App privacy

App privacy policy

Updated May 2, 2026

In short

The French version of this page is the legally binding text. This English version is a translation for convenience.

Daizu is a personalized nutrition program app. To work, we process a limited amount of data about you: your account information, your food preferences, and the history of generated meals.

You can view, edit, or delete your data at any time from the app. We never sell your data and we do not use it for advertising.

1. Data controller

The controller of your personal data is the publisher of Daizu, reachable at contact@daizu.app.

This policy applies to the Daizu mobile app (iOS and Android) and to any web page that explicitly refers to it.

2. Data we collect

We collect only the data needed for the service to work:

Account data: email address and encrypted password (via Supabase Auth).
Profile: first name, sex, year of birth, height, weight, target weight, activity level, goals, diet, allergies, restrictions, cooking preferences.
Usage data: generated meals, weekly plans, ingredients, cooking status, streaks, user feedback.
Technical data: anonymous device identifier, app version, OS type, error logs in case of a crash.
Subscription data: Premium status, anonymous transaction identifier (never your card number — billing stays with Apple or Google).

3. Why we collect this data

Your data is processed for the following purposes:

To let you sign in and protect your account (legal basis: performance of the contract).
To automatically generate a nutrition program and personalized recipes (legal basis: performance of the contract).
To display your nutrition goals and calculate recommendations (legal basis: performance of the contract).
To manage your Premium subscription and our usage quotas (legal basis: performance of the contract).
To improve the quality of the service (bug fixes, performance) (legal basis: legitimate interest).
To meet our legal and accounting obligations (legal basis: legal obligation).

4. Processors and recipients

To provide Daizu, we use technical providers. Each one accesses only the data strictly necessary:

Supabase (Ireland, EU): database hosting and authentication.
OpenAI (United States): generation of the nutrition program. The data sent is anonymized (no email, no identifying information).
RevenueCat (United States): technical management of subscriptions and synchronization with the Apple App Store and Google Play.
Apple and Google: billing of In-App Purchase subscriptions (governed by their own terms).

5. Transfers outside the European Union

Some providers (OpenAI, RevenueCat) are located in the United States. Transfers are covered by the European Commission’s standard contractual clauses and, where applicable, by the Data Privacy Framework.

Critical data (account, profile, plans) stays hosted in the European Union (Supabase, Ireland region).

6. Retention

Your data is kept for as long as your account is active.

Account and profile: until you delete the account.
Meals and plans: until the account is deleted or you delete them manually in the app.
Technical and anti-abuse logs: 12 months maximum.
Billing data: 10 years (French legal obligation).
After you delete your account, data is erased within 30 days, unless a longer legal obligation applies.

7. Your rights

Under the GDPR, you have the following rights over your data:

Right of access: obtain a copy of your data.
Right of rectification: edit your data from your profile in the app.
Right to erasure: delete your account and all your data from Profile > Delete my account.
Right to portability: receive your data in a structured format (contact us at contact@daizu.app).
Right to object to processing and to restrict it.
Right to lodge a complaint with the CNIL (cnil.fr).

8. Security

We implement technical and organizational measures to protect your data: encryption in transit (TLS 1.3), encryption at rest, stronger authentication, restricted access, regular audits.

No system is invulnerable. If an incident affects your data, we will inform you within the legal time limits.

9. Minors

Daizu is intended for people aged 13 and over. We do not knowingly collect data about children under 13.

10. Changes

This policy may be updated. The date of the latest revision is shown at the top of this page. If there is a material change, we will tell you in the app.

11. Contact

For any question about your data or this policy: contact@daizu.app.