Syto Privacy Policy

1. Controller and contact

The controller of your personal data is Oleg Sergeyevich Mikhaylenko, an Individual Entrepreneur (Sole Proprietor) registered in the Republic of Armenia. TIN: 20314933. State Registration No.: 286.1588307. Registered address: Apartment 2, 81/1 Manushyan Street, Arabkir, Yerevan 0012, Republic of Armenia. Contact us at privacy@syto.ai for privacy matters or support@syto.ai for service support.

2. Data we collect

• Account and sign-in data, including email and identifiers supplied by Apple, Google, or Telegram.
• Profile, goal, and nutrition data, such as age, height, weight, activity, preferences, and calorie targets.
• Meal data, including food photos, text or voice inputs, recognized foods, portions, nutrients, meal history, and saved foods.
• AI inputs and outputs, including recognition results, corrections, and assistant messages.
• Subscription status, purchase dates, plan details, and transaction identifiers. We do not receive payment-card details from app-store purchases.
• Support correspondence, deletion requests, device, browser, IP-address, security, and diagnostic data.
• Push-notification tokens if you choose to enable notifications.

3. How we use data

We use data to create and secure accounts; provide the meal diary, calorie calculations, and requested AI features; maintain subscriptions; send requested notifications; respond to support and privacy requests; prevent abuse; and comply with legal obligations. Where applicable law requires a legal basis, we rely on performance of a contract, consent, legitimate interests in operating and securing Syto, or a legal obligation. We request consent where required.

4. Providers and international transfers

We use service providers to operate Syto. Hetzner Online GmbH hosts Syto infrastructure in Nuremberg, Germany. Firebase, provided by Google, is used for push notifications. Apple, Google, and Telegram process the identifiers needed when you choose their sign-in or platform features. Apple processes purchases made through the App Store. AI inputs may be processed through the OpenAI API or an OpenAI-compatible AI service configured by Syto to provide the requested feature.

These providers may process data in the European Economic Area, the United States, or other countries. When required, we use appropriate transfer safeguards and limit sharing to what is needed to operate the Service.

5. Retention and deletion

We keep account and Service data while your account is active. When you request deletion, access is disabled immediately and the deletion request is processed in the Service. Data is removed from the primary Service systems when the request is completed. Encrypted backups may retain the data for up to 35 days before they are overwritten or deleted. We may retain limited data where necessary for legal obligations, security, fraud prevention, dispute handling, or to keep a restricted record that prevents unauthorised re-registration after deletion.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete, receive, restrict, or object to processing of your data, and to withdraw consent. To exercise a right, contact privacy@syto.ai. You may also complain to the data-protection authority that has jurisdiction in your place of residence. Account deletion instructions are available on the account deletion page.

7. Children, security, and changes

Syto is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe that a child has provided personal data to Syto, contact privacy@syto.ai. We use reasonable technical and organisational measures, including encrypted transport, access controls, monitoring, backups, and limited staff access. No system is completely secure. We may update this Policy and will post the new version and effective date; we will provide additional notice or obtain consent when required by law.