SAVOIR Privacy Notice

Last updated: 8 November 2026

1. Who is the data controller

Tentella Filippo, with registered office at Via Vespucci 8, 63812 Montegranaro (FM), is the controller of the personal data collected through the SAVOIR app and this website.

For any privacy question or request you can write to privacy@savoirapp.com.

2. What data we process

• Account data: email, name and the service you use to sign in (email, Apple or Google).
• The allergies and intolerances you tell us about.
• Nutrition questionnaire and body measurements (for example age, weight, height, activity level and goals).
• Your nutritionist's diet documents that you upload (PDF or photo) and the plan we read from them.
• Symptoms and medicines you enter for the temporary plan.
• Menu scans (photo, text or a link read from a QR code) and the recommendations we give you.
• The meals of your plan that you mark as eaten (day and type of meal).
• Subscription data: status and expiry date, received through the App Store or Google Play and RevenueCat. We never see or store your card details.
• Technical data: device type, app version, language and error logs.
• Notification identifier: if you allow notifications, a code for your phone assigned by Apple and Expo, used only to tell you when your diet or plan is ready, and only on the phone from which you started the processing. We store it with the request and it is deleted with it or with your account.

Allergies, intolerances, questionnaire answers, body measurements, diet, meals marked as eaten, symptoms and medicines are health data: they are a "special category" under Article 9 GDPR and we only process them with your explicit consent.

3. Why we process data and on what legal basis

• Performance of a contract (Art. 6(1)(b) GDPR): to create and manage your account, provide the service and manage your subscription.
• Explicit consent (Art. 9(2)(a) GDPR) for health data, with three separate consents, asked for one by one: (1) health data and allergies, to store them and use them to filter menus and build your plan; (2) AI diet analysis, to let artificial intelligence read your nutritionist's diet, estimate the calories and macronutrients of the plan's meals and guide restaurant suggestions using the planned meal's values, general dietary indications drawn from your nutrition profile and the tastes you declared (never the names of conditions or medications); (3) AI symptom analysis, to use symptoms and medicines when creating the temporary plan and, while the plan is active, to tailor restaurant suggestions using only the plan's dietary guidance and the foods planned for that meal (never your answers).
• Legitimate interest in preventing abuse (Art. 6(1)(f) GDPR): when you delete your account we keep, for 24 months, only a non-reversible fingerprint of your email (computed with a secret key), with the sole purpose of stopping the same address, if it signs up again, from getting the free trials of the AI plan and the temporary plan a second time. The fingerprint cannot be turned back into your email and is not linked to any other data.
• Legal obligations, where applicable.

Consent (1) is required to use the app: the service itself consists of filtering menus based on your allergies and intolerances, so without this consent you cannot complete sign-up. Consents (2) and (3) are optional: if you do not give them, only the features that depend on them are unavailable. If you withdraw consent (1) you cannot use the app until you give it again, but you can always download your data or delete your account.

4. Artificial intelligence services

To read menus and diets, generate plans, estimate meal values and choose the dishes we suggest at restaurants, we send the strictly necessary data to AI model providers through OpenRouter. The models used downstream are Google Gemini, Perplexity, Mistral OCR (to read PDF documents) and Alibaba's Qwen (to recognise allergen icons in menu photos).

Content generated or read by artificial intelligence is labelled as such in the app. It is not medical advice and does not replace your nutritionist or doctor: always double-check important information.

We do not take decisions with legal or similarly significant effects based solely on automated processing. The allergen filter works with fixed, verifiable rules, not with artificial intelligence.

5. Who we share data with

We rely on these providers, which process data on our behalf or as services essential for the app to work:

• Supabase — hosting, database and account sign-in (region: EU, Ireland).
• OpenRouter and the AI model providers listed above — reading menus and diets, generating plans, estimating meals and restaurant suggestions.
• RevenueCat — subscription status management.
• Apple and Google — app stores, subscription payments and sign-in with your Apple or Google account.
• Resend — sending service emails.
• Expo and Apple — delivery of end-of-processing notifications (they receive only the phone code and a generic text, no health or diet data).
• Sentry — reporting of app crashes (technical data: the error, app version and device model; we do not include account, health or diet data).
• ScrapingBee — reading menu web pages opened from a QR code, without personal data.

6. Transfers outside the European Union

Some providers may process data outside the European Union. In those cases the transfer relies on appropriate safeguards under the GDPR: [Standard Contractual Clauses / Data Privacy Framework — to be checked for each provider].

7. How long we keep data

• Your account data is kept until you delete your account.
• When you delete your account, the data is erased from our database straight away; any residual copies and backups are removed within 30 days.
• Menu photos are deleted together with the account.
• The non-reversible fingerprint of your email is kept for 24 months after deletion, only to prevent the free plan trials from being obtained again.

8. Your rights

• Access and portability: you can download your data from the app with "Export my data".
• Rectification: you can correct your data in the app or by writing to us.
• Erasure: you can delete your account in the app ("Delete account") or from the web, following the instructions on the /delete-account page or by writing to privacy@savoirapp.com.
• Restriction of and objection to processing.
• Withdrawal of consent at any time, in the app, with three separate withdrawals (one for each consent). Withdrawal does not make earlier processing unlawful.
• Complaint to a supervisory authority: in Italy the Garante per la protezione dei dati personali, in Spain the AEPD, in France the CNIL, in the United Kingdom the ICO, or the authority of the EU country where you live.

You can also exercise your rights by writing to privacy@savoirapp.com.

9. Children

SAVOIR is not intended for people under 18 years of age.

10. Changes to this notice

We may update this notice. If the changes are significant we will tell you in the app. The date of the last update is shown at the top of the page.