Privacy Policy
- There are no accounts. We never ask for your name, e-mail or phone number.
- Your profile, food diary, weight history and meal photos are stored on your device, not on our server.
- A photo or a text description leaves your device only when you ask for an analysis. Our server passes it to the AI model and does not keep it.
- We do not sell data and we show no ads.
1. Who is responsible
Porcio AI is published by Malrok Studio (“we”). Questions and requests: help@malrok.com.
2. Data that stays on your device
The following is stored only in the app's private storage on your device and is never sent to our server:
- profile answers: sex, date of birth, height, weight, activity level, goal and target weight;
- your daily targets, food diary entries and the photos attached to them;
- weight history, reminders and app settings.
If device backup is switched on in your Android settings, Android may include the app's data in the backup of your own Google account. That backup is controlled by you and Google; we have no access to it.
You can export your data to a ZIP file or erase everything in the app settings. Uninstalling the app removes the data from the device.
3. Data processed by our server
| What | Why | How long |
|---|---|---|
| The photo, the text description (typed or dictated) and the optional clarification you send for an analysis; the app language | To estimate the dish, calories and nutrients | Not stored. Held in memory only while the request is processed |
| A random installation identifier (stored as a one-way hash) and an access token | To tell installations apart, apply daily limits and prevent abuse | While the installation is in use; deleted after 24 months of inactivity |
| Device model, Android version, app version, app language and country (derived from the IP address when the app first registers) | Diagnostics and understanding where the app is used | Same as above |
| Usage counters: how many times a feature was used per day (for example “photo analysis”, “barcode scan”). No content | Product statistics, limits | Up to 12 months |
| Technical request log: type of request, result status, duration, size in AI tokens and cost. No photos, texts or IP addresses | Reliability and cost control | 90 days |
| IP address | Rate limiting of new registrations. Kept only as a one-way hash | Up to 3 days |
| “Wrong result?” reports: the AI's answer, your comment and, for text analyses, the description you typed. Never the photo | To improve recognition quality | Up to 12 months |
| Google Play purchase token and subscription status | To activate and verify Porcio Pro | Up to 24 months after the subscription ends |
The server does not link any of this to your name, e-mail, Google account or advertising ID — it never receives them.
4. Who else processes data
- AI analysis. The photo or text is sent through OpenRouter to the AI model provider (currently OpenAI) without any identifier of you or your device. These providers may retain requests for a limited time under their own policies, for example to detect abuse.
- Hosting. The server and its database run on Cloudflare; the database is located in the European region. Cloudflare processes IP addresses to deliver requests.
- Google Play. Purchases are handled by Google Play Billing; we never see your card or payment details. Barcode scanning uses the Google Play services scanner on your device. Voice input uses your device's speech recognition service (usually Google's), which processes the audio; the app receives only the recognised text and does not record or store audio. To prevent abuse, the app may ask Google Play to confirm that it is a genuine installation (Play Integrity). Crash reports, if you have enabled them on your device, reach us through Google Play.
- Open Food Facts. When you scan a barcode, the app requests the product from Open Food Facts directly. They receive the barcode number and your IP address.
We do not sell personal data and do not share it for advertising.
5. Permissions
- Camera — the app uses the system camera and photo picker, so it sees only the pictures you take or choose.
- Microphone — only while you use voice input.
- Notifications — only if you switch reminders on.
6. Health information
Weight, body measurements and what you eat can be sensitive. That is why they are kept on your device. Photos and descriptions of meals sent for analysis are not stored by our server and are not linked to your identity.
7. Age
Porcio AI is intended for adults (18+). It is not designed for children, and we do not knowingly process children's data.
8. Your rights
Depending on where you live (for example under the GDPR or Ukrainian data protection law), you may have the right to access, correct, delete or restrict the processing of your data and to complain to a supervisory authority. Most of your data is on your device and under your direct control. Because the server does not know who you are, to act on a request about server-side records we may ask for technical details that let us find your installation. Write to help@malrok.com.
9. Security
All traffic is encrypted (HTTPS). Identifiers and tokens are stored as one-way hashes. The AI provider key never leaves the server.
10. Changes
If the way we process data changes, we will update this page and its effective date.