Short version: Prismeal stores the meals you log — photos or descriptions — together with your goal and a few health-related inputs, so it can analyse your food and coach you. This is sensitive (health) data, processed only with your explicit consent. Your full history is yours: you can export everything or delete your account and all its data from inside the app at any time. We do not sell your personal data, and we show no advertising.
AEI Digital Solutions is an independent software studio operated by Adrian Eugen Ionescu. We develop and distribute Prismeal for iOS, Android, and the web.
Data controller: AEI Digital Solutions
Contact: [email protected]
| Data | Where it's stored / shared | Purpose |
|---|---|---|
| Account email & sign-in identifiers | Google Firebase Authentication | Creating and securing your account, syncing across devices |
| Meal photos & descriptions, identified foods, scores, macros, notes | Your device + Google Firebase (Firestore / Cloud Storage) | Analysing your meals and showing your diary |
| Health-related inputs — goal/Focus, age, optional weight, hand calibration, post-meal check-ins (energy, digestion, mood) | Your device + Google Firebase | Personalising your score and coaching |
| Subscription status | RevenueCat, and Apple / Google billing | Managing your subscription (we never receive your card details) |
| App version & basic diagnostics | Google (Firebase) | Running and securing the app |
We never collect your precise location, contacts, or messages, and we do not sell your personal data or show advertising.
Your meals, symptoms, weight and goals are health-related "special category" data under Article 9 of the GDPR. Prismeal processes them only on your explicit consent, which you give during onboarding and can withdraw at any time by deleting your data or your account (Section 7). Withdrawing consent does not affect processing that already happened.
To analyse a meal, the photo or description you submit is sent to Google's Gemini API, which returns the structured analysis. This processing is carried out to provide the service you requested, and is governed by Google's API terms.
You can exercise the main GDPR rights directly inside the app, at any time:
You may also access, rectify, restrict, object to processing, and withdraw consent, by using the app or emailing [email protected]. We respond within one month.
| Service | Provider | Purpose |
|---|---|---|
| Firebase Authentication, Firestore, Cloud Storage | Google LLC (USA) | Accounts, data sync, photo storage |
| Gemini API | Google LLC (USA) | AI meal analysis |
| RevenueCat | RevenueCat, Inc. (USA) | Subscription management |
| Apple In-App Purchase / Google Play Billing | Apple Inc. / Google LLC (USA) | Subscription billing |
Some providers process data on infrastructure outside the European Economic Area; such transfers rely on the safeguards (e.g. Standard Contractual Clauses) offered by those providers. Firebase's privacy information is at firebase.google.com/support/privacy.
We keep your data for as long as your account exists. When you delete your account, we delete your personal data from our live systems; residual copies in backups are removed on the normal backup cycle. We may retain minimal records where required by law.
Data is stored in access-controlled, user-scoped databases — each user can reach only their own data — photos are size- and type-restricted, our AI key is held server-side only, and transport is encrypted. No system is perfectly secure, but we apply measures appropriate to the sensitivity of the data.
Prismeal is not directed at children. You must be at least 16 to create an account (the age of digital consent in Romania), and weight-management coaching is offered only to users 18 or older. We do not knowingly collect data from children; if you believe a child has provided data, contact us and we will delete it.
We may update this policy. The current version is always at this URL, with an updated effective date, and we will ask for renewed consent where the law requires it.
For any privacy question or request:
AEI Digital Solutions
[email protected]
If you are not satisfied with our response, you may lodge a complaint with your local data protection authority. In Romania this is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP).