Dagnara ("Dagnara", "we", "us", or "the app") is a nutrition, fitness, and wellness tracking application. This Privacy Policy explains what personal information we collect, how and why we use it, when and with whom we share it, how long we keep it, and the choices and rights you have. By creating an account or using the app, you agree to the practices described here.
Age requirement. Dagnara is intended for people aged 16 and older. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
The data controller responsible for your personal information is:
[TODO: Registered legal entity name — e.g. "Dagnara Ltd" or your full name if a sole trader]
[TODO: Registered business address, city, postal code, country]
Email: privacy@dagnara.com
EU/EEA representative. Dagnara is established in the European Economic Area, so an Article 27 EU representative is not required. If you are in the United Kingdom, our UK representative is [TODO: appoint a UK representative if you have UK users, or state "not applicable"].
We collect only what is needed to run the app, calculate your goals, and keep your data in sync. We do not sell your personal information, and we do not run advertising or ad-tracking inside the app.
We do not use your personal information for third-party advertising, and we do not sell or rent it.
We share personal information only with the service providers below, strictly to operate the app, and only to the extent each service requires. We do not sell your data or share it with advertising or marketing partners.
| Recipient | Purpose |
|---|---|
| Supabase | Authentication and encrypted database hosting for your account, profile, and diary. |
| Google, Groq & OpenRouter | AI food-photo analysis and text nutrition estimation. Inputs are processed to generate a response and contain no account identifiers. |
| Open Food Facts | Barcode and food-name lookups against a public food database. |
| Apple App Store / Google Play & RevenueCat | Payment processing and subscription management for Premium. |
| Apple Health / Android Health Connect | Optional, on-device activity data — read only with your permission. |
We may also disclose information if required by law, to enforce our Terms, to protect the rights, safety, or property of Dagnara or others, or in connection with a merger, acquisition, or sale of assets — in which case we will notify you and this policy will continue to apply to your information.
Your account and diary data are stored using Supabase (PostgreSQL) with row-level security, so each account can access only its own data. All data is transmitted over encrypted HTTPS connections, and Premium credentials are stored only by the app stores. A copy of your data is cached on your device so the app works offline. No method of transmission or storage is 100% secure, but we use reasonable technical and organizational safeguards to protect your information.
We keep your personal information for as long as your account is active or as needed to provide the app. When you delete your account, we permanently remove your profile, diary, and app state from our servers. Food photos are never retained. We may keep limited records where required to comply with legal obligations, resolve disputes, or enforce our agreements.
Our service providers may process and store your information in countries other than your own, including the United States. Where we transfer data internationally, we rely on the safeguards offered by those providers and applicable data-protection laws. By using the app, you understand that your information may be transferred to these locations.
European Economic Area, UK & Switzerland (GDPR). If you are in these regions, you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. We process your data to perform our contract with you (providing the app), with your consent (for optional health data and notifications), and for our legitimate interests (security and improving the service). You may lodge a complaint with your local data-protection authority.
United States (California, and other state laws). California residents (CCPA/CPRA) have the right to know what personal information we collect, to request access to or deletion of it, to correct it, and to not be discriminated against for exercising these rights. We do not "sell" or "share" your personal information as those terms are defined under California law, and we do not use it for cross-context behavioral advertising. Residents of other U.S. states with comparable privacy laws (including Virginia, Colorado, Connecticut, Utah, and Texas) have similar rights, which you may exercise in the same way.
Brazil (LGPD). If you are in Brazil, you have rights of access, correction, deletion, portability, and information about sharing, and you may object to processing, consistent with the Lei Geral de Proteção de Dados.
Canada (PIPEDA). If you are in Canada, you may access and correct your personal information and withdraw consent, subject to legal and contractual limits.
Australia, and other regions. If you are in Australia (Privacy Act / APPs) or another region with data-protection laws, you have the rights those laws grant, and you may contact us to exercise them.
Scope of the service. Dagnara is offered to users in the regions listed above and in other countries whose data-protection laws we can meet. Wherever you use the app, you have the rights granted by the laws that apply to you, and you may contact us to exercise them.
Countries requiring in-country data storage. Some countries — for example, mainland China and Russia — require personal data of their residents to be stored on servers located inside that country. Dagnara stores data with Supabase outside those countries and does not maintain local infrastructure there, so the app is not directed at or intended for use in those jurisdictions. If you access it from such a location, you do so on your own initiative and are responsible for compliance with your local laws.
To exercise any of these rights, delete your account inside the app or contact us at privacy@dagnara.com. We will respond within the timeframe required by applicable law, and you have the right to lodge a complaint with your local data-protection authority.
Dagnara is a private tracking app — your diary and logs are visible only to you. If we introduce any feature that lets you share content publicly in the future, anything you choose to post publicly would no longer be private, and this policy would be updated to describe that feature.
Dagnara is not intended for children under 16, and we do not knowingly collect data from anyone under 16. If we learn that we have collected such data, we will delete it promptly.
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above, and where required, we will notify you in the app.
Questions about this policy or your data? Email privacy@dagnara.com.