Privacy Policy Polityka Prywatności

1 Data Controller & Contact Information

Welcome to KetoFan (referred to as "we", "us", "our", or "KetoFan"). KetoFan operates the website https://ketofan.com and the KetoFan mobile application available on Android and iOS.

Under the European Union General Data Protection Regulation (Regulation (EU) 2016/679 - "GDPR" / Polish "RODO"), the entity responsible for the processing of your personal data is:

2 Information We Collect

To provide you with our low-carb community, personalized macro calculations, restaurant map discovery, and Virtual AI Diet coaching, we collect the following categories of data:

A. Account and Profile Information

• Personal Details: Name, chosen username, email address, password hash, and optional profile avatar.
• Authentication Data: Third-party sign-in identifiers if you log in via Google Play Services or Apple Sign-In.

B. Community Contributions

• User-submitted restaurant reviews, ratings, photos of keto meals, comments, and public forum posts in the KetoFan Community feed.

C. Technical & Diagnostic Information

• IP address, mobile device model, operating system version, unique device tokens for push notifications, crash diagnostics, and anonymous session performance logs.

3 Health, Nutrition & Fitness Data (Google Play Data Safety)

Because KetoFan is a specialized keto lifestyle and macro tracking application, our app processes dietary and physical metric information to deliver our core features. In accordance with Google Play's Health and Fitness Data Safety policies, we explicitly disclose the following:

4 Location Information (Keto Places Map)

KetoFan provides an interactive restaurant directory ("Keto Places") highlighting keto-friendly bakeries, steakhouses, salad bars, and cafes in Kraków, Warsaw, Gdańsk, and across Poland.

• Foreground GPS Access: We request access to your approximate or precise geographic location only while you actively view the Restaurant Map to calculate your walking/driving distance and sort places by nearest proximity.
• No Background Tracking: KetoFan does NOT collect, monitor, or log your location in the background when the app is closed.
• No Selling of Location: Your GPS coordinates are never sold, rented, or distributed to advertising networks.

5 Virtual AI Diet Coach & Chat Interactions

Our 24/7 Virtual AI Coach answers nutrition queries, analyzes ingredient lists, and helps you navigate low-carb eating. When you interact with the AI assistant:

• We process the text prompts and questions you submit (e.g., "Is erythritol safe on keto?", "Does this dish contain added sugars?").
• Your queries are processed securely and strictly to generate helpful replies.
• We do not share your private AI chat logs publicly or use them for third-party marketing.

6 Legal Basis for Processing (GDPR / RODO)

We process personal data only when lawful under Article 6 and Article 9 of the GDPR:

• Performance of Contract (Art. 6(1)(b) GDPR): Providing your account, saving meal logs, delivering shop merchandise orders, and displaying restaurant listings.
• Explicit Consent (Art. 6(1)(a) & Art. 9(2)(a) GDPR): Storing user-inputted dietary and fitness metrics for personalized keto calculations. You may withdraw consent at any time.
• Legitimate Interests (Art. 6(1)(f) GDPR): Protecting app security, preventing spam and abuse in community feeds, fixing bugs, and improving UI performance.
• Legal Obligations (Art. 6(1)(c) GDPR): Preserving statutory accounting records for merchandise purchases in compliance with Polish tax laws.

7 Data Storage, Hosting & Third-Party Service Providers

We respect the confidentiality of your information. Personal data is hosted within the European Union on secure OVHcloud servers with encrypted connections (SSL/TLS 256-bit encryption):

• Infrastructure & Hosting: OVHcloud (hosting clusters located within France / Poland, ISO/IEC 27001 certified).
• Google Play Services & Firebase: Anonymous crash logs and app distribution analytics provided by Google LLC.
• No Data Brokers: We do not sell, rent, trade, or monetize your personal or health data.

8 Your Rights Under GDPR & Account Deletion

As an individual in the European Union or user of our global services, you have full statutory rights under Chapter III of the GDPR:

• Right of Access (Art. 15): Request a copy of all personal information we hold about you.
• Right to Rectification (Art. 16): Update or correct inaccurate profile details.
• Right to Erasure ("Right to be Forgotten", Art. 17): Permanently delete your user account and all personal logs.
• Right to Restriction of Processing (Art. 18): Restrict how your data is handled.
• Right to Data Portability (Art. 20): Receive your macro logs and profile data in a machine-readable JSON/CSV format.
• Right to Object (Art. 21): Object to processing based on legitimate interests.

To exercise any GDPR rights or submit an inquiry, email our Data Protection team at contact@ketofan.com. If you believe your rights have been violated, you have the right to file a complaint with Poland's data supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

9 Children's Privacy

KetoFan is designed for adults and individuals aged 16 and older. We do not knowingly collect personal or dietary information from children under the age of 16. If we become aware that an account belongs to a minor without verified parental consent, we will immediately terminate the account and purge all associated records.