Your diary stays on your phone.

01Information we process

Diary & profile

Meals, foods, nutrition values, meal photos, water and weight entries, goals, categories, preferences and settings stored on your device. If you create an automatic profile, this also includes age, height, sex, activity level, target weight and pregnancy or breastfeeding status.

Photo analysis

A meal photo and analysis prompt when you submit a photo; the resulting estimate is returned for your review.

Access & scan records

A pseudonymous app identifier created without sign-in, request status, scan allowance and usage counters, cost-control records, request timing and outcome, and app-integrity data used to verify genuine app requests.

Purchases

Subscription status and purchase information handled by the app store and subscription-management providers. We do not receive your full payment-card number.

Diagnostics

Crash reports may include error details, stack traces and technical device or app information. Firebase Crashlytics is used for fatal app errors. Provider-side data fields and retention depend on its settings.

Network

Service providers may receive your IP address and technical request or connection metadata when your device connects to the app services.

Support

The message, contact details and attachments you choose to send us.

Smak is developed and operated by Vladyslav Boiko, a registered individual entrepreneur (ФОП) in Ukraine. HexioLab is the brand name used for the app. “We”, “us” and “our” refer to this operator.

02Why we process information

We use information to provide meal logging and photo analysis, save your diary on your device, calculate and display targets, check scan and subscription access, process purchases and restores, prevent duplicate or abusive requests, control service costs, investigate crashes and answer support requests.

Where applicable law requires a legal basis, we process information to provide features you request, to protect and maintain the service, with your consent where required, or to meet legal obligations. You may withdraw consent for processing that relies on it.

03Service providers

We share information with service providers only as needed to operate Smak. These include:

• AI analysis providers, which receive photos and prompts you submit;
• Cloud and app-service providers, which support app identity and integrity checks, backend processing and limited scan records;
• Crash-reporting providers, which receive diagnostic information when an app error is reported;
• Subscription-management providers and app stores, which handle subscription access, purchases, billing and restores.

Providers may process information in countries where they or their infrastructure operate, under their applicable terms and privacy practices. We may also disclose information when required by law or needed to protect users, the service or our legal rights.

04Local data and photo analysis

On your device

Your meals, profile, settings and photos are stored in the app's local database and private app files. Smak creates a pseudonymous identifier for scan access without requiring sign-in, but does not sync diary history to an account or cloud backup. Device backup services may separately include app data according to your device settings.

When you scan a photo

The app sends it to our service, which checks app identity and subscription access and forwards the image with an analysis prompt to an AI provider. Our service does not save the photo as a file or in its database. The request is configured not to store the generated response for later retrieval.

The provider's standard API controls may retain prompts, images, responses and related data for up to 30 days for abuse monitoring, unless a longer period is required by law or reasonably needed to protect the service or others. API data is not used to train models by default. If the provider detects an image as potentially showing child sexual abuse material, it may retain that image for manual review.

05Your choices and privacy requests

You can use manual meal logging without photo analysis, edit or delete diary entries, and clear locally stored data in Smak Settings. You can manage or cancel a subscription through the store where you purchased it.

Depending on where you live, you may have rights to ask for access to, correction or deletion of personal information, to object to or restrict certain processing, or to withdraw consent.

Because Smak has no sign-in account, your email alone may not identify an app installation; we may ask for reasonable information to locate relevant records. We review requests for information we can identify and control. We cannot retrieve diary data stored only on your device. Store-held payment records may require a separate request to the store.

06Retention and security

Local diary & photos

Remain on your device until you delete them, clear app data or remove the app.

Temporary analysis results

Expire after 15 minutes. A cleanup process runs every 15 minutes, so removal may occur after expiry.

Request metadata, scan counters & budget records

No automatic expiry configured; may remain stored until deleted.

AI provider abuse monitoring

May retain prompts and responses for up to 30 days, subject to legal and safety exceptions.

Crash reports

Handled by the crash-reporting provider. The current retention period has not been verified.

We use access controls and encrypted network connections for service requests. No storage or transmission method is completely secure.

07Children

Smak is intended for adults aged 18 and older. The app does not allow profile ages below 18. If you believe a person under 18 has provided personal information through support or another service feature, contact us so we can review the request.

08Updates and contact

We may update this policy when the app or its data practices change. The date above identifies the latest revision. Where required, we will provide additional notice or request consent; this policy is not a substitute for consent.

Privacy questions and requests: smak@hexiolab.com.