Privacy Policy

1. Scope and contact

This draft describes the planned Bomensa v1.0 app and this website. Bomensa is an account-free, local-first healthy-eating and meal-planning app. The publisher is Burhan Akalin, based in Portugal. For privacy questions, email info@bomensa.com.

Before this policy takes effect: the publisher’s postal contact address and the effective date must be added.

2. Your profile and meal information

The app stores your age, sex, height, weight, activity level, onboarding status and update timestamp on your device. These inputs support estimates of daily needs. Your meal and planner records, Favorites and Recent foods are also stored locally so you can plan meals and review your eating patterns.

Bomensa v1.0 does not provide a Bomensa cloud account, cloud meal-history storage, cross-device sync or cloud restore. Core profile and meal information is not included in the launch usage events described below. Your device operating system may have separate backup behavior; Bomensa does not promise recovery from those backups.

3. Usage and reliability information

The app records limited usage events locally to understand feature use and reliability. They include a pseudonymous installation identifier, session identifiers, event times, session activity, onboarding completion, food add/edit actions, Favorites, weekly planning, copying a day and viewing Insights. Some events include categories or counts, such as familiar versus custom portions, meal count when copying a day, or whether Insights is empty.

These events exclude raw age, sex, height, weight, activity level, calorie or macro values, food identifiers or names, search text, free text and meal-entry content. A session that did not close normally is a coarse reliability signal, not a confirmed crash report.

Events are stored on the device first. Remote delivery occurs only when an analytics endpoint is configured. The production recipient and whether remote delivery will be enabled have not yet been finalized. This policy must identify the actual recipient, purposes, legal basis, retention, deletion arrangements and any international transfers before remote delivery is enabled. There is currently no dedicated third-party analytics or crash-reporting SDK in the reviewed app.

4. When you contact support

Help & contact opens your email app. Bomensa does not send the message before you choose to send it. If you email us, your email address, message and attachments will be received to respond to your request. Avoid sending unnecessary health information or unredacted screenshots.

Our support email service is provided through our Domínios.pt hosting account and managed using cPanel. Domínios.pt processes email as part of providing this service. The applicable processing arrangements, storage locations, retention period and legal basis must be confirmed before this policy is finalized.

5. Website, cookies and browser storage

This website uses locally hosted fonts and images. It does not use advertising or analytics cookies or scripts. When you choose either option in the cookie notice, we save your choice and its timestamp in this browser’s local storage under bomensa-cookie-choice-v1. This preference is used only to remember the notice, is not sent to a server, and expires for this purpose after 180 days; an expired record is removed on your next visit. Both choices keep optional tracking off because no optional technologies are currently used. You can reopen Cookie settings at any time or remove the saved preference by clearing this site’s browser data. Future optional services will require a new notice and any required consent; this choice does not authorize them. This website is hosted through Domínios.pt. The hosting service may process connection information such as IP addresses and request logs to deliver and operate the website. Its applicable retention periods, processing locations and contractual arrangements must be confirmed before this policy is finalized.

The reviewed app has no advertising, account authentication, subscription or payment flow. External websites, email providers, device platforms and app stores operate under their own privacy policies.

6. Retention and deleting local data

Profile and planning records remain in the app’s local storage unless changed or removed. Removing a meal from the interface is not necessarily permanent erasure of its database record. The local usage-event queue keeps at most the newest 5,000 events; installation and session records have separate storage. No time-based deletion period is promised in this draft.

Clearing the app’s data through your device settings, where available, or deleting the app and its data removes its local working copy. Offloading an app may retain data. Device backups can retain separate copies under your platform settings. There is no Bomensa cloud copy to restore your history from, so clearing local data can cause permanent loss.

Local deletion does not recall support emails or any events already delivered remotely. Contact us about information held outside your device. Final remote retention and deletion rules remain to be confirmed.

7. Privacy choices and rights

You can change the profile information available in the app and manage your meal records. For questions or requests about information received by Bomensa, email info@bomensa.com. We do not have remote access to your local meal database simply because you contact us.

Depending on the law that applies, you may have rights to access, correct, erase or receive your personal information, restrict or object to processing, withdraw consent where processing relies on it, and complain to a data-protection authority. Necessary identity checks, applicable exceptions and response deadlines will follow the applicable law. The final policy must specify the controller’s jurisdiction and relevant authority.

8. Age scope

Bomensa v1.0 is intended for generally healthy adults aged 19–64, not children. If you believe information from a child has been sent to us, contact info@bomensa.com so we can address it.

9. Security and changes

Protect your device and email account. No storage or transmission method can be guaranteed completely secure. The reviewed remote event transport requires HTTPS; final production safeguards and service providers still require review.

If accounts, cloud sync, advertising, subscriptions or new data services are introduced, this policy and relevant in-app disclosures must be updated before those changes take effect. The final version will display its effective date.