/export. Deletion: /delete_account.1. Who we are
Service operator: KidEat. Privacy contact: privacy@kideat.app.
2. Data we collect
- Telegram: ID, username, name, language.
- Parent: country and timezone.
- Child: name/nickname, birth date or month, sex, optional height/weight, allergies, dislikes and diet flags.
- Diary: text, photo file IDs, recognized foods, portions, approximate nutrients and water.
- School/kindergarten menus: uploaded files/photos, recognized schedule and dishes.
- AI usage: request type, model, tokens and cost.
- Payments: Telegram charge ID, Stars amount, Premium period and audit metadata.
- Referrals: code, inviter/referred relationship, Premium points and bonuses.
- Support: messages through
/feedback,/paysupportand email. - Beta/debug logs: temporary technical traces of messages, button taps, bot replies and errors. By default, text is stored only as a short preview up to 300 characters.
3. Data we do not collect
- Bank card details.
- Geolocation or contacts.
- IMEI/MAC/biometrics.
- Advertising identifiers or tracking cookies.
4. Why we process data
| Purpose | Basis |
|---|---|
| Diary, reports, family access | Providing the service |
| AI food/menu recognition | Consent / providing the service |
| Premium, limits and payments | Providing the service and legal obligations |
| Anti-abuse and security | Legitimate interest |
| Referral program | Consent / program rules |
5. AI providers
Food and menu recognition may send relevant data to an AI provider, including food descriptions/photos, age context, allergies and restrictions when needed for a safer result. We use API processing where provider terms state data is not used to train models.
6. Third parties
- Telegram delivers messages and processes Stars payments.
- AI providers process recognition requests.
- Hosting providers run the app, database and backups.
We do not sell data, share it with advertisers or use ad networks.
7. Children’s data
KidEat is intended for parents and legal guardians. Child profiles are private and not indexed. Product data is deleted when the account is deleted, except anonymized audit data where required.
8. Your rights
/export— receive a JSON export.- Bot profile — correct child profile data.
/delete_account— delete account and product data.- Email privacy@kideat.app — request restriction, correction or portability.
9. Retention
| Data type | Retention |
|---|---|
| Profile and diary | Until account deletion |
| AI usage logs | Up to 12 months unless needed longer for debugging/disputes |
| Beta/debug bot traces | Usually up to 14 days |
| Support | Up to 24 months |
| Backups | Usually up to 30 days |
| Financial audit | Anonymized for the legally required period |
10. Security
We use HTTPS/TLS, access limits, backups, critical event logging and data minimization. See Security.
11. Cookies
kideat.app does not use tracking cookies or advertising pixels. Server logs may contain technical data for security and diagnostics.
12. Contacts
Privacy: privacy@kideat.app. Security: security@kideat.app. Support: support@kideat.app.