Privacy Policy

Last updated: September 15, 2026

Bite ("Bite," "we," "our," or "us") provides a mobile application for exploring cosmetic and personal-care products, reviewing ingredient information and retailer offers, recognizing products from photos, saving preferences and activity, and using personalized and assistant features. This Privacy Policy explains what information we process, why we process it, how it may be shared, and the choices available to you.

This Policy applies to the Bite mobile application, our website, and related support services (together, the "Services").

1. Information We Process

Account and identity information

When you use Bite, we create or restore an internal account identifier. If you register or link an account, we may process your email address, sign-in method, verification status, authentication records, and basic account metadata supplied by your chosen sign-in provider. You may also choose a unique nickname.

Profile and personalization information

We process the profile details you choose to provide, such as a nickname, optional profile photo, onboarding answers, and skin, hair, body-care, or product preferences. These answers are used to personalize your experience and are not intended to provide a medical diagnosis.

If you upload a profile photo, we resize and normalize it before storage. The original file and its embedded metadata are not used as your stored profile image. Your nickname, current profile photo, and membership badge may appear with reviews you publish.

If the onboarding flow offers an optional face-photo step, that photo is used only for a temporary preview on your device. It is not uploaded, analyzed, added to your profile, or saved to your photo library by Bite.

Product photos, scans, searches, and catalog activity

When you choose to recognize a product, we process the photo you submit and information detected from it, such as product names, labels, or packaging text. The submitted photo may be sent securely to an automated analysis provider to generate a recognition result. Product history stores the resulting product or scan information and timestamps, not the submitted product photo itself.

We may also process search terms, product and variant identifiers, products viewed, favorites, and related timestamps to provide catalog, history, and recommendation features.

Assistant conversations and care results

If you use the assistant or personalized care features, we process the messages you send, generated replies, conversation titles and context, usage counts, and relevant profile or catalog information needed to answer your request. Messages may be processed by an automated analysis provider. Conversations remain associated with your account until you delete them or your account, subject to the retention rules below.

Automated outputs can be incomplete or inaccurate and should not be treated as medical advice or as a substitute for product labels or professional guidance.

Reviews, reports, and community activity

If you submit a product review, we process the review text, the relevant product identifier, your nickname, your internal account identifier, moderation status, revision information, and timestamps. Published reviews, your nickname, optional profile photo, and membership badge may be visible to other users.

If you report content or block another user, we process the report, reason, optional details, account identifiers, and moderation or enforcement records needed to operate community safety features. Review text and nicknames may be checked by automated moderation systems before publication.

Subscription and transaction information

When you purchase a subscription, the app marketplace and our subscription processor handle payment. We receive information such as your subscription product, entitlement status, renewal or expiration status, transaction identifiers, and limited purchase metadata. We do not receive or store your full payment-card details.

Device, diagnostics, analytics, and security information

We may process device and app information, operating-system version, language, app version, network and request metadata such as IP address, security-attestation signals, feature usage, crash reports, performance data, and similar diagnostics. We use this information to operate the Services, protect accounts, prevent abuse, troubleshoot problems, and improve reliability.

Support communications

We process the messages and contact details you provide when you contact us for support, privacy requests, or feedback.

2. Device Permissions

Camera: Used only when you choose to scan or photograph a product, or use another camera-based feature presented in the app.
Photos: Used only when you choose an image, such as a profile photo, through your device's system picker.

You can deny or revoke permissions in device settings, although the related feature may then be unavailable.

3. How We Use Information

We use information to:

create, authenticate, secure, and manage accounts;
provide product recognition, catalog, ingredient, retailer-offer, history, favorite, review, assistant, and personalization features;
save and synchronize your choices across sessions and supported devices;
process subscriptions and determine access to paid features;
moderate user content, enforce usage limits, prevent fraud and abuse, and protect the Services;
send service-related communications and respond to support or rights requests;
analyze performance, diagnose failures, and improve functionality; and
comply with legal obligations and enforce our Terms of Use.

We do not sell your personal information. We do not use your personal information for third-party cross-context behavioral advertising.

4. Legal Bases

Depending on your location and the feature involved, we process personal information because it is necessary to provide the Services you request, because we have a legitimate interest in operating and protecting the Services, because you have given consent, or because processing is required to comply with law or establish, exercise, or defend legal claims.

Where Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") applies, we process personal data under the applicable processing conditions in that law. Where the European Economic Area or United Kingdom data-protection laws apply, the corresponding legal bases include performance of a contract, legitimate interests, consent, and legal obligations.

You may withdraw consent at any time where processing relies on consent. Withdrawal does not affect processing already carried out lawfully.

We disclose information only as needed for the purposes described in this Policy:

Service providers: Vendors that provide hosting, authentication, storage, security, analytics, crash reporting, subscriptions, customer support, automated product analysis, assistant processing, or content moderation. They receive only the information needed to perform their services for us and are subject to appropriate contractual and security obligations.
App marketplaces and sign-in providers: When you download the app, make a purchase, manage a subscription, or use a third-party sign-in option, those providers process information under their own privacy terms.
Other users: Information you intentionally make public through community features, including published reviews, nickname, optional profile photo, and membership badge.
Legal and safety disclosures: Authorities, advisers, or other parties where reasonably necessary to comply with law, respond to valid legal requests, protect rights and safety, investigate abuse, or enforce our agreements.
Business transfers: A successor or prospective successor in connection with a merger, financing, restructuring, acquisition, or sale of assets, subject to applicable confidentiality and data-protection requirements.

6. Automated Processing

Bite uses automated systems to recognize products, generate assistant responses and care-related summaries, and help moderate reviews or nicknames. These systems may make mistakes. Do not rely on an automated result as a definitive statement about a product, ingredient, allergy, health condition, or personal-care outcome.

Automated moderation may reject, delay, or restrict submitted content. If you believe an automated decision was incorrect, contact us using the email below. We do not use these systems to make decisions that produce legal or similarly significant effects about you.

7. Retention and Deletion

We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, maintaining security and integrity, resolving disputes, and meeting legal obligations.

In particular:

account and profile information is generally retained while your account is active;
assistant conversations remain until you delete a conversation or your account;
favorites and product history remain until you remove the relevant item or delete your account;
profile photos remain until replaced, removed, or deleted with the account;
submitted product photos are used to perform recognition and are not stored in your product history, although a processor may retain transient copies for the limited time needed to provide and secure the processing service;
reviews, reports, moderation records, rate-limit records, security records, and deletion markers may be retained as needed to preserve community safety, prevent recreation by delayed requests, document compliance, or meet legal obligations; and
backups and provider-level recovery copies may persist for a limited period before being overwritten or deleted.

Registered users can request account deletion from the app's account settings. Once accepted, account access is disabled and account-linked data is scheduled for deletion, subject to limited records we must retain for security, fraud prevention, legal compliance, or dispute resolution. Deleting your Bite account does not automatically cancel a subscription billed by an app marketplace; you must manage or cancel that subscription through the marketplace.

8. Your Rights and Choices

Depending on applicable law, you may have the right to:

learn whether we process your personal data and request access to it;
request correction of incomplete or inaccurate data;
request deletion, destruction, restriction, or anonymization;
receive a portable copy of certain data;
object to certain processing, including qualifying automated processing;
withdraw consent where processing relies on consent;
learn the recipients to whom personal data has been transferred; and
lodge a complaint with a competent data-protection authority or seek compensation where provided by law.

You can also delete individual conversations, history entries, favorites, reviews, or your account using available in-app controls. To exercise a privacy right that is not available in the app, contact us. We may need to verify your identity before completing a request.

9. International Transfers

Our service providers may process information in countries other than the country where you live. Where required, we use appropriate safeguards for international transfers, such as contractual protections, adequacy mechanisms, or another lawful transfer method.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including authenticated access, encrypted transmission, access controls, request validation, and abuse prevention. No system is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

The Services are not directed to children under 13 or under the minimum age required by local law to use an online service without parental consent. If you are below the age of legal majority where you live, use the Services only with permission from a parent or legal guardian. If we learn that we collected a child's personal information in violation of applicable law, we will take appropriate steps to delete it.

12. Third-Party Links and Content

The Services may display retailer links, product materials, or other third-party content. Those third parties process information under their own privacy practices. We are not responsible for third-party websites or services that we do not control.

13. Changes to This Policy

We may update this Policy as the Services or legal requirements change. We will post the updated version with a new "Last updated" date and provide additional notice when required by law.

14. Contact Us

Bite is responsible for the processing described in this Policy. For privacy questions, requests, or complaints, contact:

Email: hello@panfit.app