Privacy Policy

Effective date: 24 June 2026

Aeria is operated by [LEGAL_OPERATOR_NAME], registration number [LEGAL_REGISTRATION_ID], at [LEGAL_ADDRESS], Republic of Uzbekistan ("Aeria", "we", "us"). Contact: support@aeria.fit.

1. Data we process

We process account information (name, email, user ID and optional profile photo); authentication information; age and biological sex; height, weight, target weight, activity, sleep, stress, hydration and nutrition preferences; optional health conditions and medication answers; food journal entries, recipes and ingredients; text, photos and audio that you submit for food analysis; device, app version, security and limited diagnostic information; and consent records.

2. Why we process it

We use this information to create and adjust nutrition targets, provide the journal and recipe features, analyze user-submitted food information, authenticate accounts, send verification and security emails, maintain service security, respond to requests and comply with law. Health and profile information is processed with your explicit consent. Account and service data is processed to perform our contract with you. Essential security and privacy-preserving diagnostics may be processed for our legitimate interests.

3. AI processing

When you use text, photo or voice analysis, the submitted content is transmitted through our server to Google Gemini for the requested analysis. Full media is not intentionally retained by Aeria after analysis, although a compressed food thumbnail and the resulting nutrition entry may be saved to your journal. Do not submit content that you do not have the right to use.

4. Service providers

We use service providers only to operate Aeria: Google for sign-in and Gemini analysis, Resend for transactional email, Sentry for privacy-minimized adult-user diagnostics when enabled, and infrastructure/database hosting providers. These providers process information under their own terms and privacy commitments. We do not sell personal or health data and do not use it for targeted advertising.

5. Storage, transfers and security

Data may be processed outside your country. We use HTTPS in transit, access controls, password hashing and restricted production access. No system is completely secure, and you remain responsible for protecting your credentials.

6. Retention

Account and journal data is retained while your account is active. Verification and deletion codes expire after 15 minutes and are removed with the account. On account deletion, live account data is deleted promptly; limited security records or encrypted backups may remain for up to 30 days unless a longer period is required by law, fraud prevention or dispute resolution.

7. Your choices and rights

You may access or correct profile information in the app, withdraw optional health-data consent, request a copy of your information, object to or restrict certain processing, and request account deletion. Withdrawal does not affect prior lawful processing and may prevent personalized features from working. Contact support@aeria.fit.

8. Age

Aeria is for users aged 16 or older. If local law requires authorization from a parent or guardian, you may use Aeria only with that authorization.

9. Changes

We may update this policy. Material changes will be shown in the app and may require a renewed acknowledgement.