent at any time by deleting the data from your account, or by deleting your account entirely.

How it is collected

Only from what you enter: what you give at sign-up, what you type and photograph when logging a meal, the answers you give at a check-in, and the choices you make in settings.

The app collects no location, no contacts, no advertising identifier and no Apple Health data, and it uses no analytics or advertising trackers.

Transfers, including outside Turkey

Hosting, database, authentication and file storage are provided by Supabase. Authentication emails are sent through Lovable.

To score and write up a food, its name, the meal type and the language are sent to Anthropic. Your name, email address, check-ins and symptoms are not sent with it. Assessments are stored against the food rather than against you, and hold no user identifier.

If you use photo identification, that photo alone is sent to Anthropic to be identified.

These providers may hold data on servers outside Turkey, so personal data is transferred abroad within the meaning of Article 9 of the KVKK. Such transfers are made on the appropriate safeguards that article provides for, or on your explicit consent.

How long we keep it

For as long as your account exists. A meal or check-in you delete is removed immediately. Deleting your account removes every record and every photo you uploaded from our servers.

You can delete your account yourself, from Settings inside the app. You do not need to contact us.

Your rights

Under Article 11 of the KVKK you may apply to the data controller to: learn whether your personal data is being processed; request information if it is; learn the purpose of processing and whether it is used accordingly; know the third parties inside or outside Turkey to whom it has been transferred; have it corrected if it is incomplete or wrong; have it erased or destroyed within the conditions of Article 7; have any correction or erasure notified to third parties it was transferred to; object to a result reached solely by automated analysis that works against you; and claim compensation for damage caused by unlawful processing.

Write to privacy@getalmora.app to exercise any of these. We answer within thirty days at the latest.

The data controller

The data controller for the Almora app and its services, within the meaning of the KVKK, is Arel Angın. Applications concerning the rights above may be sent to privacy@getalmora.app.

Security

Data is encrypted in transit. Your meal photos and profile picture are kept in non-public storage reachable only through short-lived links issued to your account. Database access is restricted by row-level rules, so a record can only be read by the account that owns it.

Age

Almora is not intended for children under 13, and we do not knowingly process personal data belonging to them.

Changes

When this text changes, the date above changes with it. If a change matters, the app will tell you.