Privacy Policy

1. Introduction

Reseta is a nutrition and wellness app developed by Pidotis. This policy explains what data the app handles, why, where it is stored and what choices you have. We do not sell your data and the app shows no ads.

Reseta is not a medical device and does not replace the advice of a health professional.

2. Data We Collect

Depending on how you use the app, Reseta handles the following data:

• Your profile: first name, age, gender, height, weight and goal.
• Your journal: meals (description, photo if you take one, calories, macros, ingredients), activities, steps and weigh-ins (with body fat, muscle mass and waist if you enter them).
• Your conversations with Sam, the AI coach.
• If you create an account: your email address, and your name if you sign in with Apple or Google.
• Data from Apple Health or Health Connect, only if you connect them (see section 6).
• Usage statistics and crash reports (see section 7).

All of this data is stored first on your device.

3. How We Use Your Data

Your data is used only to run the app:

• Calculate your daily calorie goal and macros, and show your progress.
• Analyze your meal photos and workout screenshots, estimate nutritional values and answer you through Sam.
• Sync your journal across your devices if you have an account.
• Measure how the app is used and fix crashes.

We never sell your data and never use it for advertising.

4. Storage & Security

Your data is stored first on your device. Without an account, your profile and journal stay on your device.

With an account (email, Apple or Google), your profile and journal are synced to servers hosted by Supabase in the European Union (Ireland). Connections are encrypted (TLS), and row-level security ensures that only your account can access your data.

5. Artificial Intelligence (OpenAI)

Meal photo analysis, workout screenshot analysis, nutrition estimation, voice transcription and Sam, the AI coach, use the OpenAI API. Requests go through our server: the OpenAI key is never on your device. What is sent:

• For a photo: only the image.
• For voice input: the audio recording, so it can be transcribed into text.
• For Sam: your message, with the context needed to answer you (first name, profile, goal, recent meals, activities and weigh-ins).

OpenAI does not use this data to train its models and keeps it for 30 days at most to prevent abuse. This processing takes place in the United States. To control costs, we count the number of AI requests per account, without keeping their content.

Before anything is sent to OpenAI for the first time, the app asks for your explicit permission. You can withdraw it at any time in Settings: AI features then stop working until you give permission again. This applies from version 1.2.5 of the app.

6. Apple Health & Health Connect

Connecting Apple Health (iOS) or Health Connect (Android) is optional. If you connect it, Reseta reads your steps, weight, active energy and workouts, and writes the weigh-ins you log in Reseta.

This data is used only to fill your Reseta journal. It is never sold, never used for advertising or marketing, and never shared with third parties for those purposes.

7. Analytics & Crash Reports

Reseta shows no ads, never sells your data and does not track you across other apps. We use two services:

• PostHog (EU servers): usage statistics, such as screens opened or the number of meals added. Never the content of your meals, your weight or your messages.
• Sentry (EU servers): crash reports with technical information about your device.

If you have an account, this data is linked to an internal ID, never to your email address.

8. Subscriptions

Reseta Premium payments are handled by Apple (App Store) or Google (Google Play). Reseta never sees your payment details. Our provider RevenueCat only tells us whether your subscription is active.

9. Third-Party Services

• OpenAI (United States): AI features (photo and screenshot analysis, nutrition estimation, voice transcription, Sam).
• Supabase (EU, Ireland): account and cloud sync.
• PostHog (EU): usage statistics.
• Sentry (EU): crash reports.
• RevenueCat: subscription status.
• Open Food Facts: barcode lookup. Only the barcode is sent, no personal data.
• Sign in with Apple and Google Sign-In: authentication only. We receive your name and email address, nothing else.

10. Your Rights (GDPR)

Under the GDPR and similar laws, you have the right to:

• Access: get a copy of your data.
• Portability: receive your data in a structured, machine-readable format.
• Rectification: correct inaccurate data.
• Erasure: have your data deleted.
• Objection: object to a processing, for example by using the app without an account.
• Withdrawal of consent: withdraw your permission to send data to AI at any time, in Settings. This applies from version 1.2.5 of the app.

In the app, go to Settings > Danger zone: “Delete my data” erases the data on your device, and “Delete my account” also deletes your account and all your data from our servers.

You can also email us to get a copy of your data or to request its deletion.

11. Contact

For any question about this policy or your data, write to us: