Privacy Policy – Grindfuel

1. Introduction

This Privacy Policy explains how Neznaika (“we”, “us”, “our”) collects, uses, and protects your personal data when you use the Grindfuel mobile application (“App”, “Service”). Grindfuel is an AI-powered calorie and nutrition tracker that uses photo recognition to identify dishes and calculate their caloric value and macronutrients (proteins, fats, carbohydrates).

By using the App, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please do not use the App.

Important notice regarding sensitive health conditions: If you have or have had an eating disorder (including anorexia, bulimia, or binge eating disorder), are managing a medical condition that requires strict dietary control (such as diabetes or severe food allergies), or are pregnant or breastfeeding, please consult a qualified healthcare professional before using this App. The App is a general wellness tool and is not designed to substitute medical supervision.

2. Data Controller

The data controller responsible for your personal data is:

Name: Iurii Rasskazov
Business name: Neznaika
Country: United Arab Emirates (AE)
Contact email: th17thaiapps@gmail.com

3. What Data We Collect

3.1 Data You Provide Directly

Name and email address (upon registration or sign-in)
Age, gender, height, weight, and fitness goals (for personalised nutrition calculations)
Food diary entries, meal logs, and notes you add manually
Photos of food you upload for AI-based dish recognition

3.2 Biometric and Health-Related Data

The App collects body metrics you voluntarily provide, including height, weight, age, and body composition data. In certain jurisdictions (including but not limited to the state of Illinois, USA, and the state of Texas, USA), such data may be classified as biometric or sensitive personal data subject to additional legal protections.

We collect this data solely to provide personalised nutrition calculations. We do not sell, lease, or profit from your biometric or health data. We do not share it with third parties except as described in Section 7. You may request deletion of this data at any time by contacting us at th17thaiapps@gmail.com.

3.3 Data Collected Automatically

Device type, operating system, and unique device identifiers
App usage statistics, session duration, and feature interactions
IP address and approximate location (country/region level)
Crash reports and diagnostic data

3.4 Data Processed by AI

When you photograph a dish, the image is transmitted to our backend powered by the Claude AI model (developed by Anthropic, PBC, USA). The image is processed solely to identify the dish and estimate its nutritional values.

Food images are transmitted to Anthropic’s API servers over an encrypted connection (TLS/HTTPS)
Images are not stored on Anthropic’s servers after the recognition request is completed, in accordance with Anthropic’s API data handling policy
We do not use your food images to train any AI models
Images are not stored on our servers after processing unless you explicitly save them to your personal diary within the App
Anthropic acts as a data processor on our behalf and processes data only as instructed by us

You can review Anthropic’s privacy and data handling practices at https://www.anthropic.com/privacy.

4. How We Use Your Data

We use your data for the following purposes:

To provide and personalise the core features of the App, including calorie tracking and nutritional analysis
To analyse food photos using AI (Claude by Anthropic) and return dish identification and nutrition estimates
To calculate your daily nutritional needs based on your profile data
To improve App performance, fix bugs, and develop new features
To communicate with you regarding updates, support requests, or important notices
To comply with applicable laws and regulations

We do not use your data for automated decision-making that produces legal or similarly significant effects.

5. Legal Basis for Processing

We process your personal data on the following legal grounds:

Performance of a contract — to deliver the services you have requested through the App
Your explicit consent — for health and biometric data, and for optional features and marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing
Legitimate interests — to improve the App, ensure security, and prevent fraud, where such interests are not overridden by your rights
Legal obligation — to comply with applicable laws

For users in the European Economic Area (EEA): the processing of health-related data (Article 9 GDPR) is based on your explicit consent, which you provide at the point of entering such data into the App.

6. AI-Powered Features and Third-Party Processing

Grindfuel uses the Claude AI model provided by Anthropic, PBC (USA) to power its dish recognition and nutritional analysis feature. When you take or upload a food photo:

The image is securely transmitted to Anthropic’s API servers for processing
Anthropic processes the image to identify the food item and estimate nutrition values
The result is returned to the App and displayed to you
Anthropic acts as a data processor on our behalf and is contractually bound to process data only for this purpose

Important limitations of AI recognition: AI-generated results are estimates only. Recognition accuracy depends on image quality, lighting, dish complexity, and other factors. Do not rely on AI nutritional estimates as the sole basis for medical, dietary, or allergy-related decisions. We are not liable for inaccuracies in AI-generated results.

We do not sell or share your food images or personal data with Anthropic for any purpose other than processing your specific recognition request.

7. Data Sharing and Disclosure

We do not sell your personal data. We may share your data only in the following circumstances:

Service providers: with trusted third-party providers (e.g. cloud hosting, analytics, AI processing) who act as data processors and are contractually bound to protect your data and use it only as instructed
Legal requirements: when required by law, court order, or governmental authority
Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity; we will notify you before such transfer and provide an option to delete your account
With your consent: for any other purpose only with your explicit prior consent

We never share biometric or health data with advertisers, data brokers, or analytics companies for commercial profiling purposes.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. Specifically:

Account data is retained until you delete your account
Food diary and meal logs are retained for the duration of your account and permanently deleted within 30 days of account deletion
Food photos submitted for AI recognition are not retained on our servers after processing unless you explicitly save them to your diary
Biometric data (height, weight, body metrics) is deleted upon account deletion
Anonymised and aggregated analytics data, which cannot be linked to any individual, may be retained indefinitely

You may request deletion of your account and all associated data at any time by contacting us at th17thaiapps@gmail.com. We will process your request within 30 days.

9. Data Security and Breach Notification

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

Encryption of data in transit (TLS/HTTPS)
Encryption of sensitive data at rest
Restricted access to personal data on a strict need-to-know basis
Regular security reviews of our systems and third-party providers

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify affected users without undue delay and, where required by applicable law, notify relevant supervisory authorities within 72 hours of becoming aware of the breach.

No method of transmission over the Internet or electronic storage is 100% secure. While we take data security seriously, we cannot guarantee absolute security.

10. Your Rights

Depending on your country of residence, you may have the following rights regarding your personal data:

Right of access — to obtain a copy of the personal data we hold about you
Right to rectification — to correct inaccurate or incomplete data
Right to erasure — to request deletion of your data (“right to be forgotten”)
Right to restriction — to limit how we use your data in certain circumstances
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interests or direct marketing
Right to withdraw consent — at any time, without affecting the lawfulness of prior processing
Right not to be subject to automated decisions — we do not make solely automated decisions that significantly affect you

To exercise any of these rights, please contact us at th17thaiapps@gmail.com. We will respond within 30 days of receiving your request. We will not charge a fee for reasonable requests.

If you are located in the EEA and are unsatisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

11. Children’s Privacy (COPPA and GDPR-K)

The App is not intended for children under the age of 13. For users in the European Economic Area, the minimum age is 16, unless the applicable national law provides for a lower age (but no lower than 13).

We do not knowingly collect personal data from children below the applicable minimum age. The App does not include a mechanism for independent age verification. By creating an account, you represent that you meet the minimum age requirement, or that a parent or legal guardian has reviewed and consented to these terms on your behalf.

If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately at th17thaiapps@gmail.com. We will delete such data promptly upon verification.

12. Health-Related Data and Eating Disorder Safety

The App processes sensitive health-related information that you voluntarily provide, including body weight, height, calorie intake, and dietary habits. We treat this data with heightened care.

Medical disclaimer: The App does not provide medical advice, diagnosis, or treatment. All nutritional information and calorie estimates are for general informational purposes only. Always consult a qualified physician, registered dietitian, or other licensed healthcare professional before making changes to your diet, especially if you have a diagnosed health condition.

Eating disorder warning: Detailed calorie tracking tools can be harmful for individuals with or at risk of eating disorders, including anorexia nervosa, bulimia nervosa, orthorexia, and binge eating disorder. If you or someone you know may be struggling with an eating disorder, please seek professional help. Resources include the National Eating Disorders Association (NEDA) helpline: 1-800-931-2237 (USA), or contact a local healthcare provider.

Allergy and medical condition warning: AI-generated dish recognition results are approximations and may not correctly identify all ingredients, allergens, or preparation methods. Do not use the App as the sole means of managing food allergies, intolerances, or medically prescribed diets. Always verify ingredients independently.

13. International Data Transfers

Your data may be processed on servers located outside the United Arab Emirates, including in the United States (Anthropic’s API servers) and other countries where our infrastructure providers operate. These countries may have data protection laws that differ from those in your country of residence.

Where we transfer personal data internationally, we take appropriate safeguards to ensure it remains protected, including relying on the recipient’s contractual commitments to handle data in accordance with applicable privacy standards.

For users in the EEA: transfers to the United States are made on the basis of standard contractual clauses or other lawful transfer mechanisms as applicable.

By using the App, you acknowledge that your data will be processed in the countries described above.

14. Users in Specific Jurisdictions

14.1 European Economic Area (GDPR)

If you are located in the EEA, you have rights under the General Data Protection Regulation (EU) 2016/679. Our processing of your data complies with the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity. You may lodge a complaint with your local supervisory authority if you believe your rights have been violated.

14.2 California, USA (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, disclose, and sell (we do not sell personal information). You have the right to request deletion of your personal information and the right not to be discriminated against for exercising your privacy rights. To submit a request, contact us at th17thaiapps@gmail.com.

14.3 Illinois and Texas, USA (Biometric Data Laws)

If you are a resident of Illinois or Texas, body metric data you provide (including weight and height used in conjunction with fitness calculations) may be subject to the Illinois Biometric Information Privacy Act (BIPA) or the Texas Capture or Use of Biometric Identifier Act (CUBI). We collect such data only with your consent, do not sell it, and delete it upon account termination. If you have questions about your rights under these laws, contact us at th17thaiapps@gmail.com.

14.4 European Union — Consumer Rights (Right of Withdrawal)

EU and EEA consumers may have a statutory right of withdrawal from paid subscriptions within 14 days of purchase under applicable consumer protection law, subject to platform-specific rules of the Apple App Store or Google Play Store.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you within the App or by email at least 14 days before the changes take effect. The updated policy will be effective as of the date indicated at the top of the document.

Your continued use of the App after the effective date constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you must stop using the App and may request deletion of your account.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Developer: Neznaika
Application: Grindfuel
Email: th17thaiapps@gmail.com
Country: United Arab Emirates (AE)

We aim to respond to all privacy-related inquiries within 30 days.