Privacy Policy

Effective date: October 6, 2026

1. Scope

1.1. This Privacy Policy applies to FoodInfoByPic, FIBP, FoodInfoByPicBot, fibp.app, related websites and web applications, mobile applications, Telegram bot and Telegram Web App functionality, and other FIBP features (collectively, the "Service").

1.2. It describes information processed by FIBP. Third-party platforms such as Telegram, Apple, Google, payment providers, hosting providers, and external merchants process information under their own privacy rules when acting independently.

2. Who is responsible for FIBP data processing

2.1. FIBP / FoodInfoByPic is responsible for personal data where FIBP determines why and how that data is processed.

2.2. Privacy questions and requests may be sent to support@fibp.app.

2.3. Where a third party independently determines its own processing purposes, that third party is separately responsible for its processing.

3. Important summary

3.1. We do not sell personal data.

3.2. We do not receive your Telegram password when you use Telegram login.

3.3. Using the FIBP Telegram bot or Telegram login does not by itself give FIBP access to your unrelated Telegram chats, contacts, groups, or channels.

3.4. We generally do not receive full payment-card details for purchases processed by Apple, Google, Telegram, or other platform payment systems.

3.5. We process information needed to operate requested features, maintain accounts and sessions, provide scan and AI functionality, keep history and balances, provide support, secure the Service, and comply with law.

3.6. Some data is necessarily stored for the Service to work. This may include account records, session information, scan results/history, nutrition plans, balances, transactions, notifications, public recipes or other content, and support records. Accordingly, it would not be accurate to say that FIBP stores no data at all.

4. Account and profile information

4.1. Depending on how you use the Service, we may process:

• email address;
• username;
• internal account identifiers;
• account creation and update timestamps;
• account status, including deletion or blocking state where applicable;
• password hash for password-based accounts. We do not need to store your password in readable form;
• verification, password-recovery, or activation information needed to complete those processes.

5. Telegram login and Telegram-related data

5.1. If you choose Telegram login on the website or use Telegram-related FIBP functionality, Telegram may provide signed authentication or interaction data to FIBP.

5.2. Depending on the feature, this may include:

• Telegram user ID;
• Telegram username;
• first and last name if provided by Telegram;
• profile image reference where available;
• authentication timestamp, signature, token, or other technical verification data;
• content you intentionally send to the FIBP bot or Web App.

5.3. FIBP may store a Telegram user ID and associated account information in order to recognize the account, create or restore a FIBP account, and create normal FIBP login sessions.

5.4. FIBP does not receive your Telegram password.

5.5. Telegram independently processes data relating to your Telegram account, Telegram apps, network, chats, and platform use. FIBP does not control Telegram's independent processing.

6. Session, device, and security information

6.1. To operate account sessions and protect the Service, we may process technical information such as:

• session identifiers;
• login and last-activity times;
• browser, operating system, application, device, and platform information;
• IP address and network information;
• approximate location derived from technical network or device signals where used for session or security purposes;
• push-notification token where notifications are enabled;
• security events, failed logins, errors, abuse signals, and related logs.

6.2. This information may be used to show active sessions, detect suspicious activity, terminate sessions, diagnose problems, and protect accounts.

7. Photos, audio, text, and food scans

7.1. If you use photo or voice food analysis, we process the photo, audio recording, text description, selected language, and technical request data necessary to perform the requested analysis.

7.2. The resulting analysis may include food names, estimated serving information, estimated calories, proteins, fats, carbohydrates, textual analysis, timestamps, edit status, hidden status, and related scan-history data.

7.3. Raw photos or audio may be transmitted to technical processors and may be retained for as long as reasonably necessary to provide, secure, troubleshoot, or comply with legal requirements relating to the feature. Do not assume that raw media is deleted immediately unless the Service expressly states that it is.

7.4. FIBP does not intentionally use food photos or audio for biometric identification.

7.5. You should avoid uploading unnecessary personal, confidential, biometric, or third-party information.

8. Nutrition plans and information you choose to provide

8.1. Nutrition-plan functionality may process information you voluntarily provide, such as age, gender selection, height, weight, activity level, goals, preferences, desired nutrition targets, or related answers.

8.2. Some of this information may be considered health-related or otherwise sensitive in certain jurisdictions. Where applicable law requires consent for such processing, your decision to provide the information for the requested feature may be used as the relevant consent, subject to any additional consent mechanism required by law.

8.3. You are not required to provide unnecessary medical diagnoses or unrelated sensitive information.

9. Recipes and public content

9.1. If you create or publish recipes, images, descriptions, comments, reactions, or other public content, we may store, display, index, moderate, distribute, and technically process that content to provide the relevant feature.

9.2. Public content can be viewed or copied by other users or third parties. Do not publish information you do not want to make public.

9.3. Removal from FIBP does not guarantee removal of copies that others made outside systems we control.

10. Balances, transactions, rewards, and purchases

10.1. We may store information about free and purchased scan balances, game water, virtual units, rewards, attempts, achievements, transaction type, transaction amount, purchase status, internal identifiers, and timestamps.

10.2. This information is used to provide balances, prevent double spending, process usage, investigate errors, prevent fraud, and display transaction history.

10.3. For purchases processed by Apple, Google, Telegram, or another platform, we may receive limited transaction, receipt, product, status, or verification data. The platform may independently process payment credentials and billing information.

11. Notifications and preferences

11.1. We may process notification records, unread status, push tokens, notification preferences, language preferences, and other account settings.

11.2. Push providers and operating-system platforms may independently process notification delivery data.

12. Support communications

12.1. If you contact support, we may process your email address, name, subject, message, account context you choose to provide, related correspondence, and technical information reasonably needed to investigate the request.

12.2. Support correspondence may be retained as reasonably necessary to respond, prevent abuse, maintain service records, resolve disputes, or comply with law.

13. Local storage, cookies, and device-side data

13.1. The website may use cookies, local storage, session storage, or similar mechanisms for login sessions, language selection, interface preferences, security, and feature state.

13.2. Some convenience data may be stored locally on your device or browser instead of on FIBP servers. For example, a daily water-tracking value may be maintained locally depending on the current implementation of that feature.

13.3. Clearing browser storage, reinstalling an application, changing devices, or using private browsing may remove locally stored information.

14. Information we do not need you to provide

14.1. Please do not send passport numbers, government identity documents, full payment-card details, banking credentials, private medical records, passwords for third-party services, or confidential information unrelated to the requested FIBP feature.

14.2. If you include unnecessary information in a photo, audio recording, message, recipe, support request, or other submission, that information may be processed as part of the material you chose to submit.

15. Why we process information

15.1. We may process information for the following purposes:

• create and manage accounts;
• authenticate users and maintain sessions;
• provide food-photo and audio analysis;
• calculate or display estimated nutrition information;
• create and display nutrition plans;
• provide scan history and activity statistics;
• provide recipes, comments, reactions, and public content;
• operate AI-assisted functionality;
• operate balances, rewards, games, challenges, and purchases;
• send requested or operational notifications;
• provide customer support;
• detect fraud, abuse, automation, security threats, and technical errors;
• debug, maintain, test, and improve the Service;
• protect legal rights and comply with legal obligations.

16. Legal bases where applicable

16.1. Depending on the jurisdiction and type of processing, FIBP may rely on one or more of the following legal bases:

• performance of a contract or steps requested by you before entering a contract;
• your consent, where consent is required;
• legitimate interests such as securing, maintaining, preventing abuse of, and improving the Service, where those interests are not overridden by applicable rights;
• compliance with legal obligations;
• establishment, exercise, or defense of legal claims where permitted.

16.2. Where processing depends on consent, you may withdraw consent prospectively, subject to legal and technical limitations described in this Policy.

17. Automated processing and external technology providers

17.1. FIBP may use third-party infrastructure and technology providers for hosting, storage, databases, email, push notifications, security, monitoring, image processing, audio processing, speech recognition, AI-assisted analysis, generation of responses, and related technical functions.

17.2. Information may be transmitted to those providers when reasonably necessary to perform the requested feature.

17.3. We do not disclose confidential internal implementation details, provider selection, models, system prompts, architecture, routing, or algorithms merely by publishing this Policy, unless disclosure is legally required.

17.4. Technical providers may process data under contracts, platform terms, or legal obligations applicable to them.

18. Telegram as an independent platform

18.1. Telegram independently determines how it processes data within Telegram services. FIBP is not responsible for Telegram's privacy practices.

18.2. Messages or actions you send specifically to the FIBP bot or FIBP Web App may be received by FIBP because you intentionally directed them to our Service.

18.3. FIBP does not obtain access to unrelated Telegram chats merely through the existence of the bot or Telegram login.

19. Apple, Google, payments, and other third parties

19.1. Apple, Google, Telegram, payment providers, app stores, merchants, and linked third-party sites may process data independently under their own terms and privacy policies.

19.2. FIBP is not responsible for the independent privacy practices of those services.

20. Sharing of information

20.1. We may disclose information:

• to infrastructure and technical service providers where necessary to operate the Service;
• to platform providers where necessary for authentication, purchases, notifications, or requested platform functionality;
• to professional advisers where reasonably necessary to protect rights or comply with law;
• to law-enforcement, courts, regulators, or other authorities where disclosure is legally required or lawfully necessary;
• in connection with a merger, acquisition, financing, reorganization, sale, or transfer of all or part of the FIBP project, subject to applicable law;
• with your direction or consent.

21. No sale of personal data

21.1. FIBP does not sell personal data for monetary consideration.

21.2. FIBP does not intentionally share personal data for cross-context behavioral advertising where such sharing is defined as a regulated "sale" or "sharing" under applicable privacy law.

22. International processing

22.1. The Internet and third-party infrastructure are international. FIBP and technical providers may process data in countries different from the country where you live.

22.2. Where applicable law requires safeguards for international transfers, the legally required mechanism will be used to the extent it applies to the relevant processing.

23. Retention

23.1. We retain information only for as long as reasonably necessary for the purposes described in this Policy, operation of the relevant feature, account security, fraud prevention, support, transactions, backups, dispute resolution, legal compliance, or protection of legal rights.

23.2. Different categories may have different retention periods.

23.3. Account and feature data may remain while an account is active. Some information may remain after account deletion where necessary for the purposes listed above.

23.4. Technical providers may maintain their own retention periods where they independently have legal or operational obligations.

24. Account deletion and data deletion

24.1. Where account deletion is available in the Service, you may use that functionality or contact support where appropriate.

24.2. Deletion requests do not necessarily require immediate deletion of every copy. Information may remain temporarily in backups, logs, security records, transaction records, anti-fraud systems, legal records, or other systems where retention is lawful and reasonably necessary.

24.3. Public content copied or republished by third parties may remain outside FIBP's control.

25. Security

25.1. We use reasonable technical and organizational measures intended to protect information against unauthorized access, alteration, disclosure, or destruction.

25.2. No website, application, network, cloud provider, encryption method, account system, or storage technology can guarantee absolute security.

25.3. You are responsible for protecting your device, email account, Telegram account, passwords, and other access credentials.

26. Your privacy rights

26.1. Depending on your location and applicable law, you may have rights to request access, correction, deletion, restriction, portability, objection, or information about certain processing.

26.2. You may also have a right to withdraw consent where consent is the legal basis and to complain to a competent supervisory authority.

26.3. Rights are subject to legal exceptions. We may need to verify your identity before fulfilling a request.

26.4. Requests may be sent to support@fibp.app.

27. Children

27.1. The Service is not directed to children under 13.

27.2. Where local law sets a higher age at which a person may independently consent to online data processing, that higher age applies unless valid parent or guardian authorization exists.

27.3. If you believe a child provided personal data contrary to applicable law, contact support@fibp.app.

28. Third-party links and partner offers

28.1. The Service may contain links to merchants, partners, stores, social platforms, or other external resources.

28.2. Their collection and use of information is governed by their own policies, not this Privacy Policy.

29. Changes to this Privacy Policy

29.1. We may update this Privacy Policy when the Service, technology, data practices, or legal requirements change.

29.2. The current version will be posted through the Service or associated website with an updated effective date.

29.3. Where law requires additional notice or consent for a material change, we will provide it as required.

30. Contact

Questions, privacy requests, or complaints may be sent to support@fibp.app.

This Policy is intended to describe actual FIBP data practices at a general level. It does not override mandatory privacy rights that apply in your jurisdiction.