Cabbiro Privacy Policy
Cabbiro is a halal food and fitness tracker. This policy explains exactly what the app stores, what leaves your device, and how to delete it.
The short version. Cabbiro works entirely on your device unless you choose to create an account. We show no ads, use no analytics or tracking tools, and never sell or share your data for advertising. You can delete your account and everything in it from inside the app.
1. Who we are
Cabbiro is developed and operated by an individual developer based in Norway. For any privacy question or request, contact privacy@cabbiro.com.
2. What stays on your device
By default, everything. The following is stored only in the app's local storage on your phone and is not transmitted anywhere:
- Food diary entries, meals, and your calorie goal
- Weight and body measurements
- Sleep logs
- Workout and exercise sessions
- Prayer (Salah) tracking
- Dhikr counts
- Water intake
- Barcode scan history
- App settings, including your theme choice
Deleting the app removes all of this.
3. What leaves your device
Cabbiro contacts outside services only for the features listed below. Each row says what is sent and whether it identifies you.
| Feature | Service | What is sent |
|---|---|---|
| Account & cloud sync (optional) | Supabase (EU, Frankfurt) | Your email address and the diary, weight, sleep, prayer and daily total records you choose to sync |
| Meal photo scan | Google Gemini | The photo you take of your meal |
| Voice meal log | Google Gemini | The audio clip you record (max 30 seconds) |
| Barcode / halal scanner | Open Food Facts | The barcode number only. No account or device identifier |
| Recipes | Spoonacular, Unsplash | Anonymous requests for recipe data and photos. Nothing about you |
| Workout videos | YouTube | Videos play in an embedded player. Google may set cookies and collect viewing data under its own policy |
About the AI features
Meal photo scan and voice logging send your photo or audio clip to Google's Gemini API so it can estimate what you ate. These are processed to return a result and are handled under Google's API terms. Do not photograph or describe anything you would not want sent to a third party. If you never use these two features, nothing is ever sent to Google.
The nutrition figures these features return are estimates, and the halal flags they show are a heads-up, not a religious ruling.
4. Permissions
- Camera — to scan barcodes and photograph meals. Images are used for that scan only.
- Microphone — only while you are recording a voice meal log, and only when you start one.
- Motion & fitness — to read your step count from the phone's pedometer. Step data stays on the device.
- Notifications — to send the reminders you set up. You can turn these off at any time.
Every permission is requested when the relevant feature is first used, and declining one only disables that feature.
5. What we do not do
- No advertising and no ad networks
- No analytics, crash reporting, or tracking SDKs
- No selling, renting, or sharing of personal data
- No tracking you across other apps or websites
- No location collection
6. Accounts, storage and retention
Creating an account is optional and exists only so your data can be restored on a new device. Accounts are handled by Supabase, hosted in Frankfurt, Germany (EU). Synced records are kept until you delete them or delete your account.
Deleting your account
In the app: More → Settings → My profile → Danger zone → Delete account. This permanently removes your account and all records associated with it from our servers. It cannot be undone. You can also wipe all local data without deleting your account from the same screen.
7. Your rights
If you are in the EU, EEA, or UK, the GDPR gives you the right to access, correct, export, or erase your personal data, and to object to or restrict its processing. The app provides export and deletion directly in Settings. For anything else, email privacy@cabbiro.com and we will respond within 30 days. You may also complain to your national data protection authority.
Our legal basis for processing account data is performance of a contract (providing sync you asked for); for the AI features it is your consent, given each time you choose to scan or record.
8. Children
Cabbiro is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.
9. Security
Traffic to our services uses HTTPS. Synced records are protected by row-level security so an account can only read and write its own data. No system is perfectly secure, and we cannot guarantee absolute security.
10. Changes
If this policy changes materially we will update the date at the top and, where the change is significant, notify you in the app.