Privacy Policy

Who we are

MYZADAK ("MYZADAK", "we", "us") is an independent technology startup based in Zahle, Bekaa, Lebanon. We run the website myzadak.com and the Zadak app for Android, which appears on your phone as "Zadak" or "زادك". We are responsible for the personal information described in this policy.

For anything about your privacy, your information or deleting your account, email support@myzadak.com.

What this policy covers

This policy explains what information we handle when you use the Zadak app and the myzadak.com website, why we handle it, who can see it, how long we keep it and what choices you have. Most of it is about the app, which has accounts, a community and health features. The website is a set of information pages and has its own section near the end.

In short

We use your information to run Zadak. We do not sell it, we do not show ads, and we do not use analytics or advertising tools to track what you do. We use Google's diagnostic services to find crashes and errors (see "Crash reports, performance data and logs").
Your community profile and most of what you post in the community can be seen by anyone signed in to Zadak; private groups and group chats are limited to their members. Your recipe history, favourites, nutrition diary and health information are not shown to other users.
Health information is optional. A nutritionist can see your health profile and Care records only through permissions you approve, and you can withdraw them at any time.
Recipes, chef tips and the chef's answers are produced by Google's Gemini AI, and what you enter for these features is sent to Google for that purpose. Posts and photos in the main feed are also checked automatically by Google's AI and image services.
Your information is stored on Google Cloud servers in the United States.
Zadak is for people aged 18 and over. When you sign up, you confirm your age and accept our Terms of Use, and we keep a record of the versions you accepted.
You can delete your account in the app. Some things you shared with others stay, shown as coming from a "Former user".

Age

Zadak is intended for people aged 18 and over. Please do not create an account if you are under 18. When you create an account, the app asks for your age and asks you to confirm that you are 18 or over. If you believe someone under 18 is using Zadak, email support@myzadak.com and we will look into it and take appropriate action.

Your account

To create an account you enter your name, gender (male or female), age, email address and a password that meets the requirements shown in the app. You also confirm that you are 18 or over, agree to our Terms of Use and confirm that you have read this Privacy Policy. You sign in with your email address and password; there is no sign-in through other services.

Password. Your password is handled by Google's Firebase Authentication. We never see or store it. You can change it on the Security screen after entering your current password; your other devices then need to sign in again. If you forget it, Firebase emails you a link to reset it.
Email address. We use it to sign you in, to send verification and password emails, and to reply when you write to us. We do not use it for marketing. You can change it on the Security screen: after you enter your current password, we send a confirmation link to the new address, and your sign-in email changes only after you open that link.
Name, gender and age. These are kept in your private account record. Your gender and age are not shown to other users. We use your age only to check that you meet the minimum age of 18; Zadak does not currently use your gender in any feature. Your name is used as your community display name unless you choose a different one (see below), and a nutritionist sees it when you book an appointment.
Your acceptances. When you confirm that you are 18 or over, accept our Terms of Use and confirm that you have read this Privacy Policy, and when you accept the Community Guidelines before you first create content in the community, we record which version of each document you accepted and when, and, for your most recent acceptance, the step where you gave it (sign-up, the review prompt in the app, or the community) and the app language you used. This record is kept with your account and deleted when your account is deleted.
Devices and sign-ins. Each time you sign in, we record the time, your phone model and platform, and a device label made from the manufacturer, model and software build. You can see this list on the Security screen. We do not store your IP address in our database, but our server logs may record it (see "Crash reports, performance data and logs"). Firebase Authentication also processes IP addresses to provide sign-in, and Google says it keeps logged IP addresses for a few weeks.
Personal details. In Personal details you can change your name and add a profile photo, a diet type and any allergies. The diet type and allergies are used when you generate recipes (see below).
On your phone only. Your app language and your Clubs browsing filters are stored only on your phone.

Your community profile and what others can see

Community content cannot be viewed without signing in to the app. Anyone can create an account, though, so treat everything in the first list below as public.

Visible to anyone signed in to Zadak

Your community profile: display name, username, bio, profile and cover photos, and any links you add to Facebook, LinkedIn or WhatsApp. A WhatsApp link usually contains your phone number. Your profile also shows your follower, following and post counts and your points and level, and it records when you were last active. When you set up your profile, your account name becomes your display name unless you enter a different one.
Posts in the main feed (text, photos and polls) and their comments. Posts cannot be limited to your followers.
Reactions you add to posts, including who reacted, and the number of likes a post has.
Your followers list, and the fact that you follow someone: you appear in the followers list of each person you follow.
Stories, for 24 hours. After that they are removed automatically.
Posts in public groups, and events together with the list of people attending.
Reviews you write about nutritionists. They are linked to your account.
If you are a nutritionist, your practice profile: name, photo, bio, specialty, country, experience, languages and ratings.

When you like, comment on or reply to a post, mention someone or follow someone, that person may receive a notification showing your display name.

Visible to a limited group

Posts in private groups, and group chats: the group's active members.
Your membership of a group and your role in it: the group's active members, its owner and its admins.
Your conversations with a nutritionist: you and the nutritionist.
Reports you make: you and our administrators.

Visible only to you

Your poll votes (others see only the totals), your own list of the people you follow (although each of them shows you among their followers), the tags you follow, your bookmarks, the people you block, your drafts and your notification settings.

Links to photos. Photos and files are stored at web addresses that are hard to guess. Anyone who gets such an address, for example because another user copies it, can open the file without signing in.

Location data in photos. Photos attached to main-feed posts are converted to a new file on your phone before upload, which removes hidden data such as the place where a photo was taken. Other images, such as profile and cover photos and stories, may be uploaded as the original file. If your camera saves location in photos, consider removing it before uploading those images.

You can delete your own posts and comments at any time. Our administrators can see all community content, including posts that are hidden or held for review.

Recipes, favourites and history

When you ask Zadak for recipes, the app sends our servers the ingredients you entered, the app language, and the diet type and allergies saved in Personal details. Our servers send these to Google's Gemini AI model and return the recipes (see "How we use AI" below). Your health profile is not used for recipes.

History and favourites. Recipes you generate and recipes you add to your favourites are stored in your account on our servers. While you are signed in, the app keeps a temporary copy on your phone so it works smoothly, and it clears that copy when you log out. Your history and favourites are not shown to other users. On the free plan the app shows your newest 100 recipes; older ones are hidden, not deleted, and stay in your account until you remove them or delete your account.
Chef tips, Ask the chef and ingredient swaps. For a chef tip, the recipe's title and ingredients are sent to the AI model, and the tip is saved with the recipe in your history. For Ask the chef, your question and the last few messages of that conversation are sent as well. For an ingredient swap, a short request naming the ingredient to replace is sent. Your Ask the chef conversation (your questions and the chef's answers, up to the latest 40 messages) is saved with the recipe in your history and favourites. It is deleted when you remove the recipe from your history and favourites, or when you delete your account. Please do not type personal or health details into a question unless you are comfortable with them being sent to the AI model and saved in this way.
Shared recipe cache. To answer faster and at lower cost, we keep a shared copy of generated recipes together with the inputs that produced them: the ingredients, language, diet type and allergies text. This copy does not contain your name or your account ID (the random code that identifies your account in our systems), and it may be shown to another user who enters the same inputs. Because it is not linked to you, it is not removed when you delete your account. Please write only food allergies and dietary needs in those fields.
Dish images. Images of dishes are generated by AI from the dish itself (its name, cooking methods, main ingredients and dietary constraints), not from information about you. Everyone who gets the same dish sees the same image.
Recipe of the day. The featured recipe is created on our servers without any user information.

How we use AI

Zadak's AI features run on our servers, which send requests to Google's Gemini models on Google Cloud Vertex AI. What is sent depends on the feature:

Recipes: ingredients, app language, diet type and allergies.
Chef tips and Ask the chef: the recipe's title and ingredients and, for Ask the chef, your question and the recent conversation.
Ingredient swaps: the recipe's title and ingredients and the name of the ingredient to replace.
Dish images and the recipe of the day: information about the dish only.
Community safety checks: the text and hashtags of posts in the main feed (see "Content safety and moderation").

We do not add your name, email address or account ID to what we send to the AI model. We use Google's global service, so Google may process these requests in any of its locations, not only in the United States. Google states that it does not use this data to train or fine-tune its AI models without our permission. Under Google's terms, requests may be logged to detect abuse.

AI can be wrong. Always check recipes yourself, especially for allergies. See Safety & Disclaimers.

Reporting an AI result. In the app you can report a recipe, the recipe of the day, a nutrition estimate, a dish image, a chef tip, an Ask the chef answer or an ingredient swap with Report AI content or the report option next to it. A report contains the reason you choose, any note you add (up to 500 characters), a copy of the AI result you reported when we can still find it (shortened if it is very long), a reference to the recipe, your app language, your account ID and the time. It contains the result itself, not your request: we do not copy the ingredients you typed, your diet type and allergies, or your questions to the chef into the report. Please do not write personal or health details in the note. Our administrators review reports to fix problems and make the AI features safer. See "How long we keep information" and "Deleting your account" for what happens to your reports.

Content safety and moderation

When you publish or edit a post in the main feed, its full text and its hashtags are checked by Google's Gemini AI. A post without photos appears straight away and is checked within moments. If the check flags the post, it is held until an administrator reviews it. If the check cannot decide or cannot run, for example because the service is unavailable, the post is held and checked again automatically; it returns once a check passes, or after an administrator reviews it.
Photos in main-feed posts are checked by Google Cloud Vision SafeSearch, an automated image-safety check, before anyone else can see the post. Until the check is done, only you can see the post, and the app shows that its photos are being checked. People you mention may still receive a notification showing the beginning of its text. If the check cannot run, the post stays visible only to you and is checked again automatically; it appears once its photos pass, and an administrator reviews it if the checks keep failing. A post whose photo is flagged is held until an administrator reviews it.
If we switch automatic checking off, for example during a service incident, new posts may be published without it until it is back on, and we rely on reports in the meantime.
Other content is not checked automatically. This includes stories, group posts and their photos, comments, profile and cover photos and chats. For these we rely on your reports and on group owners and moderators.
You can report main-feed posts, group posts and group comments, stories, nutritionists and AI results (recipes, the recipe of the day, nutrition estimates, dish images, chef tips, Ask the chef answers and ingredient swaps) in the app. To report anything else, such as a comment in the main feed, a profile, a chat message or a review, email support@myzadak.com.
A post with several open reports can be hidden automatically until it is reviewed. Our administrators review reports and can hide or remove content and restrict accounts.
Group owners and moderators can moderate their groups, for example by muting or removing members or clearing the group chat.
Blocking someone removes any follow between you in both directions and stops them mentioning you.

What is allowed is described in the Community Guidelines.

Nutrition diary, health profile and Care

These features are optional, and you decide what to enter. Every field in your health profile is optional. Zadak does not provide medical diagnosis; see Safety & Disclaimers.

Your nutrition diary and goals. The meals and nutrition values you log and the goals you set for yourself are visible only to you. They are not part of Care and are never shared with a nutritionist.
Your health profile. My private health profile can include your date of birth or age range, the sex used for calculations, height, weight, activity level, nutrition goal, allergies, intolerances, dietary preferences, medical conditions, medications, pregnancy or breastfeeding, emergency notes and time zone. It is never shown on your community profile or in the community.
Care records. If you work with a nutritionist through Care, Zadak also stores your intake forms, measurements (such as weight, height, waist and body fat), Care meal logs and Care goals. When a record changes, earlier versions are kept. Measurements and Care meal logs you delete are hidden, but kept until your account is deleted.

Sharing with a nutritionist

A nutritionist can see your health profile and Care records only through permissions you approve:

After a confirmed appointment, a nutritionist can send you a Care request listing what they would like to see: intake (which includes your health profile), nutrition goals, meal logs, measurements, nutrition plans and session summaries.
No permission is on by default. Only the categories you select are shared.
On the Nutrition privacy screen you can remove any permission or end the relationship at any time, and access stops immediately. Removing a permission does not delete records the nutritionist has already created and must keep.
A nutritionist can add measurements, and can write nutrition plans and session summaries, which you see under the same permissions. Nutritionists can also keep private notes about your sessions, which you cannot see.
MYZADAK can suspend a nutritionist's access to your information.

Appointments and messages with nutritionists

Booking. When you book, the nutritionist sees your name, the session time and type, and any note you add (up to 500 characters). We send a reminder 24 hours before the session.
Sessions and payment. Sessions marked as video, audio, chat or in person take place in the way you arrange with the nutritionist; the app does not make calls. Zadak does not collect payment for sessions; you arrange payment directly with the nutritionist.
Messages. In the app, a conversation with a nutritionist can be read only by the two of you. You can send text and share recipes. If you delete a message you sent, its text is removed. Conversations are not deleted automatically. Notifications about new messages do not show the message text.
Reviews. After an appointment you can rate the nutritionist and write a comment. Reviews are visible to signed-in users and are linked to your account. If you edit a review, earlier versions are kept for our administrators.
Disputes and complaints. If you raise one, we use what you tell us to handle it.

If you apply as a nutritionist

We collect your professional details, an optional licence number and issuing authority, and at least one supporting document, such as a qualification, licence, registration or identity document. You and our administrators can see your application. We keep these documents while your account exists and delete them when you delete your account. If you are approved, your practice profile is visible to signed-in users, and your commercial records with us are visible only to you and our administrators.

Clubs

Taking an offer. When you take a club offer, we create a record linking your account, the club, the offer and a redemption code. You and our administrators can see it.
Redeeming at the club. At the club, a staff member scans your QR code. The club's owner and managers, and the staff member who confirmed your visit, can then see your display name, profile photo and the details of the redemption, such as the offer and price.
Commission. MYZADAK earns a commission from clubs on confirmed redemptions. The statements we send clubs list redemptions, offers and amounts, not your name.
Club applications. If you apply to list a club, we collect your full name, your role at the club, a contact phone number and email address, and the club's name, address, area, phone and WhatsApp number. Our administrators review the application.

Premium and payments

Premium is an optional paid subscription, bought and billed through Google Play. Google handles the payment under its own terms and privacy policy, and we never receive your card or bank details. We keep a record of your Premium status in your account, such as the subscription product and when the current period ends, together with a history of changes to your Premium status.

Deleting your Zadak account does not cancel your Google Play subscription, and the app reminds you of this before you confirm a deletion. To stop payments, cancel the subscription in Google Play.

Notifications

Push notifications are delivered by Firebase Cloud Messaging. To send them, we store a notification token (a code that lets us reach your phone) for each phone you use. The token stops working when you log out on that phone, and all your tokens are removed when you use Log out of all devices or delete your account.
We send notifications about appointments, messages, Care requests, community activity (such as likes, comments, replies, mentions and new followers), clubs, Premium and moderation decisions.
The notifications list in the app is cleared automatically: a notification you have read is deleted once it is about 90 days old, and every notification is deleted once it is about 365 days old.
You can turn community notifications and the daily recipe notification on or off in the app, and turn all notifications off in your phone's settings. The daily recipe notification is scheduled on your phone.

Device permissions and features on your phone

Notifications. The app asks for permission when notifications become relevant.
Microphone. When you tap voice input for ingredients on the Home screen, the app asks for microphone permission and opens your phone's speech recognition service. That service (for example Google's) records and processes your voice under its own terms. Zadak receives only the resulting text.
Camera. Used only by the QR scanner that partner-club staff use to confirm visits. The image is analysed on the phone and is not saved or uploaded.
Photos and documents. You choose photos (and, for nutritionist applications, documents) through Android's own picker, so the app receives only the items you select. On Android 9 and older, the app asks for storage permission only to save an image to your gallery when you choose to.
Location, contacts and calendar. The app does not ask for location permission and does not collect your location, apart from any location your camera saved inside a photo you upload (see "Location data in photos"). It does not access your contacts or calendar.

Some features work entirely on your phone. Recipe PDFs are created on your phone and shared through Android's share menu, without our servers; the app removes its copies of exported files when you log out. Read aloud uses your phone's text-to-speech engine. Depending on the engine, the text being read may be sent to the engine's provider (for example Google) to produce the voice online, or a voice may be downloaded.

Crash reports, performance data and logs

The app does not contain Google Analytics, Firebase Analytics or any advertising tools, and it does not use your phone's advertising ID. We use two Google diagnostic services to keep the app working:

Firebase Crashlytics. When the app crashes or records certain errors, it sends a report with technical details: phone model, Android version, app version, the state of the app at that moment, the feature or screen involved and, in some cases, the ID of the post or profile concerned. While you are signed in, reports are linked to your account ID. Google keeps crash reports for 90 days and then starts deleting them from its systems. They are not removed when you delete your account.
Firebase Performance Monitoring. It measures how quickly the app starts, opens screens and completes network requests. Google keeps this data for up to 60 days and then starts deleting it.

The app also includes Google's ML Kit barcode scanner, which runs on the phone for the club QR scanner. Google states that ML Kit may send device information, app information and performance metrics to Google for diagnostics and usage analytics. This is Google's own information about how the scanner works; we do not use it to track you.

To protect our services from abuse, the app uses Firebase App Check with Google Play Integrity, which lets Google confirm that requests come from a genuine copy of the app on a genuine Android device.

Our servers also keep technical logs to run, secure and fix the service. Most logs are kept for 30 days. Some log entries include account IDs and technical details of requests, such as the IP address they came from. Google Cloud also keeps its own audit records of administrative actions on our systems, such as configuration changes, for 400 days.

Why we use your information

To provide the features you choose: your account, recipes and the AI chef, the community, Care, appointments, Clubs, Premium and notifications.
To keep Zadak safe and reliable: securing accounts, preventing abuse and fraud, moderating content, and finding and fixing faults.
To communicate with you about your account and your requests.
To keep a record of your confirmation that you meet the minimum age and of the versions of our Terms of Use, this policy and the Community Guidelines that you accepted.
To run our partnerships, for example calculating commission on club offers.
To meet legal obligations and to protect the rights and safety of our users, our partners and MYZADAK.

We do not sell personal information and do not use it for advertising. Health information is used only for the features you use it with.

Where a law requires a legal basis, we rely on the following. For your account, content and the features you use, the basis is providing the service you asked for. For security records, moderation, logs and diagnostics, it is our legitimate interest in a safe and working service. Where a legal obligation applies, we rely on that obligation. Health information is processed when you choose to enter it in optional fields, or when a nutritionist you work with records it, such as measurements, plans, session summaries and private session notes. Your health profile and Care records reach a nutritionist only through the permissions you approve.

Who we share information with

Other users, as described in "Your community profile and what others can see".
Nutritionists you book or work with: appointment details, your messages, and Care information under the permissions you approve.
Partner clubs, when you redeem an offer.
Service providers that run Zadak for us, listed below. They process information on our behalf.
Authorities and others, when the law requires it, or when it is needed to protect someone's safety, to prevent fraud or abuse, or to establish or defend legal claims.
A new owner, if MYZADAK or the service is reorganised, merged or sold. This policy would continue to apply to your information.

This policy does not cover information you give nutritionists or partner clubs outside Zadak, for example to arrange payment for a session.

Our service providers

Google Firebase and Google Cloud: Firebase Authentication (sign-in); Cloud Firestore (our database, United States multi-region); Cloud Storage (photos and documents, us-central1 region, United States); Cloud Functions, Cloud Tasks and Cloud Scheduler (our server code and scheduled jobs, us-central1); Vertex AI (Gemini AI); Cloud Vision (photo checks); Firebase Cloud Messaging and Firebase Installations (notifications); Crashlytics and Performance Monitoring (diagnostics); App Check (abuse protection); Firebase Hosting (this website and the pages opened from account emails).
Google Play: app distribution and Premium billing.
Google ML Kit: barcode scanning on the phone.
Your phone's speech recognition and text-to-speech services, provided by your phone's maker or the service you have chosen.
FormSubmit: delivers messages sent through the website's contact form.
Cloudflare: routes email sent to myzadak.com addresses.
YouTube (Google): plays videos on the website when you choose to play them.

Where your information is processed

We are based in Lebanon, but our servers are not. Our database is stored in Google Cloud's United States multi-region, and our files and server code are in Google Cloud's us-central1 region in the United States. AI requests and photo checks use Google's global services and may be processed in other countries. Google's notification and diagnostic services, FormSubmit and Cloudflare may also process information outside Lebanon. Data protection laws in those countries may differ from the laws where you live.

How long we keep information

While your account exists: your account details, the record of the policy versions you accepted, device and sign-in history, profile, posts and other content, recipe history and favourites (including chef tips and Ask the chef conversations), nutrition diary, health and Care information, messages, appointments, nutritionist application documents and uploaded files are kept while your account exists, unless you delete them sooner where the app lets you. Care records you delete in the app, and earlier versions of Care records, are kept until your account is deleted.
After you delete your account: most of this is deleted. The text of your posts, comments and messages, your reviews, the reports you made (with any note you added and, for a report about an AI result, the copy of that result), and appointment and club records stay without your name, with no fixed end date, and your username stays reserved permanently. Nutritionists' private session notes are currently kept as well. See "Deleting your account".
Stories: removed automatically shortly after 24 hours.
Notifications in the app: read notifications after about 90 days, all notifications after about 365 days at most.
Copies of AI results: set to expire after 6 hours, so that an interrupted request can be completed, and then deleted automatically soon after.
Shared recipe cache and dish images: kept without a fixed end date. They are not linked to your account.
Server logs: 30 days for most logs; Google Cloud's audit records of administrative actions, 400 days. Crash reports: 90 days, then Google starts deleting them. Performance data: up to 60 days, then Google starts deleting it.
Records of actions in groups and clubs, such as role changes: deleted automatically after about 400 days.
Security, administration and accounting records, such as records of actions our administrators take on accounts and records needed for accounting with clubs and nutritionists: kept as long as they are needed for security, accountability and legal purposes. We have not yet set fixed periods for all of these.
Backups: our database keeps a 7-day recovery history, daily backups kept for 7 days and weekly backups kept for 28 days. Deleted files can be recovered for 7 days. Information you delete can therefore remain in backups for up to 28 days before it expires automatically. We use backups only to recover from errors or incidents.

Deleting your account

You can delete your account in the app at any time, except in the few cases listed under "Before you delete" below. Open Profile, then Security, go to Danger zone and tap Delete account, then Delete account permanently. You may be asked for your password. Your account is locked straight away, and deletion usually finishes within a few minutes. Full details are on the Account deletion page.

What is deleted: your sign-in account; your personal details; your health profile, intake forms, measurements, meal logs, goals and nutrition diary; your recipe history and favourites, including chef tips and Ask the chef conversations; your notifications and your device and sign-in history; the record of the policy versions you accepted and of your 18+ confirmation; your Care relationships and the Care records about you, including plans and summaries written for you; your stories, likes, reactions, follows and group memberships; your appointment notes; your club offer records; your nutritionist application documents; and the photos and files you uploaded.

What stays, without your name: some things you shared with others stay, so that other people's conversations and records still make sense. They are shown as coming from a "Former user", without your name, photo, username or a link to your profile:

the text of your posts, comments, group posts and group chat messages, and your polls (photos are removed);
your messages in conversations with nutritionists;
reviews you wrote. If a review's text itself identifies you, you can ask us to remove that text;
appointment records, including reschedules and disputes; reports and complaints you made, including any note you added and, for a report about an AI result, the copy of that result; and events you created;
club records, such as redemptions, your role as club staff and club applications you submitted. Your own contact details are removed from club applications.

Your username stays reserved permanently, with no link to you, so no one else can use it. If you own a group, ownership passes to an eligible admin of the group or, if there is none, to an eligible moderator; if no one is eligible, the group stays without an owner, and settings only an owner can change are locked until we assign a new owner. If you are a nutritionist, records you wrote about your clients stay in their Care history, shown as coming from a "Former Nutritionist".

What we keep for other reasons:

records of security and administrative actions concerning your account, which may include your account ID;
reports other users made about you;
a technical record that the deletion took place, which uses a one-way code instead of your account ID;
if you are a nutritionist, your commercial records with us;
nutritionists' private notes about your sessions, which are not visible to you. They are currently kept after deletion while we decide what professional record-keeping rules require;
your votes in polls and your replies to events created by other people, which stay linked to your former account ID but not to your name, and short-lived records of your likes, which expire after 7 days;
notifications other users already received about your activity (for example, that you liked their post), which may still show the name you used until they are deleted automatically, at most about 365 days later.

Copies outside our main database: deleted information can remain in backups for up to 28 days and in most server logs for up to 30 days. Crash reports are kept for 90 days, after which Google starts deleting them. Google says it removes deleted Firebase Authentication data from its systems, including backups, within 180 days.

Before you delete:

Cancel any Premium subscription in Google Play. Deleting your account does not cancel it; the app reminds you of this before you confirm, with a link to your Google Play subscriptions.
You cannot delete your account while you own a partner club, have an active commercial arrangement or an unsettled statement with us, or are the last administrator. The app tells you if one of these applies and changes nothing; email support@myzadak.com to resolve it.
If deletion starts but cannot finish automatically, your account stays locked and the app asks you to contact us. Email support@myzadak.com.

Without the app: email support@myzadak.com from the email address of your account, with the subject "Account deletion request". A member of our team handles each request by hand: we reply to that address with a confirmation code, and the request goes ahead only after you reply from the same address with the code within 14 days. If you no longer have access to that address, we cannot delete the account by email. We aim to complete verified requests within 30 days of your confirmation. The steps are on the Account deletion page.

Your choices and rights

In the app you can:

view and change your community profile, your health profile, and your name, photo, diet type and allergies in Personal details;
delete your own posts and comments;
remove recipes from your history and your favourites;
approve, remove or end a nutritionist's access on the Nutrition privacy screen;
choose which notifications you receive;
see your devices and recent sign-ins, and use Log out of all devices;
change your password and your email address on the Security screen;
delete your account.

Depending on where you live, you may also have the right to see the personal information we hold about you or get a copy of it, to have it corrected or deleted, to object to or restrict how we use it, and to withdraw any permission you gave. The app has no download or export tool, and it does not let you change some details, such as your gender or age. Please make these requests by email to support@myzadak.com, from the email address of your account where possible. We may need to confirm that the request comes from you. We aim to reply within 30 days.

You can also complain to the data protection authority where you live.

Security

Information travels between the app and our servers over encrypted connections. Security rules on our database and file storage limit who can read each item. For example, in the app your diary can be read only by you, and your Care information only by you and the nutritionists you authorise. Access by our team is limited to people who need it to run and support Zadak. Chats in the app are not end-to-end encrypted. No system is perfectly secure. Please use a strong password that you do not use elsewhere, and use Log out of all devices if you lose your phone.

The website, myzadak.com

The website is a set of information pages with a contact form. It has no accounts, no newsletter, no advertising and no analytics. The site does not set cookies or store anything in your browser, and its pages, scripts, fonts and images all come from myzadak.com itself.

Hosting. The site is hosted on Google's Firebase Hosting. When you visit, Google processes technical information such as your IP address, browser, the page requested and the time, to deliver the page and keep the site secure. Google says Firebase Hosting keeps IP data for a few months.
Contact form. The form collects your name, email address, an optional phone number, the reason you choose, your message and the language of the page. Your browser sends it to FormSubmit, a third-party service, which delivers it by email to info@myzadak.com. FormSubmit handles submissions under its own terms. We use your message only to reply to you, and keep it as long as we need to handle it.
Videos. Videos on the site load only when you press play; until then, nothing is requested from YouTube. When you play a video, it loads from YouTube's privacy-enhanced domain, youtube-nocookie.com. YouTube (Google) then receives your IP address and device information and may store information in your browser, under Google's privacy policy.
Email. Email you send to our myzadak.com addresses is routed by Cloudflare to our mailbox. We use it to answer you and keep it as long as we need to handle your enquiry.

Links to other services

The app and the website link to services we do not control, such as Google Play, social networks and links that users add to their profiles. Those services have their own privacy policies.

Changes to this policy

We will update this policy when Zadak changes. We will post the new version here and change the version and date at the top. If a change significantly affects how we use your information, we will try to tell you before it takes effect, and the app may ask you to review and accept the new version before you continue.

Contact

Privacy, account and deletion requests: support@myzadak.com

General enquiries: info@myzadak.com

In the app: Profile → Information → Contact support opens an email to us. The sign-in and sign-up screens also have a Contact support link.