Privacy Policy

Last updated: August 21, 2026

This Privacy Policy explains how Kuzbu ("we", "us") collects, uses, and protects your information when you use the Kuzbu app and website. Kuzbu is operated by Sinan Kanat (individual developer), who acts as the data controller for your personal data.

1. Information we collect

• Account information — your name, email, and the sign-in provider (Apple or Google) you use.
• Health & nutrition data — the goals, body metrics, meals, calories, macros, activity, and fasting windows you enter.
• Photos, videos & voice — when you log a meal by photo, video, or voice, we process that media to recognize the food. Meal photos are stored on our servers together with the recognition result, so that you can review the entry later and so that we can investigate incorrect results and improve recognition accuracy. Camera, microphone, and photo access are only used when you start one of these features.
• Kuzbu Meds data — if you choose to turn on this section: medication and supplement names, doses, reminder times, and intake records.
• Usage & diagnostic data — how you interact with the app, plus crash and performance data, for reliability and improvement. Your IP address accompanies your consent record.
• Advertising data — in the free version, our ad provider (Google AdMob) may collect your device advertising identifier and coarse (approximate) location to serve and measure ads, subject to your consent (see section 5).

2. How we use your information

• To calculate your nutrition goals and show your progress.
• To operate, maintain, and improve the app.
• To respond to support requests.

3. How we protect it

Your data is encrypted in transit. Medication and supplement names and notes you enter in Kuzbu Meds are additionally encrypted at rest with AES-256-GCM, and are never sent to analytics, crash reporting, or logging systems. Your other data is held on servers with restricted access. We do not sell your personal data.

Staff access. Authorised personnel operating Kuzbu can access stored meal photos and their recognition results through an internal administration tool. This access is used only to investigate incorrect recognition results, respond to a support request you raise, or address abuse and security incidents — never for advertising or profiling. Each access is recorded in an internal audit log.

4. Sharing & third-party services

We share data only with the service providers that help us run Kuzbu, under contract and where required by law. We do not sell your personal data. The main processors we use are:

• Google (Gemini AI service) — to recognize your meal photo, video, voice recording, or the food text you type.
• Hosting & storage — our own servers and Cloudflare (R2 storage and image CDN) to run the service and store your content.
• RevenueCat — to manage subscriptions and purchases. Receives a purchase token and an anonymous app user ID; it does not receive your health data.
• Google AdMob — to show ads in the free version. Depending on your consent, AdMob may access your device advertising identifier (IDFA/AAID) to measure and personalize ads.
• Analytics (PostHog) — to understand usage and improve reliability, using usage and device data.
• Sign-in providers (Apple, Google) — to authenticate you when you choose that login.

5. Advertising & tracking

The free version of Kuzbu shows ads through Google AdMob. On iOS we ask for your permission (App Tracking Transparency) before any tracking, and in the EU/UK we show a consent (UMP) form; if you decline, you still see ads, but non-personalized ones. Your food, weight, nutrition, and other health data is never used for advertising, marketing, or shared with advertisers for targeting. You can change your ad consent at any time from Profile.

6. Your rights

You can access, correct, export, or delete your data at any time from Profile → Account, or by emailing [email protected]. Deleting your account permanently removes your personal data — see How to delete your account for details.

Depending on where you live, you may have additional rights under laws such as the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), or the Turkish Personal Data Protection Law (KVKK, see our KVKK notice) — including the right to know what data we hold, to request deletion, and to lodge a complaint with your local supervisory authority. We honor these requests regardless of your location, and we do not discriminate against you for exercising them. We do not sell or share your personal data as defined by the CCPA.

7. Data retention

We keep your data while your account is active. After deletion, we remove it within a reasonable period, except where retention is legally required.

Some categories are removed on a fixed schedule even while your account stays active:

• Meal photos — deleted 90 days after upload. The nutrition entry they produced (calories, macros, food name) stays in your diary.
• Usage & diagnostic events — deleted after 180 days.
• Internal audit records (including staff access described in section 3) — deleted after 365 days.

8. Children

Kuzbu is not intended for children under 13 (or the minimum age in your country). We do not knowingly collect their data.

9. Changes

We may update this policy. Material changes will be announced in the app or on this page with a new "last updated" date.

10. Contact

Questions? Email [email protected].
Data controller: Sinan Kanat (individual developer), operating Kuzbu.