PRIVACY POLICY

Last Updated: October 7, 2026

This Privacy Policy explains what personal information the Unsweet mobile application (the "App") collects, where it is stored, which service providers process it, how long we keep it, and how you can access or delete it.

1. WHO WE ARE

The App is operated by Netanel Hadad, a sole proprietor based in Israel ("Unsweet," "we," "us," or "our"). We are the controller of the personal information described in this policy. You can reach us at unsweetapp@gmail.com.

2. THE SHORT VERSION

3. INFORMATION WE COLLECT

3.1. Account information

Your email address and name, and the sign-in method you use (email and password, Sign in with Apple, or Google). During onboarding the App may create a temporary anonymous account. That account is merged into your permanent account if you sign up.

3.2. Profile and onboarding answers

The answers you give during onboarding and in your profile. These may include your first name, gender, date of birth or age, height and weight, and your quit date and goals. They may also include sugar and money goals, craving triggers, symptoms, previous quit attempts, weekly sugar spending, your motivation, and how you heard about the App. You can also add an optional profile photo.

3.3. Content you log in the App

Some of this information relates to your eating habits and wellbeing and may be considered health-related. We use it only to provide the App's features to you. We do not use it for advertising, and we do not share it with advertising partners.

3.4. Purchases

Payments are processed by Apple (App Store) or Google (Google Play). We never receive your card details. Through RevenueCat we receive your subscription status and details of each transaction: product, price, currency, country, transaction identifiers, trial and renewal dates, and cancellation reason where provided.

3.5. Device, usage and diagnostic data

3.6. Advertising identifiers and attribution

On iOS we ask your permission through App Tracking Transparency before accessing your device's advertising identifier (IDFA). On Android the advertising ID (GAID) is used unless you have deleted or reset it in your device settings. We also receive information about the ad or link that led you to install the App.

4. HOW WE USE YOUR INFORMATION

Legal bases (EEA, UK and Switzerland)

We process your information to perform our contract with you, which means providing the App and your subscription. We rely on your explicit consent for health-related content you choose to log, for advertising identifiers, and for push notifications. We rely on our legitimate interests in securing and improving the App, and on legal obligations for transaction records. You can withdraw consent at any time. Doing so does not affect processing that already took place.

5. SERVICE PROVIDERS

We share personal information only with the providers below. Each processes it on our behalf to deliver the function listed.

ProviderPurposeData involved
Supabase (servers in the United States)Account sign-in, database, file storage, server functionsAll account, profile and logged content, uploaded photos
OpenAI, with Groq as a fallbackAnalyzing meal and food-label photosThe photo you scan, with no name or email attached
Apple, GoogleSign-in, payments, app distributionSign-in identifiers, purchase records
RevenueCatSubscription managementUser ID, purchase and subscription records, attribution ID
PostHog (through our proxy at e.unsweet-app.com)Product analytics, session replaysUser ID, in-app events, device data, session replays
MixpanelProduct analyticsUser ID, in-app events, device data
SentryCrash reporting and performanceUser ID, error details, device data, masked replays of sessions with errors
AppsFlyerInstall attribution and campaign measurementUser ID, advertising ID (if permitted), install source, sign-up and purchase events
Meta (Facebook SDK and Conversions API)Advertising measurementAdvertising ID (if permitted), app events, and a hashed (one-way encrypted) user ID with country on subscription events
ExpoDelivering push notifications and app updatesPush token, notification content
Open Food FactsBarcode and food searchThe barcode or search text only, with no account information
TelegramInternal alerts to our team about subscription changesEmail address, country, product and price for the affected subscription

We do not sell personal information. Sharing advertising identifiers and app events with AppsFlyer and Meta for ad measurement may count as "sharing" for cross-context behavioral advertising under some US state laws. You can opt out by declining tracking when iOS asks, or by turning off or resetting your advertising ID in your device settings.

Public links to uploaded photos

Meal photos and profile photos are stored at long, randomly generated web addresses. Anyone who has the exact address can open the image, but the addresses are not published or listed anywhere.

6. DATA RETENTION

7. DELETING YOUR ACCOUNT AND YOUR RIGHTS

In-app deletion: go to Profile → Delete account. This permanently deletes your account and the profile, logs, scores and community data linked to it. To also have your uploaded photo files removed from storage, email us and we will delete them within 30 days. Deleting the App from your phone does not delete your account. Deleting your account does not cancel an active subscription. Cancel it in your App Store or Google Play settings.

Depending on where you live, you may have the right to:

To exercise any of these rights, email unsweetapp@gmail.com from the address on your account. We will respond within 30 days. You also have the right to complain to your local data protection authority. In Israel this is the Privacy Protection Authority.

8. CHILDREN

The App is intended for people aged 13 and older. We do not knowingly collect personal information from children under 13. If you are under the age of digital consent in your country (up to 16 in some countries of the European Economic Area), you may use the App only with the consent of a parent or legal guardian. If you believe a child under 13, or a minor without the required consent, has created an account, contact us and we will delete it.

9. INTERNATIONAL DATA TRANSFERS

We operate from Israel, and our main database is hosted in the United States. Several providers in Section 5 process data in the United States and other countries. Where data from the EEA, UK or Switzerland is transferred to a country without an adequacy decision, we rely on the safeguards our providers offer, such as the European Commission's Standard Contractual Clauses.

10. SECURITY

We protect your information in several ways:

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. CHANGES TO THIS POLICY

We may update this policy as the App changes. We will post the new version on this page and update the "Last Updated" date. If we make a material change, we will also notify you in the App.

12. CONTACT US

Email: unsweetapp@gmail.com
Operator: Netanel Hadad, Israel