← Home

Privacy Policy

Last updated: July 18, 2026

1. Data Controller

Mially (the “app”, “we”) is operated by Melda İğde. Contact: destek@getmially.com

Your personal data is processed under Türkiye's Law No. 6698 on the Protection of Personal Data (KVKK) and — where we have users in the European Union — the General Data Protection Regulation (GDPR).

2. What Data We Collect

Account information: Email address and authentication data.

Health and nutrition data — special category data: Height, weight, age, gender, activity level; your daily targets (calories, protein, carbs, fat, water); your food logs (calories and macros, meal type, entry method); water and weight history; recipes you create. This is “special category” (health) data under KVKK Art. 6 and GDPR Art. 9 and is processed only with your explicit consent.

Content (optional): If you use voice food entry, your audio is processed to be transcribed to text. Camera is used for barcode scanning, your photo library for a profile picture, and photos you take for meal analysis.

Device permissions: Camera, microphone, photos, health data, notifications, and biometric permissions are requested only when you use the related feature and with your approval.

Usage data (only with consent): We may collect anonymous usage data to improve the app. This starts only when you tap “Accept” inside the app and can be turned off anytime in Settings.

3. Why We Process Data

To manage your account (performance of contract), provide nutrition/workout tracking (your explicit consent), process voice/photo entries (your explicit consent), manage subscriptions (performance of contract), improve the app (your explicit consent), and ensure security and prevent abuse (legitimate interest). Declining consent for health data or analytics does not prevent you from using core features.

4. Who We Share Data With

We do not sell your data. We share it only with the service providers required to run the app, and only as needed:

OpenAI data retention: OpenAI retains data sent via the API for up to 30 days solely for abuse monitoring, then deletes it, and does not use this data to train its models.

5. International Data Transfers

Your account and nutrition data are stored on servers in Tokyo (Japan); some data is processed by providers in the USA when you use the related features; analytics data stays in the EU.

As of 1 September 2024, under KVKK, explicit consent alone is not sufficient for ongoing international transfers; these transfers rely on appropriate safeguards (standard contracts) as required by KVKK. For EU users: the EU has an adequacy decision for Japan; transfers to the USA rely on the providers' Standard Contractual Clauses (SCCs).

6. How Long We Keep Data

Your account and nutrition data are kept until you delete your account, after which they are permanently deleted. Content sent to OpenAI is retained by OpenAI for up to 30 days. Analytics data is kept for 12 months (1 year).

7. Your Rights

Under KVKK Art. 11 and GDPR Art. 15–22 you have the right to access, delete, withdraw consent, rectify, and object.

To exercise these rights: destek@getmially.com

8. Children's Privacy

Mially is not directed to users under 12, and we do not knowingly collect data from anyone under that age.

9. Security

We apply encryption in transit and at rest, row-level access control at the database (each user can access only their own data), server-side key management, and authentication protection.

10. Changes and Contact

We may update this policy; we will notify you of material changes. Questions: destek@getmially.com

PrivacyTermsTürkçedestek@getmially.com