Privacy Policy

Who the data controller is

The controller of your data is Deveji sp. z o.o., based in Poland, the maker of Olivka. For anything to do with privacy and personal data, including deletion, email social@olivka.app.

What this policy covers

This policy covers two connected parts of Olivka: the olivka.app website and the Olivka assistant itself, which you use through Messenger, WhatsApp, Instagram or Telegram and the related web dashboard. It applies whichever messenger you use.

What we collect

Account and assistant: when you sign up with Google, we store your email, name and profile photo from Google. If you start with a temporary (guest) account in chat, we create it without those details. We also store the identifier the messenger uses to recognise you, for example your Messenger or Telegram account id.

What you send to the assistant: meal descriptions, food photos and voice messages, plus what we derive from them, such as recognised meals, calories and macros, and daily summaries. We also store your conversation history with the assistant.

Website: basic, largely anonymous usage data about the site (analytics) to understand what works.

Health-related data

Information about your meals and nutrition, and the GLP-1 signal, can indirectly reveal something about your health. We process such data only on the basis of your explicit consent (Art. 9(2)(a) GDPR), given by choosing to use Olivka and share this information with it. You can withdraw your consent at any time by asking us to delete your data.

Photos and voice messages

When you send a food photo, an image-recognition model analyses it to work out what is on the plate. A transcription provider turns a voice message into text. We do not keep the files themselves, the original photo or recording, on our servers; they stay with the messenger operator (Meta or Telegram). We store only the result: the recognised meal description or the text transcript.

Why, and on what basis

We process your account data and what you send to the assistant to provide the service: recognising meals, counting calories and keeping your diary. The basis is performance of our agreement to provide Olivka (Art. 6(1)(b) GDPR), and, for health-related data, your explicit consent.

If you give us your email (for example by creating an account), we may use it to contact you about the service, on the basis of our legitimate interest and performance of our agreement.

We rely on our legitimate interest in developing and securing the product (Art. 6(1)(f) GDPR) for analytics and for improving and quality-checking the assistant.

Who we share it with

We use trusted providers that process data on our behalf, solely to make Olivka work:

Hosting and database: Google Firebase and Google Cloud (EU region).

Understanding your messages (AI): OpenRouter, which routes requests to DeepSeek (chat), Google Gemini (photo analysis) and Anthropic (quality checks).

Speech-to-text: ElevenLabs.

Nutrition databases and search: USDA FoodData Central, Open Food Facts and Exa.

Product analytics: PostHog (EU region).

Message delivery: Meta (Messenger, Instagram, WhatsApp) and Telegram; their own privacy policies also apply.

Some AI processing happens outside the European Economic Area. Where it does, we make sure the transfer relies on the safeguards GDPR requires, such as Standard Contractual Clauses. We do not sell your data or share it for advertising.

How long we keep it

We keep account and assistant data (meals, summaries, conversation history) for as long as you use Olivka and until you ask us to delete it. Technical operational logs are cleared automatically after a short time.

Deleting your data and your rights

You can ask us to delete your data at any time. Email social@olivka.app from the address linked to your account (or with details that let us identify you), and we will erase your account, saved meals and conversation history.

You also have the right to access, correct and delete your data, to restrict or object to processing, to data portability, and to withdraw consent at any time (without affecting prior processing). To exercise these rights, email social@olivka.app.

You also have the right to lodge a complaint with the Polish data protection authority (UODO).

Cookies

Site analytics run without cookies. We store no identifiers on your device and do not follow you around the internet. The only thing saved is your chosen site language (a functional preference, not an identifier). When you sign in to the dashboard, we use technically necessary session storage to keep you signed in.

Children

Olivka is intended for adults and is not directed at anyone under 16. If you believe a child has given us data, email social@olivka.app and we will delete it.

Changes and contact

We may update this policy as Olivka evolves; we will announce significant changes on the site. Questions? social@olivka.app.