This Privacy Policy explains how Saporea ("Saporea", "we", "us", or "our") collects, uses, and shares information when you use the Saporea mobile application (the "App") and related services (together, the "Service").
Saporea is an order-concierge app: you photograph a restaurant menu, and we use AI to read it, describe each dish, and help you decide what to order. This policy describes the data that makes that work.
Controller: Dmitrii Skrylev, the individual developer and sole operator of Saporea. For any privacy question, or to reach the controller by post, contact us at zivou4@gmail.com.
By using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.
1. Information We Collect
1.1 Information you provide
- Menu photos. When you scan a menu, the photo you capture (or select from your photo library) is uploaded to our servers and to our AI provider so the menu can be read and structured. Photos are used to extract menu content only — never to identify you.
- Taste profile. Your answers to the taste quiz, any free-text description of your tastes, and manual adjustments to your taste preferences (the six taste axes).
- Dietary needs. Diet selections, allergens to avoid, and disliked ingredients you enter. These are used to filter and flag dishes for you.
- Favorites and orders. Dishes you favorite and order drafts you build.
- Account information. If you choose to Sign in with Apple, we receive the identifier Apple provides (and, only if you allow it, your name and a relay email). Sign-in is optional — the App works anonymously by default.
- Support communications. If you contact us, we keep your message and contact details to respond.
1.2 Information collected automatically
- Anonymous device identifier. On first launch we create an anonymous account (via Firebase Authentication) so your private data (history, favorites, taste profile) can be saved to your device's account. This is not linked to your real identity unless you sign in with Apple.
- Approximate location. If you grant location permission, we capture your device's location at the moment you scan a menu. We use it only to match the menu to the correct restaurant and to avoid creating duplicate restaurants. You can deny or revoke this permission at any time in iOS Settings; the App still works without it.
- Purchase and subscription data. If you subscribe, our payments partner (RevenueCat) receives the App Store transaction identifier, an app user identifier, your locale, and currency. We never receive or store your payment card details — Apple handles payment.
- Usage and diagnostic data. Anonymized, aggregated information about how the App is used (for example, which features are opened and whether a scan succeeded), to improve reliability and performance.
We do not sell your personal information.
2. How We Use Your Information
We use the information above to:
- read and structure the menus you scan, and generate dish descriptions, ingredients, nutrition estimates, allergen and dietary flags, and dish photos;
- rank and recommend dishes to match your taste profile, and exclude dishes that conflict with your dietary needs;
- save your history, favorites, taste profile, and order drafts to your account;
- identify the correct restaurant and prevent duplicates in our catalog;
- process subscriptions and provide the features included in your plan;
- maintain, secure, debug, and improve the Service;
- respond to your requests and communicate with you about the Service;
- comply with legal obligations.
3. How AI Processing Works
Saporea uses AI in two ways:
- Cloud AI (Anthropic / Claude). Menu photos and the text extracted from them are sent to Anthropic to read the menu and generate dish descriptions, ingredients, nutrition, taste characteristics, and translations. This processing happens on our servers (Cloud Functions); the App itself does not hold any AI keys. Anthropic processes this data on our behalf as a service provider and, per its terms, does not use API inputs to train its models.
- On-device AI (Apple). Some features — an optional on-device menu reader and the on-device "ask the waiter" assistant — run locally on your device using Apple's Foundation Models, when your device supports them. Data processed on-device this way is not sent to us.
AI-generated descriptions, nutrition figures, allergen and dietary flags, and dish photos are estimates for guidance only and may be inaccurate. See our Terms of Service and always confirm allergens and ingredients with the restaurant.
4. The Shared Community Catalog
Saporea is powered by a shared, community catalog of restaurants, menus, and dishes that all users read from and contribute to. When you scan a menu, the restaurant, menu, and dish information (not your identity) is added to this shared catalog so other diners benefit, exactly as you benefit from menus others have scanned.
Your private data — your scan history, favorites, taste profile, dietary needs, and order drafts — is kept separate and is not shared with other users. It is stored under your own account and is readable only by you.
Dish photos shown in the App are stock photographs sourced from Unsplash and Pexels and are representative images — they may not depict the exact dish served.
5. How We Share Information
We share information only with the service providers ("sub-processors") that operate the Service on our behalf, and only as needed:
| Provider | Purpose | Data involved |
|---|---|---|
| Anthropic | AI reading/enrichment of menus | Menu photos and extracted text |
| Google Firebase (Auth, Firestore, Cloud Functions) | App backend, authentication, database, hosting of scan logic | Account identifier, your private data, catalog data |
| Google Places / Maps | Identify and de-duplicate restaurants | Restaurant name and scan-time location |
| RevenueCat | Subscription management | Transaction id, app user id, locale, currency |
| Apple | Sign in with Apple, App Store payments | Apple identifier, purchase records |
| Unsplash, Pexels | Stock dish photos | Search terms only (no personal data) |
We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and security of our users or the Service. If we are ever involved in a merger or acquisition, information may be transferred as part of that transaction.
6. Data Retention
- Your private account data (history, favorites, taste profile, dietary needs) is kept for as long as you use the App, or until you delete it or request deletion.
- Catalog data (restaurants, menus, dishes) is retained as part of the shared community catalog and is not tied to your identity.
- Support messages are kept only as long as needed to resolve your request and to meet legal obligations.
7. Data Security
Data is transmitted over encrypted connections and stored using reputable cloud infrastructure (Google Firebase). Access to the shared catalog is read-only for clients — only our secure server functions can write to it. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.
8. Your Rights and Choices
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- delete your data ("right to be forgotten");
- restrict or object to certain processing;
- port your data to another service;
- withdraw consent (for example, revoke camera, photo, or location permission in iOS Settings at any time);
- opt out of any "sale" or "sharing" of personal information — note we do not sell your personal information.
To exercise any of these rights, contact zivou4@gmail.com. You also have the right to lodge a complaint with your local data protection authority.
9. Children's Privacy
Saporea is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us at zivou4@gmail.com and we will delete it.
10. International Data Transfers
We operate globally and our service providers may process your data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for these transfers.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version here and revise the "Last updated" date above. Material changes will be communicated within the App or by other reasonable means. Your continued use of the App after an update means you accept the revised policy.
12. Contact Us
If you have any questions about this Privacy Policy or your data, contact us at:
Saporea — operated by Dmitrii Skrylev (individual developer) Email: zivou4@gmail.com Website: /projects/saporea
