Introduction
This Privacy Policy explains how Lokma, a mobile application by Mehmet Sancaktutan & Burak Taş, handles your information. We built Lokma to respect you: we don't sell your data, we don't show ads, and we don't track you across other companies' apps.
By using Lokma, you agree to the practices described here. If you do not agree, please discontinue use of the app.
Information We Collect
We collect only what the app needs to work well for you. This falls into two groups: information you provide, and information collected automatically.
Information You Provide
This is the information you enter or submit directly while using the app:
- Account & identity: User ID, and optionally your name or email via Apple/Google sign-in.
- Health & profile: Sex, age, height, weight history, activity level, dietary preferences and goals.
- Meals & photos: Meals you log and photos you capture, stored privately to your account.
- Subscription status: Trial and subscription status. We never receive your card details.
Automatically Collected Information
To keep the app secure and reliable, limited technical information — such as your subscription and entitlement status and basic device information necessary for the app to function — may be processed. We do not use advertising identifiers and we do not build advertising profiles.
How AI Processing Works
When you analyze a meal, the photo or text you submit is sent securely to OpenAI to produce a nutrition estimate. Per OpenAI's API policy, this data is not used to train their models.
Purchases and Subscriptions
All purchases are processed by Apple through the App Store. RevenueCat helps us validate and manage subscription status. We never receive or store your payment card details — Apple handles billing.
Analytics
Lokma does not use third-party advertising or cross-app tracking analytics. Any analysis we perform is limited to aggregate, privacy-respecting diagnostics used to keep the app stable and improve reliability. We do not sell analytics data.
Authentication
If you sign in, authentication is handled securely through Supabase and, where you choose it, Sign in with Apple or Google. We receive a user identifier and, optionally, your name or email. Each account can only access its own data, enforced by row-level security.
Backend Services
Your data is stored using Supabase, which provides our database, authentication, and secure file storage. Data is transmitted over encrypted connections (HTTPS/TLS), and access is restricted so that each account can reach only its own records.
Third-Party Services
We rely on a small number of trusted providers to operate the app. Each processes data only as needed to deliver its function:
- Supabase — Database, authentication, and private photo storage.
- OpenAI — Meal photo and text nutrition analysis.
- RevenueCat & Apple — Subscription and billing management.
- Apple Health — Optional — writes nutrition data and may read weight, only if you connect it.
These providers may process data outside your country. We choose providers that maintain appropriate security and data-protection standards.
Data Retention
We keep your data for as long as your account is active and you continue to use the app, so your history and settings remain available to you. When you delete your data or account, the associated records are removed as described below.
Data Deletion Requests
You can permanently delete your data at any time from within the app: Profile → Delete Account. This removes your profile and associated content from our systems.
Deleting the app from your device does not cancel any active subscription. If you need help, contact us at support@aurelionlabs.digital and we will assist with your request.
Children's Privacy
Lokma is not directed to children under 13 (or the minimum age required in your region). We do not knowingly collect personal information from anyone under that age. If you believe a child has provided us data, contact us and we will delete it.
International Users
You can use the app from anywhere in the world. Because we work with international providers, your information may be processed in countries other than your own. Where applicable law (such as the GDPR or Turkey's KVKK) grants you rights to access, correct, export, or erase your data, we honor those rights — most can be exercised directly in the app, and the rest by contacting us.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the date at the top of this page. Significant changes will be communicated within the app where appropriate.
Contact
If you have questions about this policy or your data, contact us at support@aurelionlabs.digital.