Privacy Policy
Effective Date: July 17, 2026
1. Data Controller
This application is developed by Mustafa Zafer.
Contact: support@nareapp.com
2. Data We Collect
Nare collects and processes the following data:
2.1 Account Information
- Email address and display name (via Firebase Auth, using Google, Apple, or email sign-in)
- Username (so friends can find you in the Together feature)
- Profile photo (if you add one)
2.2 Meal Data
- Food photographs (for AI analysis)
- Food descriptions, calorie and macronutrient values
- Portion information and date/time
2.3 Profile Information
- Age, gender, height, weight
- Activity level and nutrition goal
- Daily calorie target
2.4 Health Data (Optional)
- Step count (via Apple HealthKit or Google Health Connect, only with your permission)
- If you request a personal report, summarized activity averages and estimated calories burned derived from steps
2.5 Voice Meal Entry (Optional)
- Microphone and speech recognition are used only when you start voice meal entry.
- The resulting transcript is sent to our API infrastructure and Anthropic for meal analysis. An unfinished transcript may be held temporarily on your device for recovery.
2.6 Device and Usage Data
- Firebase Crashlytics installation identifier, device/OS information, app version, crash stack and related diagnostics. These do not directly contain your name, but may be associated with an installation.
- Cloudflare security/error logs containing coarse location (country/data center), request path, status, and a user identifier pseudonymized with a secret key.
- Limited device, interaction, and diagnostic data received by Google AdMob when serving ads to free users. We request non-personalized ads and do not use this data ourselves for cross-app tracking.
- If you join the website waitlist: email address, language, and signup time.
3. How We Use Your Data
Collected data is used solely for the following purposes:
- Core functionality: Meal tracking, calorie calculation, statistics, and reports
- AI analysis: Your food photos are sent to the Anthropic AI service to estimate nutritional values. Per Anthropic's API data policy, inputs are not used to train models and are retained only briefly for abuse monitoring, not for ongoing service operation.
- Advertising: Free users are shown ads via Google AdMob. We request non-personalized ads, but Google still receives limited device and usage data to serve ads and prevent fraud. Subscribed (Pro) users see no ads.
- Together (social) feature: Described in detail in Section 4 below.
- Personal reports: Weekly nutrition analyses and suggestions; when you request a report, summarized step averages may be included in the analysis input. HealthKit data is not used for advertising.
- Error detection and security: Diagnostics and pseudonymized request logs used to improve stability, prevent abuse, and investigate failures
4. The Together (Social) Feature and Data Sharing
Together is an optional feature that lets you share your nutrition progress with friends:
- User search: Your display name, username, and profile photo are visible to other registered users who want to add you as a friend.
- Room members: Members of rooms you join can see your daily total calories and progress.
- Meal sharing: If the "Share my meals" setting is on, room members can see your meal entries and photos, and can leave likes and comments. You can turn this off at any time in Settings > Privacy — when off, members only see your total calories.
- We do not sell your personal data. Apart from the service providers listed in Section 5 (including Google AdMob, which receives limited device/usage data to serve ads to free users), your data is not shared with third parties.
5. Third-Party Services
Nare uses the following third-party services:
| Service | Provider | Purpose |
|---|---|---|
| Firebase Auth | Sign-in and authentication | |
| Cloud Firestore | Data storage | |
| Firebase Storage | Photo storage | |
| Firebase Crashlytics | Installation identifier, device information, and crash diagnostics | |
| Claude AI | Anthropic | Food photo analysis |
| Google AdMob | Advertising (shown to free users) | |
| HealthKit / Health Connect | Apple / Google | Step data (optional) |
| RevenueCat | RevenueCat | Subscription management |
| Cloudflare | Cloudflare | API infrastructure |
These services are subject to their own privacy policies.
Some providers may process data in countries outside Türkiye and the European Economic Area. Where such a transfer is necessary, we rely on applicable KVKK/GDPR requirements, provider agreements, and appropriate transfer safeguards. HealthKit data is not sent to the advertising provider.
6. Data Retention
- Your data is retained as long as your account is active.
- Meal photos uploaded to the cloud (for Together sharing) are automatically removed from active storage after about 1 day. Google Cloud Storage's 7-day soft-delete recovery window means a deleted object may remain recoverable for roughly 8 days; copies on your device remain yours.
- When you delete your account in the app, active Firebase/Storage user data and your social content under other users are erased. Provider security backups and subscription/transaction records that must be retained by law may remain for their limited retention periods.
- Crashlytics diagnostics are retained for a limited period according to Firebase console settings; we do not claim that they are fully anonymous.
- Waitlist email records are automatically deleted within 180 days, or earlier upon an erasure request.
7. Your Rights (GDPR / Turkish KVKK)
You have the following rights:
- Access: Learn what data of yours is stored
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of all your data (via Settings > "Delete My Account")
- Objection: Object to data processing
- Portability: Request a copy of your data
To exercise these rights, write to support@nareapp.com.
8. Cookies
The Nare mobile app does not use cookies.
9. Data Security
- All data transfer is encrypted with HTTPS (TLS)
- Firebase data is stored encrypted at rest
- API keys are protected server-side; analysis requests are authenticated
- Code obfuscation (ProGuard/R8) is enabled in Android releases
10. Children's Privacy
Nare is not designed for children under 13. We do not knowingly collect personal data from individuals under 13. If you become aware of such a case, please contact us.
11. Changes
This privacy policy may be updated. Significant changes will be announced via an in-app notice. You can always read the current version in the app or at nareapp.com.
12. Contact
For questions: support@nareapp.com