Privacy policy

1. Who is responsible

Supernova Software Ltd. (Famagusta, Cyprus) is the controller of dietitian account data. For client data that a dietitian enters or that is sent from the client app (name, birth date, gender, weight, meal photos and notes), the dietitian is the controller, and Supernova Software Ltd. processes this data on the dietitian's behalf to provide the Service.

2. Data we process

• Dietitian account: name, e-mail address, password (stored only as a one-way hash), country, language preference and, if you sign in with Google, Facebook or Instagram, the identifier of that account.
• Subscription and payment: chosen plan, period, amount, order number, payment status and, for card payments through Stripe, the Stripe customer and subscription identifiers. Card details are entered on the payment page of the bank or Stripe; we do not receive or store them.
• Client data: name, birth date, gender, weight records, meal photos, the foods and calorie values estimated from them, corrections and the dietitian's notes.
• Technical data: sign-in session data, app language and server logs. When you visit our website we record your IP address, the page you open, the time of the visit, your browser details and language, and the page you came from.

3. Why we use the data

• To provide the Service: accounts, client tracking, meal analysis and the panel (performance of a contract).
• To take payments and keep accounting records (performance of a contract and legal obligations).
• To send service e-mails such as password reset messages (performance of a contract).
• To keep the Service secure and prevent abuse (legitimate interest).
• To keep visit statistics showing how many people visit our website and where they come from (legitimate interest).
• If you allow it, to measure how our public pages are used with Google Analytics (consent); you can withdraw your consent at any time with the "Cookie settings" link at the bottom of the page.

4. Health-related data

Meal photos and weight records can reveal information about a person's health. Before adding a client and inviting them to the app, the dietitian is responsible for obtaining the client's explicit consent where the law requires it.

5. Individual use

If you use the PlateSight app on your own, without a dietitian, Supernova Software Ltd. is the controller of your data. We process your meal photos, your weight and measurements and your goals on the basis of the explicit consent you give when you first set up the app; you can withdraw your consent at any time by deleting your account.

Individual use is not intended for anyone under 16.

You can delete your account in the app or at platesight.app/hesap-sil; your account and all your data, including meal photos, are deleted within 30 days.

If you enter a dietitian's code and agree, your records are moved to that dietitian's account; from then on the dietitian is the controller of that data.

6. Service providers

We use the following providers to run the Service. They process data only as far as their task requires.

We do not sell or rent our members' information and do not share it with third parties for advertising. It is shared only with the service providers below, to the extent needed to provide the Service, and with the competent authorities where the law requires it.

• Amazon Web Services: server and database hosting (United States).
• Backblaze: storage of meal photos (European Union, Amsterdam).
• Anthropic: artificial intelligence that analyses meal photos (United States).
• Google: sending e-mails and, if you choose it, signing in with Google.
• Meta: signing in with Facebook or Instagram, if you choose it.
• Türkiye İş Bankası: card payments.
• Stripe: card payments for automatically renewing subscriptions, invoices and the subscription management page.
• Google Analytics (Google Ireland Limited): visit statistics on our public pages, only with your consent (data may be transferred to the United States).

7. Transfers outside your country

Some providers are located outside the European Economic Area and Turkey, mainly in the United States. Data transferred to them is protected by the safeguards set out in these providers' data processing terms.

8. How long we keep data

We keep data for as long as the account exists. The history of a deactivated client stays in the dietitian's account. Data is deleted when the account holder asks us to delete it, unless the law requires us to keep certain records (for example payment records). We keep website visit records without a time limit; you can ask us to delete them at info@supernova2.com.

9. Your rights

Depending on the law that applies to you (for example the EU General Data Protection Regulation or Turkey's Law No. 6698 on the Protection of Personal Data), you may have the right to access, correct or delete your data, to restrict or object to its processing, to data portability, and to lodge a complaint with a data protection authority.

Clients should first send requests about their data to their dietitian. You can also write to us at info@supernova2.com.

10. Security

Connections are encrypted (HTTPS), passwords are stored only as hashes, meal photos are reachable only through short-lived signed links, and each dietitian can see only their own clients.

11. Changes

We may update this policy. The date at the top of the page shows the current version.

12. Contact

Supernova Software Ltd., Famagusta, Cyprus, info@supernova2.com