Last Updated Date: October 26,2026

Effective Date: November 25,2026

 

 

 

Appediet Privacy Policy

 

Welcome to use Appediet, which is provided by Appediet INFORMATION PTE. LTD.. We are committed to protecting the privacy of your data. This Privacy Policy explains what information Appediet collects, use, and disclose about you when you access or use our websites and applications (collectively, “Our Services”).

 

This Privacy Policy covers the following topics:

1. What data do we collect?

2. How we use your data?

3. Security of Your Data

4. How We Store Your Personal Data

5. How We Share Your Personal Data

6. What Are Your Rights and Choices

7. How We Process Children's Data

8. Cookies and Tracking Technologies

9. Cross-border Data Transfers

10. Changes to This Privacy Policy

11. How to Contact Us

12. Additional Notice for California Residents (How We Comply with CCPA)

13. Additional Notice for EU/EEA Residents (How We Comply with GDPR)

14. Additional Notice for Brazilian Residents (How We Comply with LGPD)

1. What data do we collect?

There are three basic categories of data we collect:

(a)Information that you voluntarily provide to us

Registration and login information. When you create your account for registering to use Our Services, depending on how you choose to create it, we may collect your password and e-mail address. In addition, when you log in to your account, we may collect your login information. If you log in with a third-party account, we may collect the third-party account information you choose to associate (Google, Apple ID) to verify your identity, create and maintain your Appediet account, and recognize your account.

User-uploaded content. When you use our services to identify the calories and nutritional information of food, we collect the food images you choose to photograph or upload, or the text descriptions of food that you provide.When you use our daily calorie expenditure and nutrition tracking services, we collect your age, gender, body measurements (such as height and weight), activity level, and your weight and calorie expenditure goals, in order to provide you with personalized goal progress tracking. Please note that we process your uploaded content solely to provide you with storage and technical processing.

Health & Fitness information. We will reads your health and fitness data (such as height, body weight, steps, workout and activity data) from Apple Health (HealthKit) on iOS and from Health Connect on Android with your explicit permission. You can review or revoke any permission at any time in iOS Settings > Privacy & Security > Health, or in Health Connect settings on Android. Revoking permission stops further reading immediately; the feature continues to work with values you enter manually.

Transaction information. If you purchase the paid services provided by us, we may receive information about your transaction such as when it was made or when a subscription is set to expire, as well as the details of the services you purchased.

Input content. When you use AI-related features, we collect the input information and photograph you actively provide in order to provide you with AI-related services, such as AI Chat, AI Food Nutrition Identification and Dietary and Fitness Recommendation Services.

Contact information. We may record your e-mail address when you contact us for service support, making a complaint, suggestion or feedback to us by sending emails to help us keep contact with you for updates and support to resolve your queries for use of our Services.

Help and feedback information. When you submit help and feedback information through the relevant page, we collect the content of your help requests and feedback, including text, images, and contact information, to help resolve your issues and feedback.

(b) Information that is collected automatically

Device data. We collect certain information about the device you use to access Our Services, such as your IP address, mobile carrier, time zone settings, model of your device, the device system, network type, Android ID, identifiers for advertising (such as IDFA for iOS, GAID for Android device), your screen resolution and operating system.

Location Information. When you use our Services, we may infer the generic physical location and geographic regions of your device from your Wi-Fi and other device settings. For example, your IP address may indicate your general geographic region.

Information Collected Using Cookies. Like many website owners and operators, we use automated data collection tools such as Cookies and other similar technologies to collect certain information.

(c) Data we get from third parties.

Social Media and Login Services. If you choose to sign in using third-party social networks or services (Google, Apple ID), we may collect information from those services, including third-party account identifier, email address, and name as part of your Appediet account information. When you choose to sign in to Appediet with Google/ Apple ID, we receive your Google/ Apple ID account identifier, email address, and name, where provided by Google/ Apple. We also receive an ID token to verify your identity.

Information Received from Our Partners and Other Third Parties. We may link your usage behavior information with the data information we receive from our partners or other third parties (such as Firebase provided by Google) to help smoothly facilitate Our Services for you, to better understand your needs and to provide you with better Services experience. Use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Other Sources. We may collect data about you from other publicly available sources.

 

2. How we use your data?

2.1 Legal Basis

We will only use your personal data where it is permitted by law. In most cases, our legal basis will be one of the following:

(a)Contractual necessity: where it is necessary to process personal data in order to perform an agreement with you or to enter into such an agreement (for example, processing data in order to provide daily calorie expenditure and nutrition tracking services);

(b)Legal obligation: where we are under a legal obligation to process your personal data in order to comply with laws and regulations;

(c)Legitimate interests: where we have a reasonable basis to process your personal data and that basis is reasonable when weighed against your rights and interests;

(d)Consent: where you have consented to our processing of your data;

(e)Substantial public interest: where we process sensitive or special categories of data (i.e., data revealing or relating to a person’s health, ethnicity, political opinions, religious beliefs, sexual orientation or other protected characteristics) and the processing is in the substantial public interest (for example, to provide support to vulnerable customers).

2.2 Purposes for Which We Use Your Data

We generally use the information we collect:

(a)To provide, analyze, and maintain our Services;

(b)To fulfill requests for products, services, functionality, support and information for internal operations, including troubleshooting, data analysis, testing, research, statistical, and survey purposes and to solicit your feedback;

(c)To improve and develop Our Services and conduct product development;

(d)To enhance the safety and security of Our Services and to help us detect abuse, fraud, and illegal activity in Our Services;

(e)To communicate with you, including to notify you about changes in Our Services;

(f)To comply with our legal obligations.

We may also use your information for other purposes. We use your information only when we have a valid legal basis.

3. Security of Your Data

3.1We attach great importance to the security of your data and have adopted standard industry practices to protect your data and prevent it from unauthorized access, disclosure, use, modification, damage, or loss. We employ administrative, technical, and physical security controls where appropriate, such as encryption, 2-step verification, and strict contractual confidentiality obligations for employees and contractors.

3.2 If any data incident occurs, We will notify you, pursuant to relevant legal and regulatory requirements, of the basic data about the security incident and its possible impact, measures that We has taken or will take, suggestions about active defense and risk mitigation, and remedial measures. The notification may take the form of an email, text message, push notification, etc. If it is difficult to notify data subjects one by one, we will take appropriate and effective measures to release a Security Notice. In addition, we will also report the handling status of data security incidents as required by supervisory authorities.

3.3 We pay high level to attention to your data security and specially have a commission of data security, which leads and coordinates relevant departments in processing data security and inspects the risk level of data security on a periodical basis; in the meanwhile, the head of the commission will be the Data Protection Officer whose duty includes guarantee of our company-wide performance in fulfilling the commitment of data security, etc. You can contact our Data Protection Officer via email at [email protected].

4. How We Store Your Personal Data

4.1 We will collect, store, and use your personal data in accordance with this Privacy Policy and applicable laws, wherever it is processed.

4.2 When you use Our Services on your devices, your data may be stored locally on the devices you use to access Our Services. When you sync your Devices with our Service, such data will be replicated on our servers maintained by us for processing and storage.

Appediet is a global platform. Depending on the scope of your interaction with the Appediet service, your personal data may be stored in multiple countries/regions. For example, if you are a user in the United States, your personal data is stored in the United States. In addition, when we transfer personal data to other jurisdictions, we will ensure that the transfer of information complies with this Privacy Policy and applicable data protection laws.

4.3 We retain your data for no longer than is necessary for the purposes stated in this Privacy Policy. Once the retention period expires, we will delete or anonymize your data, unless otherwise required by applicable laws and regulations.

5. How We Share Your Personal Data

Unless otherwise provided below or unless you consent to our doing so, we will not transfer your personal data to third parties. We only share your data with selected recipients where reasonably necessary, and such recipients include:

(a) Sharing with our affiliates

We share your personal data within our corporate group in order to provide Appediet to you and to help us achieve the purposes described in the “How we use your data?” section above.

(b) Sharing with third parties

Our services may contain third-party content and integrations (Third-party Services) to provide you with better service. We will only share your information in the following situations – and then only the minimum information necessary:

We share your information with service providers who process data on our behalf to perform services related to our Services. For example: Apple Pay , Google Pay and Stripe to complete your payment transactions when you pay for the paid services provided by us.

We share your information with software development kit (SDK) providers to operate, develop, and improve the features and functionality of Our Services. For example: Firebase (analytics and reporting services provided by Google) to assist us in analyzing how Our Services are used.

When you use AI-related features(including AI Chat, AI Food Nutrition Identification and Dietary and Fitness Recommendation Services), we will collect the input data and files you actively provide and share them with third-party AI services (such as Gemini, GPT). Please rest assured that neither we nor our third-party providers will use the content you upload to train AI models.

(c) Business transfer.

As our business continues to develop, we may sell or acquire other businesses or services. In such transactions, personal data is generally one of the transferred business assets, but remains subject to the commitments made in any pre-existing privacy policy (unless you otherwise agree). In addition, in rare cases, if Appediet or substantially all of its assets are acquired, your data will of course also be one of the transferred assets.

(d) Government, public-sector, regulatory, judicial, and law-enforcement bodies or authorities.

In certain circumstances, we are required by law to disclose your data, including (i) to comply with a legal obligation or requirement, such as a court order, subpoena, or other legal process; (ii) to enforce our terms; (iii) to handle matters relating to security or fraud; or (iv) in an emergency involving a risk of death, serious physical injury, or any risk of harm to children.

To protect the security of your data, we encourage you to review the privacy policies of every Third-party Service that you visit or use, including those third parties you interact with through our services. You can learn more about Third-party Services in Appediet by clicking [List of Third Parties].

We will ensure that the lawfulness of this sharing and sign stringent non-disclosure agreements (NDAs) and/or data processing clauses with the companies, organizations, and individuals with whom the data is shared, requiring them to comply with this Privacy Policy and take appropriate confidentiality and security measures when processing the data.

6. What Are Your Rights And Choices

You can control and manage your data, you have the following rights and choices:

(a) Access, Correction, and Portability. You can access and edit most of your basic account data right in Appediet. If you would like us to correct personal information that you cannot correct using your own account, please contact us. If we agree to correct your personal information, we will take reasonable steps to inform any third parties to whom we have disclosed the relevant personal data so that they can also correct it.

You have the right to receive a copy of certain of your data in a structured, commonly used and machine-readable format. If you need to do so, please contact us. You also have the right to request that we transfer this personal data to another party. If you would like us to transfer your personal data to a third party, please make sure you provide the details of that third party. Please note that we can only carry out such a transfer where it is technically feasible. Once the third party has received the personal data, we are no longer responsible for its security or its processing.

(b) Withdraw your consent. In most cases, if you let us use your data, you can simply revoke your permission by changing the settings in the app or on your device if your device offers those options. Of course, if you do that, certain services may lose full functionality.

Many Appediet services include settings that let you control how your data is used. You can choose not to provide certain data, but then you may not be able to use certain Appediet services.

(c) Deletion

If for some reason you ever want to delete your account, you can contact us.

You can also delete some information in the app, like your historical conversation records.

You may request that we delete the data we hold about you where: (i) you believe that it is no longer necessary for us to hold your data; (ii) we obtained your consent to process the data and you withdraw that consent (and we have no other valid legal grounds for processing the data); (iii) you believe we are unlawfully processing your data; or (iv) you are or were under the age of 18 (or such applicable age of majority under relevant local laws) when we collected the data and we can verify this.

If we have sufficient legal grounds (for example, for the defense of legal claims, freedom of expression, or other legal obligations), we may retain personal data, but if that is the case, we will notify you.

If you have requested that we delete personal data that you made public and there is a lawful ground for deletion, we will take reasonable steps to inform any third parties to whom we have disclosed the relevant personal data so that they can also delete it.

(d) Restrict processing

If you want to restrict the processing of your personal data, please contact us. You have the right to restrict the processing of your data under the following circumstances: (i) your data is unlawfully processed, but you do not want to erase it; (ii) you have a legal claim that you need to establish, exercise, or defend, and you requested us to keep your data when we would not otherwise keep it; your request for objection is pending our verification process; or (iii) you have contested the accuracy of your personal data, and the accuracy of your data is pending our verification process.

(e) Right to object

If we use your personal data to pursue our legitimate interests (for example, where we use your personal data to ensure account security), you may object to our use of your personal data. If you object to this processing, please contact us.

To the extent permitted by applicable laws and regulations, you may withdraw any consent you previously provided to us in accordance with the instructions set out in this Privacy Policy.

Because your privacy is important to us, we will ask you to verify your identity or provide additional information before allowing you to manage your data. We may also reject your request to your data for a number of reasons, including, for example, if the request risks the privacy of other users or is unlawful.

7. How We Process Children's Data

The products under the Appediet account system are not offered to minors (we consider a child to be an individual under the age of 18 or the equivalent age specified by the law of your jurisdiction). If a minor (we consider a child to be an individual under the age of 18 or the equivalent age specified by the law of your jurisdiction) creates an account or uses this Service, we will collect your personal data, but you must first obtain the consent of your parent/legal guardian. If you are a minor, you must first obtain the consent of your parent/legal guardian. Please contact our Data Protection Officer via email at [email protected] if you believe we have any personal information from any Child without such parental/guardian consent and acknowledgment so that we can promptly investigate and remove such personal information.

8. Cookies and Tracking Technologies

Our websites and applications use small files called cookies, as well as similar technologies such as browser local storage. Details of the cookies and related technologies we use and their purposes are as follows:

These technologies enable you to use logged-in features, such as staying signed in and remembering your learning language preference and quiz progress, and are also used for usage statistics and fault diagnosis. Disabling them may affect your experience on the website. Information automatically collected includes your IP address, device and browser information, a randomly generated client identifier, and your login credentials.

Our language cookie is retained for 365 days; other cookies are retained until you sign out or clear your browser data.

9. Cross-border Data Transfers

To bring you Our Services, we operate globally and we will comply with the applicable data protection laws and regulations in your country/territory to collect, use and process your personal data. For example, if you are a user in the United States, your personal data is stored in the United States. In connection with the purposes described herein, where necessary to provide our services, we may transfer your personal data to countries/territories outside your countries/territories, we will take appropriate safeguards to ensure that your personal information will remain protected in accordance with this Privacy Policy.

When transferring data from the EEA, the United Kingdom, or Switzerland to non-EEA countries, we rely on one or more of the following legal mechanisms: Standard Contractual Clauses, and the European Commission’s adequacy decisions about certain countries, as applicable.

10. Changes to This Privacy Policy

We may change this Privacy Policy from time to time. Under certain circumstances (for example with certain material changes or where it is required by applicable privacy laws) we will provide notice to you of these changes and, where required by applicable law, we will obtain your consent. If we change this Privacy Policy, we will change the “last updated” date at the top of this Privacy Policy and the revised policy will be posted to this page so that you can review it. Sometimes, we’ll let you know by revising the date at the top of the Privacy Policy that’s available in Appediet. Other times, we may provide you with additional notice (such as providing you with an in-app notification).

11. How to Contact Us

If you have any questions or complaints regarding this Privacy Policy or the use of your data, please contact our Data Protection Officer via email at [email protected].

13. Additional Notice for California Residents (How We Comply with CCPA)

The California Consumer Privacy Act (CCPA) enhances privacy rights and consumer protection for individuals who reside in California. We are committed to full CCPA compliance.

What are your rights under the CCPA?

If you are a resident of California, the CCPA grants you the following rights:

You are entitled to make two information requests within a 12-month period. If you make an information request, we will need to collect certain information from you in order to verify your identity. You will receive a response to your request within 45 days.

Opt-Out Options

If you don’t want us to collect and/or process your information any more please contact us at [email protected]. Note that if you decide to opt out of data collection and processing this can affect some functions and you may not be able to use all features of Our Services to the fullest extent possible.

How can You submit a personal information request?

You can submit a personal information request via email at [email protected].

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable request related to your personal information. For all requests, we will need to collect certain information from you in order to verify your identity.

14. Additional Notice for EU/EEA Residents (How We Comply with GDPR)

The General Data Protection Regulation (GDPR) regulates the processing of personal data about individuals in the European Union. We are committed to full GDPR compliance.

What are your rights under the GDPR?

You have many rights relating to your personal information. Additional information on your rights can be requested directly from the data protection regulator within your country. Your rights include:

The right to object to processing. You have the right to object to certain types of processing, including processing for direct marketing.

The right to be informed. You have the right to be provided with clear, transparent, and easily understandable information about how we use your information and your rights (such as the information provided in this policy).

The right of access. You have the right to request access to your information and certain other information relevant to how your information is attained and used.

The right to rectification. You are entitled to have your information corrected or amended if it is inaccurate or incomplete.

The right to erasure. This right, also known as “the right to be forgotten,” allows you to request that your information be permanently deleted or removed if you feel that you no longer want us to keep and use it. There can be exceptions to this dependent upon the situation.

The right to restrict processing. You have the right to block or suppress the further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be blocked to make sure the restriction is respected in future.

The right to data portability. You have the right to obtain and reuse your personal information for your own purposes across different services. For example, if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our information technology systems and theirs safely and securely, without affecting its usability.

The right to lodge a complaint. You have the right to lodge a complaint about the way we handle or process your personal information with your national data protection regulator.

The right to withdraw consent. If you have given your consent to anything we do with your personal information, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal information with your consent up to that point is unlawful). This includes your right to withdraw consent to us to use your personal information for marketing purposes.

The right to refuse automated decision-making. We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. For personalized advertising recommendations, we perform automated matching based on your browsing behavior and interest tags, but this process does not affect any of your legal rights or material interests. You can turn off personalized advertising on the relevant page in accordance with the applicable guidance.

If you make a request regarding your rights, we have one month to respond to you. If you would like to exercise any of the above rights, you can contact us via email at [email protected].

 What information do we retain after account closure?

After your account is closed, we may need to retain certain information for a period of time for legal and legitimate business purposes. For example, we may retain your personal data for tax and accounting purposes, such as your contact details (for example, your email address) and any invoices Appediet has sent you (for example, purchase records). Where necessary, Appediet may also retain records of our communications with you and related logs (for example, your account-closure log) for dispute resolution. In addition, we may retain records to prevent fraud and ensure security, for example in the event of abuse of our Services or violation of our terms.

How do we comply with data transfer rules?

When transferring data from the EEA, the United Kingdom, or Switzerland to non-EEA countries, we rely on one or more of the following legal mechanisms: Standard Contractual Clauses, and the European Commission’s adequacy decisions about certain countries, as applicable.

How to contact us?

If you have any questions about this privacy policy or if you would like to exercise any of your rights, you may contact our Data Protection Officer via email at [email protected].

15. Additional Notice for Brazilian Residents (How We Comply with LGPD)

The Brazilian Privacy statute, Lei Geral de Proteção de Dados (LGPD), enhances privacy rights and consumer protection for individuals who reside in Brazil. We are committed to full LGPD compliance.

 

Your Brazilian privacy rights

You have the right to:

You will never be discriminated against, or otherwise suffer any sort of detriment, if you exercise your rights.

How to file your request

You can file your express request to exercise your rights free from any charge, at any time, by using the contact details provided in this Privacy Policy, or via your legal representative.

Transfer of personal information outside of Brazil permitted by the law

We are allowed to transfer your personal information outside of the Brazilian territory in the following cases:

 

Click to view previous versions