Last updated: 13 October 2026 · Controller: HD Yapımcılık · Contact: info@hdappstudio.com
This page explains what data Gramaj processes. We kept it short and avoided
vague wording, because a privacy policy nobody can follow does the same job
as no policy at all.
Everything you log stays on your phone. Three things reach our server:
your meal photo (only when you take one), your identifier (a random
string) and your device platform. No ads, no analytics, no tracking.
Deleting the app deletes all of it. We keep no copy — which also means we
cannot give it back to you. If you want to move it, export your own file
from Settings → Backup.
We send the photo to an AI provider for recognition. Today the primary
provider is Anthropic (Claude); if it cannot answer, **Google
(Gemini) and then SSB EVREN** (Turkey) take over. Which one answered
is kept in our record.
Before the photo is sent, your phone re-encodes it and **strips location
(GPS) and camera information. We do not store the photo on our
server**: it is discarded once recognition finishes. All that remains on
the server are the recognised food names.
A copy stays on your phone — that is the thumbnail you see next to the
entry. That copy is never sent to us. It is included in your phone's own
backup (iCloud or Google) so that it travels with your entries when you
change phones. That backup is in your account; we have no access to it.
Deleting an entry deletes its photo immediately. To delete all of
them at once: Settings → Meal Photos. Your entries and calories stay;
only the photos go.
When the app opens, Firebase creates a random, anonymous identifier. It
contains no name, email address or phone number. The reason is not
surveillance but budget: every scan costs us real money and the daily
limit is tied to an identifier.
If you sign in (Apple or Google), that account's email address is
added to our record. Its only purpose is support: finding your
account and acting on your request. We do not use it for marketing —
that would need your separate, explicit consent, and we ask for no such
consent today. If you choose "Hide My Email" with Apple, your real
address never reaches us.
Each request carries: iOS or Android, operating system version, app
version and your device's region setting (country code).
Not sent, and deliberately not collected: device identifiers (IDFV,
Android ID), advertising identifiers, device model, IMEI, IP-based
location. The country comes from your phone's language/region setting,
not from your IP address — so we do not measure your physical location.
If you subscribe, the purchase is processed through RevenueCat. What goes
there: the store receipt and your anonymous identifier. Your meal
entries, photos, weight and goals do not.
any comparable measurement tool. A test in the codebase enforces this.
Which of these counts as an international transfer depends on where you
are: for a user in Turkey, EVREN is domestic; for a user in Germany it is
not. In every case these transfers are necessary for the service to work,
and the photo is stored at none of them.
Under GDPR and Turkish KVKK art. 11 you have the right to access,
correct, delete and port your data.
Deletion: in the app, Settings → Account → Delete account. Your
request is recorded and within 3 days your account and all your data
on the server are deleted. You can cancel during that window. You do not
need to wait for our approval — the deletion runs on its own when the
window closes.
Portability: Settings → Backup → Export my data. The file is
handed directly to you; it does not pass through our server.
For any other request: info@hdappstudio.com
Gramaj is not directed at children under 13 and we do not knowingly
collect data from them.
If something material changes, we will say so in the app. The date at the
top of this page always shows the version in force.