Privacy Policy for Vionut

Effective and last updated: October 7, 2026

Vionut is operated by Maksim Geine, an individual developer resident in Kazakhstan (“Vionut”, “we”, “us”). This policy explains how the Vionut Android application and its supporting services process information.

Delete your Vionut account or selected data / Удалить аккаунт или данные Vionut

1. Information Vionut processes

Depending on the features you choose, Vionut may process:

• Account data: Firebase user ID; email and display name supplied through email, Google, or VK sign-in; authentication provider; and account status. Authentication credentials are handled by the relevant provider and Firebase Authentication.
• Profile and sensitive wellness data: name, date of birth, biological sex, height, current and target weight, region, diet, allergies and intolerances, goals, water and step targets, pregnancy or lactation status, gestational week, pre-pregnancy weight, lactation mode, smoking status, everyday activity, training pattern, and a manually confirmed activity category.
• Diary data: foods, ingredients, portions, meal slot and time, calories, macro- and micronutrients, fiber, water, steps, weight history, favorites, recipes, pantry items, habits, and progress records.
• Images: food photos selected for analysis and progress photos you create. A food image is sent for the requested analysis but its device URI is not copied into the Firebase diary backup. A progress photo is uploaded to Firebase Storage only when you enable its cloud-backup option.
• AI inputs: food descriptions, Vio questions, and the minimized nutrition evidence needed to answer them. Do not include unrelated identifiers, payment details, or medical documents in prompts or photos.
• Subscription data: product, purchase identifier or token, store, verification result, and paid-through time. Google Play and RuStore process payment-card details; Vionut does not receive the full card number.
• Technical and usage data: app version, language, device or installation identifiers, approximate region derived by service providers, screen and feature events, purchase events, errors, and basic performance/security information.

2. Health Connect

With your explicit Android permission, Vionut reads only:

• Steps; and
• Total calories burned.

These values are used on-device to show activity and, if you enable the option, to adjust the displayed daily energy allowance. Health Connect values, dates, and data-origin package names are not uploaded to the Vionut Firestore backup and are not included in Firebase Analytics event payloads. You can revoke access in Android or Health Connect settings at any time. Vionut does not use Health Connect data for advertising or sale.

3. How information is used

• to authenticate you and operate the diary, profile, nutrition plan, reports, Vio, recipes, pantry, reminders, progress, and restore features you request;
• to calculate personalized nutrition and activity estimates;
• to analyze food text, voice transcripts, barcodes, and photos;
• to verify subscription access and enforce the seven-day Welcome Premium period;
• to synchronize and restore eligible account data;
• to maintain security, prevent abuse, diagnose errors, and understand feature reliability;
• to measure privacy-minimized onboarding, feature adoption, subscription conversion, and the aggregate effectiveness of Vionut acquisition campaigns;
• to comply with legal, accounting, consumer-protection, and platform obligations.

4. AI processing

Vionut uses OpenAI models through Vionut-controlled Firebase Cloud Functions. Relevant minimized inputs may include a food photo or description, dietary restrictions, remaining nutrition targets, and evidence from your diary/profile. Direct account credentials and payment-card details are not intentionally sent to OpenAI. Requests set store: false to disable optional response storage for later API retrieval. This does not itself disable provider abuse-monitoring retention or guarantee zero retention; applicable retention and exceptions are described in OpenAI's API data controls. AI output can be wrong; review food, quantities, and calculated nutrition before saving.

5. Cloud backup and reinstall behavior

Eligible profile, diary, settings, pantry, habits, reminders, and progress metadata are stored under your Firebase user ID. Diary totals are rebuilt from the saved meal entries during restore. Payment entitlement is never restored merely from the ordinary backup; it is checked with Google Play or RuStore.

Android system backup and device-to-device transfer are disabled for Vionut. After reinstall, cloud recovery requires signing in to the same recoverable account. “Continue without registration” creates an anonymous Firebase account; after uninstall or clearing app data, that anonymous identity cannot normally be recovered, so its cloud data cannot be reattached to the new guest session.

6. Service providers and disclosures

Vionut does not sell personal data and does not display third-party advertising inside the app. Privacy-minimized app-interaction and purchase-attribution events may be processed to measure Vionut's own acquisition campaigns. Advertising-personalization signals are disabled by default. Profile answers, health measurements, diary contents, food names, photos, and Vio message text are not attached to Firebase Analytics events. Information may be processed by:

• Google Firebase: Authentication, Firestore, Storage, Cloud Functions, App Check, Remote Config, Analytics, and Crashlytics;
• Firebase Crashlytics: production-app crash and non-fatal diagnostic reports, including stack traces, app/OS/device information, installation identifiers, and privacy-minimized feature breadcrumbs. Vionut does not attach account IDs, purchase tokens, diary text, photos, or health measurements to custom diagnostic reports. Handled food-analysis errors are reported using predefined error categories, not the original error text or AI response. Debug and release-QA builds do not register the crash reporter;
• Google Ads: campaign attribution and aggregate acquisition-performance measurement using Firebase Analytics conversion events;
• MyTracker (RuStore build only): install attribution and a restricted acquisition funnel for Vionut campaigns. Vionut sends only bounded event names and coarse parameters such as entry method, plan type, and success/failure state. MyTracker may process the Android advertising ID, App Set ID, app/version information, device model, OS, language, network and approximate region information needed for install and campaign attribution. Profile answers, health measurements, diary contents, food names, photos, messages, Firebase user IDs, purchase identifiers, and payment tokens are not attached to these events. Automatic purchase tracking, precise-location tracking, environment tracking, and anti-fraud collection from device sensors are disabled;
• VK Ads: delivery and aggregate effectiveness measurement for Vionut's own RuStore acquisition campaigns;
• OpenAI: requested AI food analysis and Vio language responses;
• Google Play and RuStore: distribution, billing, subscription status, refunds, and fraud prevention;
• Google and VK: sign-in when you choose the relevant provider;
• Open Food Facts: barcode lookup. A barcode is sent to retrieve the selected product record.

We may also disclose information when legally required or necessary to protect users, the service, or legal rights. Providers process data under their own terms and privacy practices. Data may be processed in Kazakhstan, the Russian Federation, the United States, the EEA, and other locations where these providers operate.

7. Legal bases

Where applicable, processing is based on performance of the service contract, your consent (including optional health/sensitive data and permissions), legitimate interests in security and reliability, and legal obligations. You may withdraw optional permissions or consent, but affected features may stop working.

8. Retention and deletion

Local data remains until you delete it, clear app data, sign out where a local wipe applies, or uninstall. Cloud account activity is touched when the app is used. Vionut’s automated retention policy targets deletion after 30 days of inactivity for anonymous guest accounts and after 90 days for recoverable registered/custom-provider accounts, subject to operational execution and lawful exceptions. Store transaction and accounting records may be retained as required by the store or law.

You can delete individual diary items and supported progress records in the app. The in-app “Delete My Data” action requests deletion of the Firebase Authentication account, the user’s Firestore namespace, and files under the user’s Firebase Storage path. Deleting the app does not cancel a subscription; cancel it in Google Play or RuStore.

Request account or data deletion

You do not need to reinstall Vionut to make a request.

1. Email marka@vionut.com with the subject “Vionut data deletion”, preferably from the email used for your Vionut account.
2. State whether you want to delete the entire account and its data, or only selected data while keeping the account. For a partial request, identify the category (for example diary, profile, or progress photos). Do not send your password, payment-card number, or health documents.
3. We may ask you to verify account ownership before acting. We will confirm the processing timeframe and outcome by email. A guest account may be impossible to identify after uninstall; if it is still available on your device, use the in-app option below.

In the app: open Profile, scroll to “Delete My Data” (“Удалить мои данные”), review the confirmation and confirm deletion. Keep the app online until it shows the outcome; an error means the deletion is not yet confirmed.

Full deletion covers the authentication account and the profile, diary, favorites, settings, habits, progress records and uploaded files in its Vionut cloud namespace. Store billing records remain subject to the store's retention obligations. Security or transaction records may be retained where legally required; any applicable exception is explained when handling the request. Account deletion does not automatically cancel a store subscription.

Как запросить удаление: напишите на marka@vionut.com с темой «Удаление данных Vionut» с почты вашего аккаунта. Укажите: удалить аккаунт полностью или только отдельные данные (например, дневник или фото прогресса). Пароль и платёжные реквизиты не нужны. После проверки принадлежности аккаунта мы сообщим срок обработки и результат. В приложении: «Профиль» → «Удалить мои данные» → подтверждение. Удаление аккаунта не отменяет подписку — при необходимости отмените её отдельно в Google Play или RuStore.

9. Security

Vionut uses authenticated per-user database/storage rules, encrypted transport, server-side subscription verification, bounded server requests, and Android Play Integrity App Check in release builds where Play Integrity is available. No electronic service is completely secure.

10. Your choices and rights

Depending on your jurisdiction, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. You can edit profile and diary data in the app, revoke camera/notification/Health Connect permissions in Android settings, disable optional progress-photo cloud backup, and use in-app account deletion. To make a privacy request, contact marka@vionut.com. We may need to verify your identity.

11. Children

Vionut is not intended for children under 13, or the higher minimum digital-consent age required in the user’s jurisdiction, without appropriate parent or guardian authorization.

12. Changes and contact

Material changes may be announced in the app or on this page. Continued use after an effective update means you acknowledge the revised policy.

Operator: Maksim Geine, Ust-Kamenogorsk, Kazakhstan
Email: marka@vionut.com