1. Who is responsible
Controller: Cavexo LLC Address: 6809 Mentone St, Coral Gables, FL 33146, United States Contact: dalia@cavexo.com
2. Summary
- Records you enter in Dalia—such as meals, glucose, insulin, activity, notes, and profile information—are stored mainly on your device.
- You may create or link an account using Apple, Google, or a passwordless link sent to your email address. The account can recover your identity and Pro access; it does not automatically sync your local records across devices.
- Some artificial intelligence features send our providers only the information needed to generate the analysis you requested.
- If you choose to contribute a product to Open Food Facts, the approved information is sent to a public database.
- The app does not sell your data, display advertising, or use health data for advertising tracking.
3. Data handled by the app
3.1 Data stored on your device
Dalia may store locally:
- meals, photos, portions, nutrients, and analysis results;
- glucose, insulin, physical activity, sleep, and other records you add;
- profile, preferences, notes, reminders, and settings;
- data you authorize Dalia to read from Apple Health;
- favorites, search history, and other state needed to operate the app.
Apple Health remains subject to the permissions you manage in iOS. Dalia does not use Apple Health data for advertising or share it with data brokers.
3.2 Account and identity
The app creates a technical identifier to operate its services. If you choose “Continue with Apple,” “Continue with Google,” or a passwordless link sent to your email address, we may process:
- a stable identifier supplied by the provider;
- your email address, including an Apple private relay address if you select that option;
- linking status, technical dates, and deletion receipts.
Authentication providers may supply basic account information needed to complete sign-in. Dalia does not display this information as part of a public profile or use it for advertising. Your linked identity and Pro access may be recovered on another device; records stored only on the prior device are not recovered through account linking.
3.3 Subscriptions
Apple processes payments. Dalia and its providers receive the purchase and subscription status needed to enable and restore Dalia Pro. Dalia does not receive your full card number.
Deleting your Dalia account or data does not cancel a subscription managed by Apple. You can manage it through your App Store account.
3.4 Artificial intelligence features
When you request a photo, text, or summary analysis, we may send:
- the image or text you selected;
- the minimum record context needed to answer;
- language, relevant preferences, and technical identifiers used for security and operation.
Our services and AI providers process this information to generate the result, prevent abuse, and diagnose failures. Dalia does not use this content for advertising. The app does not maintain a remote history of your analyses as a user feature; the result is stored locally when applicable.
Do not include personal information in photos, notes, or prompts unless it is necessary for the analysis.
3.5 Product scanning and Open Food Facts
Dalia queries external databases, including Open Food Facts, when you scan or search for food. We may send the barcode or search term needed to retrieve a product.
If a product is missing or needs correction, you may prepare a contribution. Only after you confirm it may Dalia send Open Food Facts information such as:
- barcode;
- product name, brand, quantity, ingredients, and nutrition data;
- package photos you selected;
- technical attribution required by that service.
Open Food Facts is a public database. A published contribution may remain available and be reused under its terms and licenses even if you later delete your Dalia account. Unsubmitted drafts are kept temporarily and generally expire within 30 days.
3.6 Security and diagnostics
We may process IP address, app and operating system version, general device model, error logs, performance, and security events. We do not use this data for advertising.
4. Why we use data
We use data to:
- provide and locally personalize features you request;
- create, link, recover, and delete your account;
- enable and restore subscriptions;
- deliver AI analysis and product results;
- submit Open Food Facts contributions you confirm;
- protect the service, limit abuse, resolve failures, and comply with law.
Depending on your country, processing is based on performing the service you request, your consent, our legitimate interests in security and improvement, or a legal obligation. You can withdraw Apple Health, photo, camera, or notification permissions through iOS.
5. Who receives data
We limit access to what is necessary:
- Apple, Google, and email authentication services: authentication and, for Apple, payments and system services;
- infrastructure, subscription, and artificial intelligence providers: account operation, Pro access, security, and generation of the analysis you request;
- Open Food Facts: searches and contributions you confirm;
- authorities or advisers: when required by law or needed to protect rights and safety.
These providers process data under their own terms or as processors for Cavexo, as applicable. Some may operate from other countries.
6. Retention and deletion
- Local data: remains until you delete it, uninstall the app, or iOS removes it. Certain secure access data may remain in the device keychain until you use the relevant controls or the system removes it.
- Account: remains while active. When you request deletion, we disable the identity and delete or dissociate account data under our control, except limited records needed for security, proof of the request, or legal compliance.
- Subscriptions: Apple and related providers retain purchase records under their obligations.
- AI processing: is limited to the period needed to provide and protect the feature, subject to provider operational retention.
- Public contributions: Open Food Facts may retain them under its rules; Dalia's temporary drafts generally expire within 30 days.
- Diagnostics and security: are kept only as reasonably necessary to investigate failures, prevent abuse, or comply with obligations.
You can use Settings → Privacy & Security → Delete data to remove local records, and Settings → Account → Delete account to request deletion of the remote identity. These are separate actions.
7. Your choices and rights
Depending on your jurisdiction, you may request access, correction, deletion, portability, objection, or restriction. You may also:
- manage permissions in iOS Settings;
- avoid optional AI features;
- choose not to create or link an account using Apple, Google, or email;
- choose not to submit Open Food Facts contributions;
- delete local data or request account deletion.
Email dalia@cavexo.com. We may request reasonable information to verify the request.
8. Security and international transfers
We apply reasonable technical and organizational measures, including encrypted connections and limited access. No system is infallible. Providers may process information outside your country under applicable contractual or legal safeguards.
9. Age
Dalia is intended for people age 16 or older. We do not knowingly collect data from anyone under age 16. Contact us if you believe a person under age 16 has provided information.
10. Changes and contact
We may update this policy when features or laws change. We will publish the current date and version and provide reasonable notice of material changes.
Questions or requests: dalia@cavexo.com