Privacy Policy

1. Overview

This Privacy Policy explains how Arya ("we," "us," or "our") collects, uses, and protects information when you use the Arya mobile application and related services (collectively, the "Service").

We built Arya around a simple principle: collect only what we need to give you a great experience, store it securely, and never sell it. By using Arya, you agree to the terms outlined here.

2. Data we collect

Account information

When you create an account, we collect:

• Email address (from Sign in with Apple, Google, or email signup)
• Display name, if you choose to provide one
• An anonymized user ID generated by our authentication provider (Firebase Authentication)

Profile and dietary information

To generate personalized meal plans, we collect information you voluntarily provide:

• Goals (weight loss, maintenance, gain)
• Height, weight, age, and activity level
• Dietary preferences (vegetarian, vegan, keto, etc.)
• Allergies and food restrictions
• Cuisine preferences
• Meal plan history, recipes saved, and ingredient swap history

Health and fitness data

If you log weight progress or track meals, this is treated as Health & Fitness data under Apple's App Privacy framework. We do not share this with third parties for marketing.

Device and usage data

• Device type, operating system version, and language preference
• Push notification tokens (Firebase Cloud Messaging) so we can send meal reminders and updates
• App crash reports (Firebase Crashlytics) — anonymized, no personal data
• Aggregated usage analytics to improve the Service

What we do NOT collect

• Location data
• Contacts
• Photos or camera access (unless you explicitly upload)
• Browsing history outside the app
• Microphone or audio data

3. How we use your data

We use the information we collect to:

• Generate personalized meal plans, recipes, and grocery lists tailored to your profile
• Save your preferences, favorites, and history across devices
• Send push notifications (meal reminders, plan updates) — you can disable these at any time
• Diagnose crashes and improve app stability
• Respond to support requests when you contact us
• Comply with legal obligations

We do not sell your data. We do not share your data with advertisers. We do not use your data to train external AI models.

4. Third-party services

Arya uses the following third-party services, each with their own privacy policies:

These services may collect technical data (IP address, device identifiers) as part of standard operation. They are bound by their own privacy policies and our agreements with them.

5. AI processing

Arya uses AI to generate recipes, create images, and translate content. When you request a meal plan or recipe:

• Your dietary preferences, goals, and allergies are sent to OpenAI to generate the recipe text
• The generated recipe is sent to Google Gemini to create an image
• Translations are processed via Gemini for supported languages
• None of these requests include your name, email, or other directly identifying information

AI providers may temporarily process this data to fulfill the request. We have agreements in place that prevent your data from being used to train their models.

AI-generated recipes and nutrition information are provided for informational purposes only and are not a substitute for professional medical or dietary advice. Always verify ingredients against your allergies before cooking.

6. Storage and security

Your data is stored on Google Cloud servers (Firebase Firestore and Cloud Storage). All data is encrypted in transit (TLS) and at rest. Access is restricted via Firebase Authentication and security rules — only your account can read or write your data.

We retain your data for as long as your account is active. If you delete your account, all data is permanently removed within 30 days, except where retention is legally required.

While we take reasonable measures to protect your data, no system is 100% secure. We will notify you promptly if a data breach affecting your information occurs.

7. Your rights

Depending on your jurisdiction (EU/EEA, UK, California, etc.), you may have the following rights:

• Access — request a copy of your data
• Correction — fix inaccurate data via the Profile screen
• Deletion — permanently remove your account and data
• Portability — export your data in a machine-readable format
• Objection — object to certain processing activities
• Withdrawal of consent — disable notifications, opt out of analytics

To exercise any of these rights, email privacy@aryaapp.com. We respond to verified requests within 30 days.

8. Account deletion

You can permanently delete your account at any time directly within the app:

• Open Arya → Settings → Account → Delete Account
• Confirm the action
• Your authentication record, profile, meal history, journals, weight progress, and all associated files are permanently erased within 30 days

If you cannot access the app, email privacy@aryaapp.com from the address associated with your account and we will process the deletion manually.

Some anonymized aggregate analytics may be retained for product improvement, but cannot be linked back to you.

9. Children's privacy

Arya is not intended for children under 13 (or under 16 in the EU/EEA). We do not knowingly collect data from children. If you believe a child has provided us with information, contact privacy@aryaapp.com and we will delete it immediately.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app or via email. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact us