Dachi Privacy Policy

Last updated: October 23, 2025

Applies to: Dachi mobile apps (iOS), the Dachi marketing website/landing page(s), and related services (the “Services”).

At a glance

Controller: Ophir Abitbol Consulting (Israeli sole proprietorship).
Contact: support@dachiapp.com.
Minimum age: 18+.
We don’t sell your personal information and we don’t use health data for ads.
Purchases run through the Apple App Store (7‑day free trial per Apple rules).

Who we are

Controller: Ophir Abitbol Consulting (”Dachi”, “we”, “us”).

Contact for privacy matters: support@dachiapp.com

You can reach us by email for any privacy request. If we ever add a physical mailing address to this notice, we’ll update this section.

Scope

This Policy explains how we collect, use, disclose, and protect personal information when you use our mobile apps and our public website/landing page. By using the Services, you agree to this Policy and our Terms of Service.

Age requirement: Our Services are intended for individuals 18 years or older. We do not knowingly collect personal information from anyone under 18.

Information we collect

We collect information (i) you provide, (ii) automatically, and (iii) from integrations you enable.

1) Information you provide

Account & profile: name, email, sign‑in provider (Apple/Google), age, country, and basic profile details (e.g., weight).
Wellness data you choose to add (optional): meals/nutrition (including photos or descriptions), macros, weight/measurements, and goals. (Some of this may be considered sensitive or health data.)
Uploads & content: photos.
Support communications: emails you send us.
Purchases & subscriptions: plan type, status, timestamps. We do not store full payment card numbers; purchases are processed by the Apple App Store.

2) Information collected automatically

Device & usage: device type, OS and app version, locale/time zone, device/advertising identifiers, screens viewed, features used, session timestamps, and diagnostics.
Crash & performance: stability, error reports, and performance metrics (e.g., Firebase Crashlytics).
Cookies (website): essential cookies for site operation and basic analytics. We do not currently use advertising cookies. You can control cookies in your browser settings.

3) Integrations & third parties (with your permission)

Apple HealthKit (planned): if/when enabled and with your explicit consent, we may read/write selected data types (e.g., steps, weight, sleep, workouts). You control these permissions in iOS settings. We do not use HealthKit data for advertising and we do not sell/share such data.
Authentication: Apple/Google sign‑in.
Analytics: Firebase Analytics for aggregated usage and performance insights.

We may aggregate or de‑identify information so it can no longer reasonably identify you; we may use and share such information for any lawful purpose.

How we use information

We use personal information to:

Provide and maintain the Services and core features.
Personalize insights, recommendations, reminders, and progress reports.
Support subscriptions and purchases (account verification, receipts, fraud prevention, customer support).
Operate AI‑powered features (e.g., analyzing photos/descriptions for food logging) using AI Models and/or similar providers. We limit what we send and, where controls exist, instruct providers not to use your data to train their models.
Communicate about your account, security, and product updates. (We currently do not send marketing emails.)
Secure, monitor, and debug the Services (fraud/abuse prevention, incident response).
Comply with laws and enforce our Terms.
Research and improve the Services (analytics, testing, feature development), preferring de‑identified or aggregated data.

No sale / no ads on health data. We do not sell personal information and we do not use health or wellness data for targeted advertising.

Legal bases (EEA/UK where applicable)

Contract (to provide the Services),
Consent (e.g., HealthKit, notifications),
Legitimate interests (security, improvement, analytics), and
Legal obligation (compliance and recordkeeping).

When we disclose information

We disclose personal information to:

Service providers (e.g., Google Firebase/Cloud for hosting, auth, database, storage, analytics, crash reporting). Access is limited to providing services under contract.
Payment platforms (Apple App Store) to fulfill purchases (we don’t receive your full card details).
Integrations you enable (e.g., HealthKit), per your permissions.
Legal/safety purposes (comply with law, protect rights, respond to lawful requests).
Business transfers (as part of a merger/acquisition/financing), subject to this Policy and applicable law.
With your direction or consent (e.g., when you share content or invite others).

We do not share health data with advertisers and we do not sell personal information. If applicable law treats certain analytics disclosures as a “sale”/“share,” we will honor your opt‑out choices.

Cookies & SDKs (website and apps)

Website: We use essential cookies and basic analytics cookies. You can manage cookies in your browser settings.

Apps: We use SDKs (e.g., Firebase) for analytics, crash logs, and performance. You can manage app‑level permissions in your device settings. If we add advertising cookies/SDKs in the future, we will update this Policy and obtain any required consent.

Your choices & rights

Permissions: Manage HealthKit (when available), camera/photos, notifications, and location in your device settings.
Marketing: We currently do not send marketing emails. If this changes, you can unsubscribe at any time.
Access, correction, deletion, portability: Depending on your region (e.g., EEA/UK, California), you may request access to, correction of, deletion of, or a copy of your personal information, and you may object/restrict certain processing. Contact support@dachiapp.com. We won’t discriminate against you for exercising rights.
Opt‑out of “sale/share” or targeted ads: If applicable in your jurisdiction, you can opt‑out via our settings (when available) or by contacting us. We do not sell personal information and we do not use health data for ads.

Appeals: If we deny a request, you may appeal by replying to our decision email. You may also contact your local data protection authority.

Data retention

We retain personal information only as long as needed to provide the Services and for legitimate business/legal purposes.

Account data: kept while your account is active; deleted or anonymized within 30–90 days after you delete your account.
Wellness data & uploads: kept while your account is active; deleted or anonymized within 30–90 days after account deletion unless law requires longer or you shared it publicly.
Logs/diagnostics: typically 90–180 days, unless needed longer for security or legal reasons.

We may retain de‑identified data for analytics and service improvement.

Trial reminders (push notifications)

If you start a free trial, we will attempt to send you a reminder before the trial ends. Where you have enabled push notifications, we will attempt to deliver the reminder by push notification. Delivery of reminders is not guaranteed (e.g., device/OS settings, Do Not Disturb, connectivity, background restrictions, or platform limits). Renewal timing is determined by Apple’s subscription system and may depend on your device time zone. You remain responsible for managing or canceling your subscription in your Apple ID settings before renewal. You can turn off push notifications anytime in your device settings.

International transfers

We and our providers (e.g., Google/Firebase; AI Model Providers) may process information in countries other than yours (including the United States and EU). We use appropriate safeguards (e.g., Standard Contractual Clauses) and technical/organizational measures. While abroad, your information may be accessible to authorities under local laws.

Security

We use administrative, technical, and physical safeguards (e.g., encryption in transit/at rest where supported, access controls, monitoring). No method is 100% secure. If a breach affects your data, we’ll notify you and regulators as required.

AI features

When you use AI features, we may send the content you submit (e.g., food images/descriptions) to AI Model Providers to generate outputs. We send only what’s needed and, where controls exist, instruct providers not to train on your content. Do not upload content that violates others’ rights or includes personal data of others without permission.

User‑generated content & sharing

If you post or share content (e.g., achievements, logs, photos), it may be visible to others (depending on settings) and discoverable. You can change visibility (where available) or delete content, but copies shared by others or cached by search engines may persist.

Third‑party links

Our website/app may link to third‑party sites/services we do not control. Their privacy practices are governed by their policies.

Deleting your account

You can delete your account in Settings → Account → Delete Account (in‑app) or email support@dachiapp.com. Account deletion is permanent and removes your personal information from active systems after our processing window, subject to legal retention obligations.

Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you (e.g., in‑app notice or email) and update the “Last updated” date above. Your continued use of the Services after the update means you accept the changes.

Region‑specific notes

California & certain U.S. states: You may have rights to know, correct, delete, and opt‑out of “sale/share” or targeted advertising. We do not sell personal information, and we do not use or disclose sensitive personal information beyond what’s necessary to provide the Services. Contact support@dachiapp.com to exercise rights.

EEA/UK: You have GDPR rights (access, rectification, erasure, restriction, portability, objection, and withdrawal of consent). You may complain to your local authority.

Israel: Processing is subject to the Protection of Privacy Law and related regulations, as applicable. You may request review, correction, or deletion of information per local law via support@dachiapp.com.

Contact

Ophir Abitbol Consulting

Email: support@dachiapp.com