Privacy Choices and Your Rights

Manage Health Data Consent

You can withdraw consent or provide consent again in the app’s settings. Withdrawing consent stops future health data collection and AI meal analysis, but it does not automatically delete data already stored.

To delete existing data, submit a separate health data deletion request or delete your account.

Access Your Health Data

You can request access to your health data through the health data request feature in the app’s settings. That feature authenticates you with your current Supabase session, and authenticated in-app requests are the primary way to submit this request. You can also view the request status, our response, and any completed access materials in the app.

Correct Your Information

You can update editable profile and meal diary information directly in the app. For information that cannot be changed directly, use the in-app privacy request feature or contact us by email.

Delete Your Health Data

You can submit an authenticated health data deletion request in the app’s settings. Deleting health data is different from deleting your entire account.

When an authenticated health-data deletion request is processed, a health-data deletion Edge Function deletes the requested health data directly from AvoPet’s operational Supabase database and Storage. The request is marked completed only after that deletion succeeds. The health data covered by the request—including any results previously provided in response to a data access request—is deleted.

While a health-data deletion request is being processed, the existing consent status remains in effect. Once the requested health data has been successfully deleted and the request is completed, AvoPet also deletes the existing health-data processing consent history and resets the health-data consent status to not consented. AvoPet does not create a new withdrawn or declined consent record solely to record the deletion. Health-related local caches in the app are also cleared, and the consent or profile-entry screen is not shown automatically immediately after deletion. If the user later opens a health feature, the consent screen is shown, and a new consent record is created only if the user consents again.

To document the handling of privacy-rights requests and comply with legal obligations, AvoPet may retain limited request-processing information, such as the request ID, request type, submission and completion times, and processing status. This record does not contain deleted health data, access results, attachments, Storage paths, signed URLs, OpenAI response IDs, or the previous health-data processing consent history, and it is not used to infer health status, advertise, or market to the user.

Information that is deleted or reset

• Meal photos in Storage
• Meal records
• Meal diary entries
• Meal verification attempt records
• Gender
• Age range
• Diet goal
• Target weight
• Current weight
• Health data results previously provided through an access request
• Any other health data payloads or attachments covered by the deletion request
• Existing health-data processing consent history (upon successful deletion)

Information that is retained

• Supabase Auth account
• Nickname
• Pet
• Collection entries
• Adoption rights
• Gameplay progress
• Limited request-processing information (request ID, type, submission and completion times, and status)

Delete Your Account

You can request full account deletion in the app’s settings. Account deletion is different from deleting health data only. It removes photos, database records, administrative request records, and the Supabase Auth user associated with the account. After deletion is complete, the app starts a new anonymous session.

Appeal a Decision

If a health data request is denied, you can submit an appeal through the in-app privacy request feature. You can review the status and outcome in the app.

Response times and appeal procedures may vary depending on your location, request type, and applicable law.

Advertising and Device Privacy Choices

For its initial iOS release, AvoPet does not request App Tracking Transparency (ATT) authorization or access to the IDFA. AvoPet configures its AdMob requests for non-personalized ads only. Before requesting ads, the app updates the UMP consent information and checks canRequestAds, and requests ads only when that status permits it.

AvoPet does not send meal photos, health profile information (gender, age range, or diet goal), current or target weight, post-meal mood, setback factors, notes, meal determinations, AI feedback results, or the Supabase user UUID to AdMob as ad-request targeting values or custom parameters, and does not use that information for health-based personalized advertising.

Even when ads are requested as non-personalized, the Google Mobile Ads SDK may process an IP address, approximate location, app- or device-scoped identifiers, advertising and app interactions, and performance or diagnostic information for ad delivery, measurement, frequency capping, and fraud prevention. The actual scope may vary depending on the device settings, iOS privacy settings, SDK configuration, and Google’s policies. You may be able to manage some advertising privacy settings in iOS privacy settings and Google’s ad settings.

Privacy Rights by Location

Users in South Korea, Australia, New Zealand, and Singapore can review their rights in the AvoPet Privacy Policy. Washington and Nevada consumers can find additional rights and procedures in the applicable consumer health data policy.

• AvoPet Privacy Policy
• Washington Consumer Health Data Privacy Policy
• Nevada Consumer Health Data Privacy Policy

Contact and Alternative Request Methods

The authenticated in-app request feature is the most secure way to request access to or deletion of health data or to submit an appeal. If you cannot use the app or need additional assistance, contact us using the details below.

• Data Controller / Privacy Officer / Data Protection Officer: WonGyu Jang
• Location: Republic of Korea
• Email: [email protected]
• Phone: +82 10-4491-7410

Email and phone are supplemental contact methods. This website does not accept privacy requests directly.