Kepçe Privacy Policy
In short
- Your log (profile, meals, water, weight) is stored only on your device. Kepçe has no server and no sign-up.
- AI features run on your device (Apple Foundation Models). What you type and the photos you take are not sent to a server.
- The only thing that leaves your device is the barcode number when you scan a product. It is sent to Open Food Facts to fetch the product's nutrition data.
- No ads, no tracking, and no third-party analytics or advertising SDKs. Your data is never sold.
- You can export or permanently delete your data at any time.
1. Who is responsible
The data controller for Kepçe, including under Türkiye's Personal Data Protection Law No. 6698 (KVKK), is the app's developer and publisher, Erdi Souksu.
Email: erdi.souksu@gmail.com
Kepçe does not send your data to any server the developer can access. The developer therefore cannot see, read or change what you record in the app. Your data stays on your device and under your control.
2. What data is processed and where
All of the data below is stored on your device, in an app group container shared only by Kepçe and the Kepçe widget.
| Data | Examples | Where |
|---|---|---|
| Profile | Birth year, height, optional sex, activity level, goal, dietary preferences, allergen preferences, calorie/macro/water targets | Device |
| Meal log | Food name, grams, portion, calories and nutrients, the value's source, how it was logged | Device |
| Water and weight log | Amount, date and time | Device |
| Meal photos | Only if you turn on "Keep photo with meal" | Device, with file encryption |
| Dietitian plan | Plan title, items, optional dietitian name and any PDF/image you attach | Device |
| Consent records | Which document and version you accepted or viewed, and when | Device |
| AI weekly summaries | Summary text generated by the on-device model | Device |
| Settings and daily usage counters | Units, reminder times, app lock, number of free AI uses today | Device |
Analytics: Kepçe writes short event codes, such as "screen opened" or "log succeeded", only to your device's system log. These events never contain calories, weight, food names or free text, and they are never sent to a server.
Notifications: Water and meal reminders are scheduled locally on your device. No push notification server is used.
Widgets: Widgets read data from the shared app container on the same device. No Kepçe server is involved. Version 1.0 has no Apple Watch app, so no data is sent to a watch.
iCloud: Kepçe does not sync your data to iCloud. If your device's own iCloud or computer backup is turned on, app data may be included in that backup. The backup is between you and Apple and is governed by Apple's terms.
3. Apple Health (HealthKit)
Connecting to Apple Health is optional and works only with your permission. You can change permissions at any time in iPhone Settings > Health > Data Access & Devices.
- Read: weight, height, active energy, step count and workouts. These are used only to show trends next to your food log and to suggest targets.
- Written (optional): the weight you log, and the energy, protein, carbohydrate and fat of your meals. Text such as food names is not written to Health.
Data obtained from HealthKit is not used for advertising, marketing or profiling, is not sold, is not shared with third parties, and does not leave your device. Blood glucose and clinical records are not requested.
4. AI features
Typed meal logging, photo recognition, the assistant chat and the weekly summary run on Apple's on-device language model (Apple Foundation Models). They are available only on devices that support Apple Intelligence (iPhone 15 Pro or later, with Apple Intelligence turned on). Photo recognition requires iOS 27.
- What you type, the photos you take and your chat messages are processed on your device and are not sent to a server by Kepçe.
- Chat history is not stored; each request starts a new session.
- The AI never produces calorie or nutrient values. It only suggests food names and estimated amounts. Values are calculated from the database, and you confirm them before saving.
- A photo is stored on your device only if you turn on "Keep photo with meal".
5. Barcode lookup (Open Food Facts)
When you scan a packaged product's barcode, Kepçe sends only the barcode number to Open Food Facts (world.openfoodfacts.org, a non-profit open-data project based in France) to fetch the product's nutrition values. Your name, profile, health data and meal log are never included.
As with any internet request, your device's IP address and the time of the request technically reach the Open Food Facts server. Open Food Facts handles these logs under its own privacy policy. If you do not use barcode scanning, this request is never made. Every other search and logging feature works offline.
Nutrition data sources: USDA FoodData Central (U.S. Department of Agriculture, public domain) and Open Food Facts (Open Database License, ODbL). This data is bundled with the app or looked up only for barcodes.
6. Subscriptions and payments
Kepçe+ is purchased and managed through Apple's App Store. Apple processes your payment. Kepçe has no access to your card details, name or Apple Account. The app only checks whether your subscription is active, using the signed transaction information Apple delivers to your device. Apple's handling of your data is governed by the Apple Privacy Policy.
7. Purposes and legal bases
- Providing meal, water and weight tracking, calculating targets and showing progress: performance of a contract (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b) where applicable).
- Records that may count as health data (meals, weight, Apple Health data): your explicit consent given in the app (KVKK Art. 6; GDPR Art. 9(2)(a) where applicable). You can withdraw consent at any time by deleting your data and turning off Apple Health access.
- Fetching product data by barcode: providing the service you requested.
- Keeping records of accepted legal documents: legal obligation and legitimate interest.
Kepçe does not use your data for automated decisions that have legal or similarly significant effects on you.
8. Sharing and transfers
Your personal data is not transferred or sold to the developer, advertisers, data brokers or any other third party. The only exception is that, when you scan a barcode, the barcode number and technical connection data (IP address) reach the Open Food Facts server outside Türkiye (see Section 5).
9. Security
- Photos, documents and export files are written with iOS's strongest file protection class (unreadable while the device is locked).
- You can lock the app with Face ID.
- Content is blurred in the app switcher while the app is in the background.
- Notifications never show weight, calories or food names.
10. Retention, export and deletion
Your data stays on your device until you delete it. The free version only displays the last 14 days of history; older entries are not deleted.
- Export: in Settings > My Data you can export your log as JSON or CSV. The file leaves your device only if you share it.
- Delete: Settings > My Data > Delete my account and data permanently deletes your profile, meal, water and weight logs, photos, dietitian documents, consent records, pending notifications and app settings.
- Deleting the app from your device also deletes its data.
- Data already written to Apple Health and your App Store subscription are not affected. Manage them in the Health app and your App Store account settings.
11. Your rights
Under KVKK Article 11, and similar laws such as the GDPR where they apply, you have the right to:
- learn whether your personal data is processed and request information about it,
- learn the purpose of processing and whether data is used accordingly,
- know the third parties in Türkiye or abroad to whom data is transferred,
- request correction of incomplete or inaccurate data,
- request deletion or destruction of your data,
- request that corrections and deletions be notified to third parties to whom data was transferred,
- object to outcomes against you that result solely from automated analysis,
- claim compensation for damage caused by unlawful processing,
- and, where the GDPR applies, data portability and the right to lodge a complaint with your local supervisory authority.
Because your data is on your device, you can exercise most of these rights directly in the app (view, correct, export, delete). For anything else, email erdi.souksu@gmail.com. Requests are answered free of charge within 30 days at the latest. In Türkiye you may complain to the Personal Data Protection Board (KVKK Kurulu).
Note: since the developer cannot access the data on your device, requests about that data must be completed with the in-app tools.
12. Age requirement
Kepçe is intended for users aged 18 and over. The app asks for age confirmation on first launch, and users who indicate they are under 18 cannot continue. We do not knowingly process data of anyone under 18.
13. Changes
We may update this policy. For significant changes, the date and version on this page are updated and, where needed, the app asks you to accept the new version.
14. Contact
For any privacy question: erdi.souksu@gmail.com