Privacy Policy

In short

Hapka helps you log food and see calories + protein. Your food and health-related entries are yours. When you log a meal, the text you typed may be sent to an AI service to read the foods - without your name or account details. You can export or delete everything at any time. We do not show ads and do not sell your data.

1. What we collect

• You give us: sex, age, height, weight, activity level, goal and pace, your "why", daily calorie/protein targets, optional safety-screen answers, water goal, and language.

• From using the app: meals you log (the text you type and the parsed items), weight and optional body measurements, water, optional hunger check-ins, saved meals, and the food preferences Hapka infers from what you log.

• Waitlist (if you join): your email address and which landing page you came from.

• Technical: basic, non-identifying product analytics (e.g. that a meal was logged). We do not put your name, email, weight, or goals into analytics.

2. Where it is stored

Without an account, your data is stored only on your device (in this browser or app). If you sign in, it is also stored in our database hosted in the EU (Frankfurt) so it can sync between your devices, with access restricted to your own account. Meal photos are never uploaded and stay on the device either way.

3. AI processing of meal text and photos

When the app can't read a meal locally, the text you typed is sent to our AI provider (Anthropic) to identify foods and portions. It is sent without your name or account details, is not used to train AI models (per our provider's API terms), and no conversation history is retained there. Barcode scans send only the barcode number to the public Open Food Facts database. Nothing else (weight, goals, history) is ever sent to third parties for this.

Meal photos stay on your device by default: they are kept only in this app and are never uploaded automatically. If you tap "Recognize" on a photo, that one image is sent to the same AI provider under the same terms, to identify the foods in it. The photo is not stored on our servers, and photos older than about 60 days are removed from your device automatically. A photo can capture more than the food in front of you - send only the ones you are comfortable sharing.

4. Why we may process health-related data

Nutrition and weight data can be health-related ("special category") data under GDPR. We process it only with your explicit consent, given at sign-up, to provide the logging, history, and suggestion features you ask for. You can withdraw consent any time by deleting your data (Settings - Delete everything).

5. Profiling

Hapka learns which foods you log often so it can suggest meals you actually like. This profiling stays within your account and is used only to power suggestions - not for advertising or any decision with legal effects.

6. Who processes data for us

We use service providers strictly to run the app: Vercel (hosting), Supabase (database, EU), Anthropic (AI reading of meal text and, when you tap Recognize, meal photos), Open Food Facts (public food data), and Stripe (payments if you become a founding member). Each acts under its own terms/data agreements. We do not sell your data or share it for advertising.

Sharing you control: when you create a share link - a read-only day or targets summary, or a coach link - anyone who holds that link can view the data it contains, so send it only to people you trust. A coach link shows what you choose (everything, or only daily totals and weight), updates as your data does, and you can stop it or generate a new one at any time, which immediately disables the old link.

7. Your rights (GDPR)

You can access your data, correct it, export it (Settings - Export JSON), delete it (Settings - Delete everything), restrict or object to processing, and withdraw consent. You may also complain to the Bulgarian supervisory authority, the Commission for Personal Data Protection (CPDP). To exercise any right, contact admin@hapka.app.

8. Retention

We keep your data while your account/installation is active. Delete it any time and it is removed. Waitlist emails are kept until launch or until you unsubscribe.

9. Children

Hapka is for adults (18+) and is not directed at children. It does not provide calorie recommendations to minors.

10. International transfers

Some providers (e.g. AI processing) may process data outside the EU/EEA. Where they do, appropriate safeguards (such as Standard Contractual Clauses) apply.

11. Security

We use reasonable technical measures to protect your data. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.

12. Changes

We may update this policy; we will post the new effective date here and, for material changes, notify you in the app.

13. Contact

admin@hapka.app