This policy explains what data the Diyetim AI mobile application collects, why we process it, who we share it with, how long we retain it, and how you can have it deleted.
Your data is processed by Paylisher Teknoloji A.Ş. acting as the data controller under the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR).
Contact: info@paylisher.com
The app does not require you to create an account and never collects passwords. Data falls into two groups based on where it is stored.
The following is stored in your device's local database and is never copied to our servers:
Important: To generate a personalised nutrition plan, the age, gender, height, weight, allergies, medical conditions, medication notes and dietary preferences you enter are transmitted to our AI service provider Google (Firebase AI Logic / Gemini) at the moment the plan is created.
This information constitutes special category personal data and is processed solely on the basis of your explicit consent. Providing it is optional; if you choose not to, your plan will be generated using more general assumptions.
Each AI request contains only the minimum data needed to build the plan. We do not store request contents on our servers, and the resulting plan is saved only on your device.
The suggestions the app provides are for informational purposes and are not a substitute for medical advice. Consult your physician for decisions concerning your health.
We do not sell your data, do not market it for advertising and do not share it with ad networks. To deliver the service, data is shared only with the following providers and only to the extent listed:
| Service provider | Data shared | Purpose |
|---|---|---|
| Google — Firebase AI Logic (Gemini) | Age, gender, height, weight, allergies, medical conditions, medication notes, dietary preferences | Generating a personalised nutrition plan |
| Google — Firebase Cloud Messaging | Push notification token, device information | Delivering notifications |
| Google — Firebase App Check | Device attestation token | Blocking fraudulent and automated traffic |
| Paylisher (our analytics infrastructure) | Email, name, gender, device ID, FCM token, usage events | Usage analytics and notification management |
Data handling by Google-provided services is governed by the Google Privacy Policy. Beyond the above, your data may only be disclosed to competent public authorities where required by law.
We do not keep data longer than necessary for the purpose it was collected for. Once the period expires, data is permanently deleted or irreversibly anonymised.
| Data category | Where it is stored | Retention period |
|---|---|---|
| Profile, dietary preferences, health information, weight and meal records | On your device only | Until you delete it or uninstall the app |
| Profile photo | On your device only | Until you delete it or uninstall the app |
| Generated nutrition plans | On your device only | Until you delete it or uninstall the app |
| Identity matching data (email, name, gender) and device ID | Paylisher servers | 12 months from your last interaction |
| Usage/analytics events | Paylisher servers | 12 months from your last interaction |
| Push notification token (FCM) | Google and Paylisher servers | Until you disable notifications, uninstall the app, or remain inactive for 12 months |
| Contents of AI requests | Not stored by us; transmitted to Google for processing | 0 days on our side; Google's own policies apply on theirs |
You may request deletion before these periods elapse; on request, data is deleted within the timeframe described in section 7. Where a statutory retention obligation applies, the relevant data is kept only for the duration of that obligation and only for that purpose.
You may have your data deleted at any time, free of charge and without giving a reason. There are two routes, and we recommend using both to remove all of your data.
This immediately and permanently erases your profile details, dietary preferences and health information, weight records, goals, completed meal records, generated nutrition plans, profile photo and all in-app settings. The action cannot be undone.
The in-app deletion removes the data held on your device. If you also want the analytics records and identity matching data on our servers removed, you need to send the request below.
Deleted data is also purged from backups within 90 days. Following a deletion request you will automatically stop receiving push notifications.
Removing the app from your device erases all local data held on it. Analytics records on our servers are unaffected; for those, send the request in section 7.2 or wait for the 12-month retention period to expire.
Under Article 11 of the KVKK and under the GDPR you have the right to:
Send requests to info@paylisher.com; we respond within 30 days.
No method guarantees absolute security, but we apply reasonable and current technical and organisational measures to protect your data.
The app is not directed at children under 13 and we do not knowingly collect data from this age group. If we become aware that we have collected data from a child under 13, we delete it without delay. If you are a parent or guardian and believe your child has provided us with data, contact us at info@paylisher.com.
This policy may be updated from time to time. When it is, the "Last updated" date on this page changes. For material changes we will notify you in the app or by notification before the change takes effect.
For any question or request regarding privacy, data retention or data deletion: