Privacy Policy
Ambrosia, operated by TSN Technology, Denmark (“we”). Questions or requests: contact@tsntechnology.com. Last updated: 6 October 2026.
We are the data controller for the personal data described here. This policy explains what Ambrosia collects, why, who helps us process it, and your rights under the EU General Data Protection Regulation (GDPR).
1. What we collect
| Data | Why we use it |
|---|---|
| Account data: email address, how you sign in (email and password, Google, or Apple), and a unique user ID | Create and secure your account |
| Profile data: name, birth year, biological gender, weight, your goals, and which nutrients you track | Personalise your nutrition targets |
| Meal photos you take or choose | Identify ingredients and estimate nutrition |
| Log data: meals, ingredients, portions and nutrition scores | Provide the app and your history |
| Usage events (for example onboarding steps, paywall views, scans), linked to your user ID. Only if you allow analytics. | Understand and improve the app |
| Crash reports and diagnostics (device model, OS version, stack traces), linked to your user ID | Fix bugs and keep the app stable |
| Subscription status (whether Premium is active) | Unlock Premium and restore purchases |
| Security tokens (Google Play Integrity / Apple App Attest via Firebase App Check) | Prevent abuse of our servers |
We do not collect your location or contacts. Payments are handled by Google Play and the Apple App Store; we never see your card details.
Health-related data. Your weight, biological gender, goals and what you eat can reveal information about your health. You enter this voluntarily; we process it on the basis of your explicit consent (GDPR Art. 9(2)(a)), given when you provide it, only to run the app for you. We never use it for advertising. You can withdraw consent at any time by deleting the data or your account. Ambrosia gives general nutrition information, not medical advice.
2. Who processes your data
We use these service providers (processors) under data-processing terms. We do not sell your data.
- Google Firebase: sign-in, database, photo storage, backend functions, App Check and Crashlytics. Our project data is stored in the EU (Firestore region eur3; functions in europe-west1).
- Google Gemini API: your meal photos and food descriptions are sent through our backend for analysis. We use Google’s paid Gemini API: under Google’s terms for paid services, Google does not use this content to improve its products or models, but logs it for a limited period solely to detect violations of its prohibited-use policy.
- PostHog (EU cloud): product analytics, only if you allow it.
- RevenueCat: subscription and entitlement management.
- Google Play / Apple App Store: purchases. If you sign in with Google or Apple, those companies also handle that sign-in under their own policies.
Some providers are US-based or may process data outside the EU/EEA. Where they do, transfers rely on the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.
3. Legal bases (GDPR Art. 6)
- Contract: account, profile, logs, photo analysis and subscription handling.
- Consent: usage analytics (PostHog) and the health-related profile data described above. Analytics is off until you say yes on first launch, and you can change your mind any time in Settings → Share usage analytics. If you decline, no usage events are sent.
- Legitimate interests: crash reports and App Check security tokens, to keep the app working and protected from abuse.
4. How long we keep it
- Account, profile, logs and photos: until you delete your account.
- Usage events in PostHog: up to 12 months (the retention period of our plan), or until you delete your account, whichever is sooner.
- Crash reports in Firebase Crashlytics: 90 days (fixed by Google).
- Google and Apple keep payment records under their own policies.
5. Your rights and deleting your account
You can access, correct, export or delete your data, restrict or object to processing, and withdraw consent. To delete your account, open Settings → Delete Account in the app, or follow the steps on our account deletion page. Deletion removes your account, profile, logs and photos, and we delete your subscriber record at RevenueCat and your analytics profile at PostHog. Deleting your account does not cancel a subscription: manage that in Google Play or on your Apple ID.
For any other request, email contact@tsntechnology.com from your account address. You can also complain to the Danish Data Protection Agency (Datatilsynet) or your local authority.
6. Children
Ambrosia is not for children under 13, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
7. Security
Data is encrypted in transit and access is restricted by authentication and security rules. No system is perfectly secure.
8. Changes
If this policy changes we will update the date above and, for material changes, tell you in the app.