Privacy
Last updated: May 9, 2026
Cibozen is meant to be simple and respectful. Here's exactly what we collect, where it lives, and how to delete it.
What we collect
Meal photos you send us, optional text or voice notes, the resulting nutritional analysis. If you sign up, also your email and name (managed by Clerk). If you use the app without signing up, we set a 'cibozen_anon_session' cookie tying the analyses to your device for 30 days.
Where it lives
Photos on Cloudflare R2 (EU data center). Analyses in our PostgreSQL databases on Hetzner servers in Helsinki. Voice notes are transcribed and not retained as audio. Accounts and sessions managed by Clerk Inc.
Who sees what
The photo and your note are sent to OpenAI (enterprise API) for visual analysis. OpenAI does not use this data to train models (standard API policy). No other vendor sees your meals.
Your rights (GDPR)
You can view, correct, export or delete your data anytime. For full account deletion email [email protected] — within 7 days we remove everything (DB + R2 + Clerk).
How long we keep it
Anonymous session: 30 days from last analysis. Registered account: as long as you keep the account open. Deletion = within 30 days we delete from backups too.
Cookies
Essentials only: the anonymous session cookie and Clerk's auth cookies. No advertising trackers.