This Privacy Policy explains how Kenji ("Kenji Meals", "we", "us"), operated from Greece by DigitalBox Studios, collects, uses, and protects personal data when you use our app, website, and related services. We are the data controller for the purposes of the EU General Data Protection Regulation (GDPR).
Information We Collect
Information you provide directly: your name, email address, support messages, feedback, and app preferences.
Nutrition and meal data you enter to use the app: dietary preferences, allergies and restrictions, grocery budget, cooking skill, nutrition goals, body details you choose to enter (such as weight or weight goals), meal selections, saved and tuned recipes, and meal logs.
Device and usage data: app interactions, diagnostics and crash data, notification settings, and subscription status provided by Apple.
Meal Photos and Fridge Scans
When you photograph a dish or your fridge, the image is analysed on your device to detect foods and text. Only the resulting text description is sent to our AI provider to generate a recipe or estimate — your photo itself is not sent to the AI provider. If you choose to save a snapped dish to your favourites, the photo is stored in your own private Apple iCloud so it can sync to your devices; we do not receive a copy on our servers.
How We Use Information and Legal Bases
We process personal data to:
- provide the Service — generate plans, recipes, grocery lists, nutrition estimates, reminders, and saved libraries (legal basis: performance of our contract with you);
- operate AI features and personalize results (legal basis: contract and our legitimate interests in providing the core features);
- maintain security, prevent abuse, and enforce usage limits (legal basis: legitimate interests);
- analyze and improve the app (legal basis: legitimate interests or your consent where required);
- manage subscriptions and comply with legal obligations.
Meal and nutrition outputs are estimates and are not medical advice. Always verify ingredients, allergens, and labels before relying on any recommendation.
Providers We Share Data With
We use a small set of trusted providers ("processors") who handle data only on our instructions:
- Apple — app distribution, in-app purchases, and private iCloud/CloudKit storage of your data on your account;
- DeepSeek — AI processing of the text we send to generate recipes and nutrition estimates;
- RevenueCat — managing and validating your subscription status;
- Mixpanel — product analytics and diagnostics;
- our EU-based hosting provider — running our servers and recipe content.
We do not sell your personal data and we do not use it for third-party advertising.
International Transfers
Most processing takes place within the EU/EEA. Some providers (for example our AI provider) may process data outside the EEA. Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, and we minimize what is sent (for example, sending only meal-description text and not your identity or photos).
Data Retention
We keep personal data only as long as needed to provide the Service, comply with legal obligations, resolve disputes, and maintain security. Data you store in your private iCloud remains under your Apple account until you delete it. You can ask us to delete your data at any time.
Your Rights
Under the GDPR you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. You may withdraw consent where processing is based on consent. To exercise these rights, contact us at kenjimeals@protonmail.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr) or your local supervisory authority.
Notifications
If you enable notifications, we may send meal reminders and planning prompts. You can disable them at any time in your device or app settings.
Children
Kenji is not intended for anyone under 15 (the age of digital consent in Greece). We do not knowingly collect data from children under 15. If you believe a child has provided data, contact us so we can remove it.
Security
We use reasonable technical and organizational safeguards to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will update the effective date and provide additional notice where appropriate.
Contact
For privacy questions or requests, contact us at kenjimeals@protonmail.com.