Privacy policy
Version dated .
Launch list
If you sign up on the website, we store your email, signup date, the version of the notice you accepted, and when we sent confirmation, to notify you when Garfim reaches the platform being prepared, currently Android. Immediately after signup, we send one confirmation email; after that, only the launch notification. Signup is free, does not create an account or subscription, and will not be used for other marketing messages without new permission.
Your signup is stored in our PlanetScale database, accessed through Cloudflare. Resend sends the confirmation and notification. You can unsubscribe and request deletion of your email at any time at privacidade@garfim.com.br. We will delete the list within 90 days after sending the launch notification.
Website analytics and cookies
With your permission, we use Google Analytics to measure public page visits, clicks to stores and the signup form, and completed signups. A store click does not confirm an installation. Google receives technical browsing information such as device type, visited page, referring site, and our campaign identifier when you arrive through a campaign. We do not send the form email, health data or account recovery link codes. We use this measurement to assess interest in Garfim, without creating advertising audiences or personalizing ads.
“Accept all” also permits attribution cookies and sending ad click identifiers to Google to associate signups with our Google Ads. Under “Settings”, you can choose “Allow visit analytics only” to allow that purpose alone, or “Reject optional” to load no measurement. Previous Analytics permission does not automatically authorize advertising measurement.
Google Analytics loads only after your permission. You can decline and continue using the website and signup normally. We store your choice in this browser for up to 180 days; measurement cookies have the same maximum lifetime. To change your choice, use “Cookie preferences” in the footer. If you decline after allowing, we remove this website's measurement cookies and stop collection in this browser.
If you withdraw only advertising measurement permission, we remove this integration's cookies and restart measurement with “Allow visit analytics only”. This applies to future collection; it does not automatically erase data already received by Google.
Measurement does not load on account recovery pages, shared summaries or the administrative dashboard. Read Google's privacy policy for its data handling practices.
What we store
- Account: email or Apple or Google login identifier, and your name if provided.
- Questionnaire answers: goal, sex, birth year, height, weight and activity level, used only to calculate targets.
- Your entries: meals, meal photos, weight and water.
- Subscription: subscription status, order and billing account identifiers, and the token used to verify the store purchase. We do not store card details.
- Permissions: consent choices and withdrawals, terms and policy version, date and originating IP address.
- Device: notification token, to send reminders you leave enabled.
- Usage and diagnostics: account and installation identifiers, usage events, app version, technical device information, errors and performance. Analytics services may estimate city or region from the IP address; the app does not request GPS location.
Why we use it
To operate the app: recognize food in photos, show your photos in your history, calculate calories and targets, send requested reminders and maintain your subscription. We do not sell your data or use your photos to train models.
Who we share it with
Only services needed to operate the app, each for its role:
- Cloudflare (hosting and photo storage) and PlanetScale (database).
- OpenRouter, Google (Vertex AI) and Microsoft (Azure), with your permission, to estimate food, portions, calories and nutrients from meal photos and descriptions. OpenRouter routes requests; Google and Microsoft run the models. Garfim restricts requests to these providers, with zero retention of content in AI services and no training use. If a compliant route is unavailable, analysis fails.
- Your device's speech recognition service when you dictate a meal. Depending on the device and its settings, audio may be processed by that service's provider. Garfim receives the transcript and does not store the recording.
- Apple and Google, to process and verify store subscriptions.
- Expo, to deliver notifications; Resend, for account emails (access codes, recovery and deletion) and the launch list.
- PostHog, to measure app usage and improve flows, and Sentry, to investigate errors and performance. Usage analytics events we send do not include email, photos, weight or meal text.
- Open Food Facts, which receives only the scanned barcode.
Your AI permission
Before the first transfer, the app presents the data, recipients and purpose, and asks you to “Allow and continue”. You can choose “Not now” and continue with manual entries. Your choice is saved in your account, without asking for every meal. A change of recipients requires new permission. You can withdraw it in More → Privacy; this stops new AI transfers.
We send the photos or descriptions you provide and the food data needed for analysis. We do not add your email, weight, height or profile to these requests. Avoid including unnecessary personal information in photos or text. On iPhone, dictation may send audio to Apple's speech recognition; on Android, to the device's configured speech service. Garfim receives the transcribed text.
We require providers to protect data consistently with this policy, including use limited to the stated purpose, security and confidentiality. For AI, we enforce recipient restrictions, encrypted connections, blocked training use and zero content retention. See the policies of OpenRouter, Google Cloud and Microsoft.
Nothing is published. A shareable summary exists only if you create its link, shows only that summary and expires in 30 days.
How long we keep it
Medication tracking has been removed. We collect no new records of this kind. Any data from earlier versions remains available in account data exports and through the privacy contact below, and is deleted with the account.
Account records remain while the account exists. If your subscription ends, they are kept for your return. Photo storage is optional and starts on; you can turn it off at the start or in More → Privacy. With it on, a photo is kept while its meal exists, and only you see it in your history; with it off, we use the image only during analysis and keep no server copy. Turning this off applies to future photos. You can delete a meal and its photos or delete the account to remove previous photos.
When you request deletion of a registered account, we end sessions and stop reminders. The account is quarantined for seven days; signing in again during that time cancels the request. Afterward, we delete the account and associated records, including meals, photos, weight, water and historical records. Technical data handled by analytics and diagnostics providers follows their retention periods; you can also request deletion of that data through our contact.
Your controls
- Choose and withdraw health, AI and photo storage permissions in More → Privacy. Withdrawal blocks corresponding new entries or analyses; viewing, exporting and deleting existing data remains available.
- Export meals, weight and water as CSV or the account dataset as JSON in More → Export data.
- Delete any meal at any time.
- Delete your account in the app: More → Delete account.
- Request deletion without installing or opening the app through the account deletion page.
- Enable or disable notification groups in More → Notifications.
Your data rights
In addition to the app controls, you may request confirmation and access, correction, sharing information, portability, and anonymization, blocking or deletion free of charge, subject to the LGPD's conditions. You may withdraw consent, ask about the consequences of withholding it and object to unlawful processing. Send requests to privacidade@garfim.com.br. We may need to confirm your identity to protect account data.
You may also submit a petition to Brazil's National Data Protection Authority (ANPD).
Health
Garfim is a food logging and tracking app. It does not provide diagnoses, medical treatment or diet prescriptions. Calories, nutrients and targets are adjustable estimates and do not replace individual guidance from a healthcare professional.