AFYA MANAGEMENT AND INNOVATION
Privacy Policy
Updated September 12, 2026 · Version 2026-09-12
1. Data we handle
We handle Google identifiers and email; display name and user ID; age group, gender, country, prefecture, language and time zone; meals, vegetable goals and weight; groups; device, access and error logs; and photos submitted for AI analysis.
2. Purposes
Data is used for authentication, personal records and suggestions, group features, security, fraud prevention, troubleshooting and improvement, consented statistics or research, legal compliance and support.
3. Photos and retention
Photos are compressed and sent temporarily to OpenAI; they are not stored in Supabase. Profile, vegetable and weight records are kept without a fixed limit while the account exists, then deleted from production and backups within a reasonable period.
4. Providers and international processing
We use Google, Vercel, Supabase, OpenAI, Google AdSense and A8.net (FAN Communications, Inc.) for advertising. Processing may occur outside your country. The database is currently hosted in the Tokyo region. We apply contractual review, access controls and appropriate safeguards.
5. Affiliate advertising
Pages for Japan may display clearly labelled affiliate advertisements. Loading an ad or measurement image may send A8.net and related providers information such as IP address, browser or device information and referrer. We do not add your email, user ID, meal photos, vegetable records or weight records to affiliate links.
6. Display advertising
Public pages that do not require login may use Google AdSense. Google and its partners may process cookies or online identifiers, IP address, browser or device details and pages viewed for ad delivery, measurement and fraud prevention. We do not attach or send email, user ID, meal photos, vegetable, weight or meal records to advertising providers. Display ads are currently excluded from personal records, weight and group pages.
7. Your rights
You may view or correct records, withdraw research consent, delete your account, and make access, correction or restriction requests available under applicable law. Material changes will be notified and renewed consent obtained where required.