ZHEVATPrivacy policy
Last updated: 15 October 2026
ZHEVAT is a calorie and nutrition tracking app with an avocado mascot. This policy explains what data we process, why, and the choices you have.
What we collect
| Data | Why | Where it lives |
|---|---|---|
| Email address, Apple or Google account ID | Sign-in and sync between your devices | Supabase (EU, Ireland) |
| Profile: sex, birth date, height, weight, activity, goal | Calculating your calorie and macro targets and forecasts | Your phone; Supabase when signed in |
| Food diary, products, dishes, weight log, achievements, mascot outfit | Core features and sync | Your phone; Supabase |
| Progress (body) photos | Your progress timeline | Only on your phone by default. Uploaded to a private cloud folder only if you turn on “Keep progress photos in the cloud”. Never public; opened only through short-lived signed links. |
| Photos of nutrition labels and meals | Reading nutrition values with AI | Sent to the Google Gemini API for analysis and not stored by us afterwards |
| Subscription status | Unlocking Premium | Apple App Store or Google Play, RevenueCat, Supabase |
We do not sell your data, show ads, or use your photos to train AI models. We use the paid tier of the Gemini API, under which Google does not use the content to improve its products.
Service providers
- Supabase — database, sign-in and file storage (EU region).
- Google Gemini API — analysis of label and meal photos.
- Open Food Facts — barcode lookups (only the barcode is sent).
- RevenueCat, Apple, Google — subscriptions and payments. We never see your card.
- Expo — app builds and updates.
Health information
Body measurements, weight and food intake are health-related data. We process them only to provide the features you use, based on your consent when you enter them. ZHEVAT is not a medical device and does not give medical advice.
Your rights
- Export: Profile → Export data gives you a file with all your data.
- Delete: Profile → Delete account erases your account, diary, photos and everything else from our servers and from the phone, immediately and permanently. See Delete account.
- Access, correction, objection under the GDPR and similar laws: write to privacy@zhevat.com.
Retention
Your data is kept while your account exists. Deleting the account removes it from our database and storage at once; backups held by our database provider expire within their retention window.
Children
ZHEVAT is not intended for children under 16.
Changes
We will announce material changes in the app before they take effect.