Consent & Rights

Calvion processes the following data types that require explicit consent: health goals, dietary preferences, meal photo uploads for AI analysis, and optional integration with Apple Health or Google Health Connect.

This data — including information that may indicate health conditions or dietary requirements — is processed only with your active consent (GDPR Art. 9 / KVKK Art. 6).

You provided this consent during onboarding in the mobile app. You may withdraw it at any time by deleting your account or contacting legal@caymaztech.com.

Meal photo analysis is performed by fal.ai (USA). By using AI-powered features, you consent to your meal images being processed by fal.ai for inference. Photos are not retained by fal.ai beyond the inference request.

Authentication is managed by Firebase (Google LLC, USA). Subscription management uses Adapty, which processes only entitlement status and subscription metadata — not payment data.

If you do not consent to international transfers, please do not use AI-powered features.

The food photo you take during a scan is sent to fal.ai (USA) for AI analysis. The photo is automatically deleted from fal.ai's CDN after analysis is complete (maximum 1 hour). Calvion does not store your photos on its own servers.

The transfer is necessary for the performance of our service (GDPR Art. 49(1)(b)) and is based on your explicit consent under KVKK Art. 9. fal.ai acts as a data processor under Standard Contractual Clauses (SCC).

You cannot use the AI-powered food analysis feature without accepting this transfer. You may delete your account at any time; all your data will be permanently removed within 30 days of your deletion request.

After each scan, a small preview image (max 600px, JPEG) is stored encrypted on Cloudflare R2 so you can view past meals when you switch devices. The original full-resolution photo is never uploaded — only a compressed thumbnail is saved.

You can revoke this permission at any time from Profile → Privacy in the mobile app. When you revoke, all stored photos are immediately and permanently deleted. Your calorie and nutrition data is not affected.

EU / EEA users (GDPR): access, rectification, erasure, portability, objection, restriction of processing.

Turkey users (KVKK Art. 11): learn whether data is processed, request information, request correction or deletion, object to automated decisions, claim compensation.

California users (CCPA): know what is collected, request deletion, opt out of sale — Calvion does not sell personal data.

To exercise any right, email legal@caymaztech.com or visit our Data Request page.

Calvion is intended for users aged 18 and over. If you are under 18, do not create an account without parental consent.

If we become aware that we have collected data from a user under 18 without appropriate consent, we will delete it promptly.