Zaffo Privacy Policy

This policy covers Zaffo, the AI cooking assistant mobile app published by Pinegrass Technologies Pvt. Ltd. (“Pinegrass”, “we”). It explains what Zaffo collects, why, who processes it, and the rights you hold under India’s Digital Personal Data Protection Act, 2023 (DPDP Act). Pinegrass is the data fiduciary for Zaffo.

For the corporate website and company-level privacy practices, see the Pinegrass privacy notice.

Zaffo collects only what the app needs to function:

• Account information. Your email address, display name, password hash when you use email sign-in, and Google or Apple subject ID when you use social sign-in. We use this information to create and secure your account.
• User-generated content. Pantry and shopping items, recipes you create, save, or edit, calorie, macro and water logs, cooking history, dietary goals, and preferences you provide.
• Health-related preferences (optional). If you turn them on, your diabetes-aware and blood-pressure / lower-salt settings. These are health-related preferences you choose to provide; we use them only to steer recipe and meal suggestions, and you can turn them off or delete them at any time. They are not a diagnosis or medical advice.
• Fridge, pantry, and receipt photos. Images you explicitly capture or upload for ingredient and receipt scanning. Zaffo does not offer photo-based calorie estimation.
• Food-label intelligence (optional). Corrected ingredients-panel text, an optional barcode, dataset and rules versions, coarse scan-performance metrics, and corrections you submit. The temporary label image is read on your device, deleted immediately, and never uploaded by this feature. Corrected label text is retained for dataset research only when you explicitly opt in; otherwise Zaffo retains a one-way digest and the result record until account deletion.
• Device and diagnostics. Push token, app and OS version, crash traces, and pseudonymous product events when those services are configured.
• Voice recordings. Audio you record in the app for transcription (for example, dictating an ingredient or a note), processed into text.

Zaffo does not sell your personal data, and does not use it for advertising.

To generate recipes, estimate calories from the meal description and portion text you enter, and transcribe voice, Zaffo sends only the relevant content to OpenAIand DeepSeek as data processors on our behalf:

• Text prompts (your ingredients, meal description and portion, goals, requests, and any diabetes-aware or lower-salt preference you have enabled) — for recipe generation through DeepSeek or OpenAI and text-based calorie estimation through OpenAI.
• Fridge, pantry, and receipt images — only when you explicitly invoke ingredient or receipt scanning, processed through OpenAI.
• Audio recordings — for transcription into text through OpenAI.
• Unresolved food-label text fragments plus a closed candidate-ID list — only if the optional token normalizer is enabled, processed through OpenAI. It cannot make regulatory, source, or dietary determinations. Food-label images are never sent.

OpenAI and DeepSeek process this content to return results to Zaffo. Their handling of data is governed by OpenAI’s privacy policy and DeepSeek’s privacy policy. We share only the content needed for the specific feature you invoke.

MongoDB Atlas hosts application data; Railway hosts the API; Expo, Google FCM, and Apple APNs deliver notifications; Sentry receives crash diagnostics; and PostHog receives pseudonymous event names and allowlisted properties when analytics is configured. Google and Apple process social sign-in identifiers; Google Workspace processes transactional email delivery; and RevenueCat processes subscription state.

Food-label scan telemetry excludes the raw image and corrected label text. It contains a scan ID, version identifiers, image dimensions, timings, unresolved-token count, outcome classes, cache tier, correction state, and paid-provider cost metadata.

Our processor records identify the live MongoDB Atlas and Railway hosting regions. We are migrating primary database hosting to Mumbai (ap-south-1); until that migration is verified, your data may be stored or processed outside India. Content sent to OpenAI may also be handled outside India as described in its privacy policy above.

Account and user-generated content is retained until you delete it or your account. Food-label photos are deleted immediately after on-device recognition. Corrected label text is retained for dataset research only with explicit opt-in; scan results, corrections, and linked telemetry are removed on account deletion. Crash reports are retained for up to 90 days and configured product analytics for up to one year.

Under the DPDP Act, 2023 you have the right to access a copy of your personal data, to correct it, and to request its deletion, along with the right to nominate someone to act on your behalf and the right to grievance redressal. To exercise any of these, email privacy@pinegrass.in with the request type in the subject line. We acknowledge within seven days and resolve within thirty.

You can also delete your account from within the app, which removes your account data and user-generated content from our storage.

Designated under section 8(9) of the DPDP Act, 2023 as the point of contact for grievance redressal on behalf of the Data Fiduciary.

To request removal of content, email privacy@pinegrass.in with the affected content and a copy-of-claim. Acknowledged within 72 hours.

The “Last updated” date above moves whenever anything material changes. Prior versions are available on request to connect@pinegrass.in.