Necessity · Privacy

Privacy Policy

Effective date: 24 October 2026 · Version 1.2

1. Data controller

Under Turkish Personal Data Protection Law no. 6698 ("KVKK"), the data controller is Necessity · officilnecessity0@gmail.com. This document serves both as the disclosure required by KVKK art. 10 and as the App’s privacy policy.

2. Personal data processed

Identity and contact: name, username, email address, profile photo (to the extent you provide them).
Health and body data: sex, age, height, weight, activity level, goal, meal and calorie records, water intake. This data may qualify as special category personal data under KVKK art. 6 and is processed only with your explicit consent.
Usage data: pantry records, shopping lists, recipes, scanned barcodes, receipt lines, app preferences (language, theme, notifications).
Technical data: session token, error logs, purchase record (product type and Google Play purchase token), ML Kit diagnostic data (see section 5).

The App does not collect an advertising identifier, location data or your contacts. No third-party analytics or advertising trackers are used.

3. Camera and photos

Camera permission is requested to scan barcodes and receipts, to take photos of meals and nutrition labels, and to add product and recipe photos. Barcode and receipt scanning happens on your device (ML Kit); these images are not sent to the server, only the decoded barcode number and the product lines read from the receipt are transmitted. When you ask the App to analyse a meal or nutrition label photo, the photo is sent through our server to the AI provider Anthropic to estimate nutrition values, and it is not stored on our servers. AI estimates can be wrong; check the result before saving it. When you report an estimate, only the result returned by the model and the reason you chose are recorded, not the photo; this record is used to fix wrong estimates and review inappropriate output, and it is deleted after one year. Photos you upload for your profile, products, recipes and pantry are stored in Supabase storage; photos of products you add yourself are not shown to other users. When picking a photo from your gallery, the Android Photo Picker is used; the App does not access your whole gallery.

4. Purposes and legal bases

Performance of the contract (KVKK art. 5/2-c): creating your account, storing your pantry and meal records, syncing across devices.
Explicit consent (KVKK art. 6/2): calculating a calorie target from your body data.
Legitimate interest (KVKK art. 5/2-f): preventing abuse, debugging, improving the service.
Legal obligation (KVKK art. 5/2-ç): retention and disclosure duties arising from legislation.

5. International transfers

Your data is hosted on Supabase (Amazon Web Services infrastructure, EU region). Open Food Facts is used for barcoded product information. These transfers are made on the basis of your explicit consent under KVKK art. 9. Only the barcode number is sent to Open Food Facts; no data that could identify you is transmitted. Reminder notifications are generated on your device; no data leaves it for that purpose. Meal and nutrition label photos are analysed with the AI service of Anthropic, PBC (USA); your name or email address is not sent with the photo, and under the provider’s commercial terms the data is not used to train models. If you sign in with Google, your name, email address and profile photo are received from Google. If you sign in with email, the sign-in code is sent to your address through Google’s email service (Gmail); only your email address is shared for this. Purchases are made through Google Play; your payment details are not shared with us, only the validity of the purchase is verified with Google. Google ML Kit, used for barcode and receipt scanning, sends diagnostic and usage data to Google to monitor how the service works: device model and operating system version, the App’s package name and version, performance metrics, error codes and a device identifier used for diagnostics. Scanned images and their contents are not part of this data; it is sent over an encrypted connection.

6. Retention periods

Your data is retained while your account is active. When you delete your account, your pantry, meal, recipe, list and receipt records are permanently deleted within 30 days. Product information you added manually (name, brand, barcode, nutrition values) is not deleted; it is kept with its link to your identity severed, to improve the product catalogue (see Terms of Use section 6). To work offline, the App keeps an encrypted copy of your records on your device; this copy is deleted when you sign out or uninstall the App.

7. Your rights

Under KVKK art. 11 you have the right to: learn whether your personal data is processed; request information if it has been; learn the purpose of processing and whether it is used accordingly; know the third parties to whom it is transferred domestically or abroad; request correction if it is incomplete or inaccurate; request erasure or destruction; request that these actions be notified to third parties to whom the data was transferred; object to an adverse outcome arising solely from automated analysis; and claim compensation if you suffer damage.

You can send requests for information, a copy or correction of your data via Settings > Data & backup > Data request or directly to Necessity · officilnecessity0@gmail.com, and delete your account from the same section. Your identity is verified through the e-mail address registered to your account. Applications are answered within 30 days at the latest.

8. Data security

All network traffic is encrypted with TLS. Session tokens are stored encrypted on the device. Row level security (RLS) is enforced on the server: each user can access only their own data and pantries explicitly shared with them. App backup is disabled, so your session data does not travel to another device via a device backup.

9. Children’s data

The App is not directed at people under 18 and does not knowingly collect personal data from children. If we become aware of such data we delete it without delay.

10. Changes

Material changes to this policy are announced in the App before they take effect, and your explicit consent is requested again where necessary. The current version is always available under Settings > Privacy Policy.

11. Contact

Data controller: Necessity · officilnecessity0@gmail.com
You can use the same address for KVKK applications and privacy questions.