Privacy Policy

1. Controller

MAŃSKI s.r.o. is the controller for personal data processed for Diet Scan.

2. Data we process

• Account data, such as name, email address, authentication identifiers, locale and time zone.
• Health and nutrition profile data, including age or date of birth, biological sex, height, weight, goals, diagnoses or health areas, allergies, intolerances and symptoms.
• Food and usage records, such as scanned products, meal descriptions, portions, nutrition values, assessments, diary entries and follow-up responses.
• Photographs you choose to upload for meal or label analysis.
• Support conversations, invitation status, subscription status and payment records. We do not receive or store full payment-card numbers.
• Technical and security data, such as device, browser, timestamps, approximate network information, logs and consent records.
• Optional Google Analytics and first-party product-analytics data collected only after consent. We do not send health-profile fields, food or meal content, photographs or analysis results to either analytics system.

3. Purposes and legal bases

4. Health data

Health information is a special category of personal data. We process it only to deliver the personalised functions you request and on the basis of explicit consent where required. You may withdraw that consent in Profile → Privacy & data. Diet Scan then stops health personalisation and deletes the health profile, symptom check-ins and personalised analyses from the active service; manually added calorie-diary entries remain. Withdrawal does not affect prior lawful processing or any limited retention independently required by law.

5. Recipients and processors

Data may be processed by carefully selected providers supporting hosting, infrastructure, authentication, security, email, customer support, payments and photo analysis. Stripe processes checkout, tax-calculation inputs, payment methods and subscriptions as a payment provider. Google receives analytics data only after consent and under the restrictions described above. Providers may process data only under contract and documented instructions, unless independently required by law.

6. International transfers

Where a provider processes data outside the European Economic Area, we use a lawful transfer mechanism such as an adequacy decision, Standard Contractual Clauses and supplementary safeguards where appropriate. Details may be requested using the contact information below.

7. Retention

Account and health-profile data are retained while your account is active and then deleted or irreversibly anonymised when no longer needed, subject to legal obligations and secure backup cycles. New meal and label photographs are processed transiently for the requested analysis and are not retained in Diet Scan media storage after the request. Billing, fraud-prevention and legal records may be retained for the period required by Czech and EU law. Analytics retention is configured for the shortest useful period and is described in the Cookie Policy.

8. Security

We use access controls, encryption in transit, restricted support access, logging and data-minimisation measures appropriate to the risk. No online system is completely risk-free; if a breach creates a legally reportable risk, we will notify the competent authority and affected users as required.

9. Your choices and rights

You can update your profile, export data, withdraw optional consent, change cookie settings and request account deletion. Further GDPR rights and complaint information appear on the GDPR & data rights page.

10. Contact

For privacy questions or requests, email hello@dietscan.eu. You may also contact the Czech Office for Personal Data Protection or your local supervisory authority.