This Privacy Policy describes how TapNode S.A.L. ("TapNode", "we", "us", or "our") handles information in connection with the Zunera mobile application, the website at zunera.click, and related support and analysis services (together, the "Service").
Zunera helps you record nutrition and lifestyle information. Some information remains on your device, while information you submit for online analysis is processed by our servers and service providers. This policy explains that distinction and the choices available to you.
1) Who is responsible for your information
TapNode S.A.L. is the operator of the Service and, where applicable data protection law uses this term, the controller of personal information processed for our own purposes.
For privacy questions or requests, contact:
Website:
https://zunera.click
2) Information you provide
Depending on the features you use, you may provide:
- Profile information, such as age, height, weight, goal weight, activity preferences, and inputs used for general nutrition calculations.
- Nutrition information, including meal descriptions, ingredients, quantities, calorie and macro entries, favourite meals, and daily targets.
- Lifestyle records, including water intake, weight entries, activity entries, and eating-window or fasting preferences.
- Photos that you choose to capture or select, including meal photos and optional photos associated with weight records.
- Optional health-related information, such as conditions or circumstances you choose to record in your profile.
- Messages, attachments, and contact information you send when requesting support.
Health-related information may be sensitive personal information under applicable law. Please provide only information needed for the feature you choose to use.
Recording a health condition does not mean that the Service's general estimates are medically tailored to that condition.
3) Information stored on your device
The app uses local storage for your diary, profile, preferences, saved meals, and associated records. Local records may include technical identifiers and timestamps needed to keep entries consistent.
Local storage is not the same as cloud backup or cross-device synchronisation. Do not assume that we can recover locally stored records if you lose your device, remove app data, or uninstall the app.
Some deleted entries may remain in internal local storage as deletion markers or retained records needed to preserve related history and data consistency. Removing an entry from the visible diary does not necessarily erase every associated local record.
Device backups and operating-system services may retain copies according to your device settings and the relevant provider's policies.
4) Online analysis and artificial intelligence
When you request online AI analysis, the information needed for that request is transmitted to our service and to OpenAI, our AI processing provider.
For meal analysis, this may include:
- The photo or written description you submit.
- Ingredient information, quantities, corrections, or instructions associated with the request.
- An optional country or region context.
- Up to ten recent meal names used as limited recognition context.
We do not need your entire diary to analyse a meal.
If you choose an optional body-analysis feature where available, the submitted images and the profile measurements required by that feature may also be processed online. This is separate from simply attaching a photo to a local weight record.
Avoid including faces, documents, identifying background details, or information about other people in photos unless needed and you have an appropriate right to share it.
OpenAI processes submitted information under the applicable service agreement and its data-handling policies. Its API documentation states that API data is not used to train its models by default unless the API customer opts in. Provider-side security and abuse-monitoring retention may still apply. Do not assume that an analysis request has zero retention or that all copies are erased immediately after a result is returned.
Further information:
https://developers.openai.com/api/docs/guides/your-data
AI processing produces estimates and does not constitute medical advice or a medical diagnosis.
5) Device permissions, voice, and location
Camera and photo access:
Used when you choose to capture or select an image for an available feature.
Microphone and speech recognition:
Used when you choose voice input. Speech recognition may be processed by your operating system or its speech service under that provider's settings and policies. The resulting text can be used as a meal or activity description.
Location:
When you grant permission, the app can use device location to derive country or region context for regional food recognition. Precise coordinates are not included in the AI model input. Permission denial does not prevent meal analysis.
Network-derived region:
Our infrastructure may derive an approximate country from the network connection where supported.
You can review or revoke permissions in your device settings. Features that need a revoked permission may no longer work in the same way.
6) Technical, purchase, and support information
Our servers and infrastructure providers can process technical information such as IP addresses, request times, app and device information included in requests, operation identifiers, errors, and security or performance diagnostics.
Analysis diagnostics may include submitted food images, descriptions, generated results, and information needed to investigate recognition problems when diagnostic recording is enabled. These materials may remain on our systems beyond the immediate request and are not automatically erased merely because analysis has finished.
Purchases are handled through Apple. We and our subscription infrastructure provider, Adapty, may receive transaction identifiers, receipt-related information, subscription status, product information, and app-related identifiers needed to provide or restore paid access. We do not receive your full payment-card details from Apple.
Support correspondence includes the information you choose to send us. Please avoid sending unnecessary health records or other sensitive attachments.
7) How we use information
We use information to:
- Provide diary, tracking, calculation, and analysis features.
- Return analysis results and process corrections you request.
- Save and display local records and preferences.
- Provide, verify, and restore paid access.
- Answer support and privacy enquiries.
- Investigate failures and recognition problems.
- Protect the Service against abuse and security incidents.
- Meet legal obligations and establish, exercise, or defend legal claims.
Health-related information is used to provide the requested functions. It is not a basis for assuming that the app can safely recommend a diet or fasting schedule for a medical condition.
8) Legal bases where applicable
Where a law such as the UK GDPR or EU GDPR applies, the legal basis depends on the processing activity.
We may rely on:
- Performance of a contract for processing necessary to provide a feature you request.
- Consent for optional processing or permissions where required.
- Legitimate interests in operating, securing, and supporting the Service, subject to your rights and reasonable expectations.
- Compliance with legal obligations.
Where special-category health information is processed and applicable law requires an additional condition, we rely on an appropriate condition, including explicit consent where required.
An operating-system permission is not automatically consent for every possible use of information. Any additional consent required by law must be obtained separately.
You may withdraw consent by contacting us or using the applicable settings. Withdrawal does not affect the lawfulness of processing completed before withdrawal.
9) Who receives information
Information may be received by:
- OpenAI, to process requested AI analysis.
- Hosting, network, and infrastructure providers, to operate the website and analysis service.
- Apple, for App Store purchases and operating-system services.
- Adapty, to support subscription and purchase functionality.
- Support and communications providers, when you contact us.
- Authorities or other recipients where disclosure is legally required or necessary to protect rights and safety.
- Parties involved in a business reorganisation, subject to applicable confidentiality and data protection requirements.
Providers receive information relevant to their functions. Some providers act as processors for us; others, including app stores for their own services, act under their own policies.
We do not sell your personal information. We do not use your meal content, body photos, or health records for targeted advertising.
Adapty's privacy information is available at:
https://adapty.io/privacy/
Apple's privacy information is available at:
https://www.apple.com/legal/privacy/
10) Website information and cookies
The marketing website does not require an account and does not ask you to submit food records or health information.
The website is designed without advertising trackers, optional analytics scripts, or a newsletter form. Hosting and network providers may nevertheless process IP addresses and technical access logs to deliver and protect the website.
Necessary browser storage may be used for basic interface operation. If optional analytics or other non-essential technologies are introduced, this policy and the relevant choices must be updated before their use where required.
Following the App Store link takes you to Apple's service, which is governed by Apple's own policies.
11) Retention and deletion
Local information remains on your device according to the app's storage behaviour and your device settings. Some records, favourites, history, or internal deletion markers may remain after a visible entry is removed.
Server-side analysis inputs, diagnostic materials, technical logs, purchase records, and support messages have different purposes and may have different retention periods.
We assess retention by reference to the purpose of processing, troubleshooting needs, security, legal obligations, and the handling of support or legal claims. We do not promise immediate deletion of uploaded material after an analysis request.
Service providers can apply separate retention periods under their agreements and policies. OpenAI's default API abuse-monitoring retention is generally up to 30 days, with exceptions described in its documentation. This provider-side period is not a statement about the retention period on our own servers.
Contact support@zunera.click to request information about applicable retention or deletion of information held by us. We may need enough information to locate the relevant records and verify your request. We cannot directly remove data that exists only on your device or guarantee deletion of records that must be retained by law.
Uninstalling the app does not cancel an App Store subscription or automatically delete server-side records, provider records, support correspondence, or device backups.
12) Your choices and rights
You can:
- Choose whether to use online analysis.
- Review and edit available local records and preferences.
- Avoid providing optional health information.
- Revoke camera, photo, microphone, speech, or location permissions.
- Manage subscriptions in your Apple account settings.
- Contact us with privacy questions or requests.
Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, or obtain a copy of personal information, object to certain processing, withdraw consent, or complain to a data protection authority.
These rights are subject to legal conditions and exceptions. We may take proportionate steps to verify your identity before responding.
We do not use nutrition estimates to make decisions about your employment, insurance, credit, or access to healthcare.
13) International processing
We and our providers may process information in countries other than your country of residence. Those countries may have different data protection laws.
Where applicable law requires safeguards for an international transfer, the relevant transfer must be supported by an appropriate mechanism, such as an adequacy decision or contractual safeguards. Contact us for information about safeguards applicable to your information.
14) Security
No app, device, or online service can guarantee absolute security.
Protect your device with appropriate access controls and take care when sharing screenshots, exported records, or support attachments. Contact us if you believe information associated with the Service has been accessed or disclosed improperly.
15) Children's privacy
Zunera is not designed as a children's service.
Do not use the Service if you are below the minimum age required by applicable law for the relevant processing unless valid authorisation has been obtained where permitted.
General calorie and fasting estimates are not designed to establish appropriate nutrition for children or adolescents. A qualified healthcare professional should guide nutrition decisions for minors.
If you believe a child has provided information without an appropriate legal basis, contact support@zunera.click so we can investigate and take appropriate action.
16) Changes to this policy
We may revise this policy when the Service, our processing practices, or legal requirements change.
The updated policy will appear on this page with a revised effective date. Where required, we will provide additional notice or request consent before applying a material change.
17) Contact
For privacy questions, data requests, or support:
TapNode S.A.L.
Email:
support@zunera.click
Website:
https://zunera.click