Privacy policy

1. Who is responsible

Supernova Software Ltd (Eastern Mediterranean University Technopark, Famagusta, Cyprus) is the controller of dietitian account data. For client data that a dietitian enters or that is sent from the client app (name, birth date, gender, weight, meal photos and notes), the dietitian is the controller, and Supernova Software Ltd processes this data on the dietitian's behalf to provide the Service.

2. Data we process

• Dietitian account: name, e-mail address, password (stored only as a one-way hash), country, language preference and, if you sign in with Google, Facebook or Instagram, the identifier of that account.
• Subscription and payment: chosen plan, period, amount, order number and payment status. Card details are entered on the bank's payment page; we do not receive or store them.
• Client data: name, birth date, gender, weight records, meal photos, the foods and calorie values estimated from them, corrections and the dietitian's notes.
• Technical data: sign-in session data, app language and server logs (for example IP address and time of request) kept for security and troubleshooting.

3. Why we use the data

• To provide the Service: accounts, client tracking, meal analysis and the panel (performance of a contract).
• To take payments and keep accounting records (performance of a contract and legal obligations).
• To send service e-mails such as password reset messages (performance of a contract).
• To keep the Service secure and prevent abuse (legitimate interest).

4. Health-related data

Meal photos and weight records can reveal information about a person's health. Before adding a client and inviting them to the app, the dietitian is responsible for obtaining the client's explicit consent where the law requires it.

5. Individual use

If you use the PlateSight app on your own, without a dietitian, Supernova Software Ltd is the controller of your data. We process your meal photos, your weight and measurements and your goals on the basis of the explicit consent you give when you first set up the app; you can withdraw your consent at any time by deleting your account.

Individual use is not intended for anyone under 16.

You can delete your account in the app or at platesight.app/hesap-sil; your account and all your data, including meal photos, are deleted within 30 days.

If you enter a dietitian's code and agree, your records are moved to that dietitian's account; from then on the dietitian is the controller of that data.

6. Service providers

We use the following providers to run the Service. They process data only as far as their task requires.

• Amazon Web Services: server and database hosting (United States).
• Backblaze: storage of meal photos (European Union, Amsterdam).
• Anthropic: artificial intelligence that analyses meal photos (United States).
• Google: sending e-mails and, if you choose it, signing in with Google.
• Meta: signing in with Facebook or Instagram, if you choose it.
• Koopbank: card payments.

7. Transfers outside your country

Some providers are located outside the European Economic Area and Turkey, mainly in the United States. Data transferred to them is protected by the safeguards set out in these providers' data processing terms.

8. How long we keep data

We keep data for as long as the account exists. The history of a deactivated client stays in the dietitian's account. Data is deleted when the account holder asks us to delete it, unless the law requires us to keep certain records (for example payment records).

9. Your rights

Depending on the law that applies to you (for example the EU General Data Protection Regulation or Turkey's Law No. 6698 on the Protection of Personal Data), you may have the right to access, correct or delete your data, to restrict or object to its processing, to data portability, and to lodge a complaint with a data protection authority.

Clients should first send requests about their data to their dietitian. You can also write to us at info@supernova2.com.

10. Security

Connections are encrypted (HTTPS), passwords are stored only as hashes, meal photos are reachable only through short-lived signed links, and each dietitian can see only their own clients.

11. Changes

We may update this policy. The date at the top of the page shows the current version.

12. Contact

Supernova Software Ltd, Eastern Mediterranean University Technopark, Famagusta, Cyprus, info@supernova2.com