Eat First has no accounts and collects no analytics. Your kitchen data lives on your device and in your own iCloud. We could not read it if we wanted to.
Eat First is made and published by Çağlayan Özgün Kasap, a developer in Türkiye (“we”, “us”). We are responsible, as data controller, for the personal data this policy says we process. You can reach us at support@stratanaut.com.
You never create an account, and the app never asks for your name, email address, or phone number.
The app contains no advertising identifiers and no third-party analytics or trackers of any kind. From the first version after 1.0, the app contains usage-counting code we wrote ourselves. It is switched off in that version and sends us nothing; turning it on takes a new version of the app.
Items you add — names, photos, dates, notes — are stored on your device and, when iCloud is available, in your own iCloud (Apple's CloudKit), under your Apple Account. If you use family sharing, your kitchen is shared with the people you invite through Apple's CloudKit sharing (CKShare); it syncs directly between your devices and iCloud. None of it passes through a server of ours, and we have no access to it.
To find a scanned product's name and category, the app sends the product number from its barcode to the free, open Open Food Facts database. From the first version after 1.0, it skips products your kitchen already knows and a shop's own labels, and the request also names up to three of the languages set on your phone, so the name comes back in your language. The request carries no photos, kitchen contents, or device identifiers. It goes straight from your device to Open Food Facts and never reaches us. Like any request over the internet, it shows your IP address to Open Food Facts, which handles it under the Open Food Facts privacy policy.
Expiry-label reading (OCR) and the Chef AI meal suggestions run entirely on your device using Apple's on-device machine learning (Apple Intelligence). Your photos and kitchen contents are never uploaded for processing.
Reminders are local notifications scheduled by the app on your device. They do not pass through any remote push service of ours.
The one-time Family Pack purchase is processed by Apple through the App Store. We receive no payment details; Apple's own privacy policy governs the transaction.
Apple notifies our analytics server, which Opsida Teknoloji runs for us, of each purchase and of later changes such as a refund. We keep each notification whole. It holds the product, price and currency, the dates of the purchase and of any refund, your App Store country, and Apple's transaction identifiers. From the first version after 1.0, the app also hands Apple a randomly generated number with each purchase, and Apple includes it in the notification. We don't know who you are: we never see your name, email address or Apple Account details, and the records are tied only to Apple's transaction identifiers and that random number.
We use these records to follow purchases and refunds and to improve the app. They come from Apple's servers, not from the app, and no setting in the app turns them off. Opsida Teknoloji runs the server on Vercel Inc. in Frankfurt, and the records are stored in Supabase Pte. Ltd.'s database, on Amazon Web Services servers in Frankfurt. We keep them as long as we need them to compare the app's sales from one version to the next.
When you write to us, we receive your email address, your message and anything you attach. We use them only to answer you and to fix what you report. Cloudflare forwards mail sent to support@stratanaut.com to our mailbox at Google's Gmail and keeps no mailbox itself. We use Gmail under Google's standard terms, so Google handles those messages under its own privacy policy. We keep messages while we deal with them and then for no more than two years, unless the law requires us to keep them longer.
You download Eat First from Apple, under Apple's privacy policy. If you turn on Share With App Developers in Settings › Privacy & Security › Analytics & Improvements, Apple also shares crash reports and usage statistics with us, without your identity.
eatfirst.stratanaut.com sets no cookies, runs no analytics and loads nothing from other companies. It is hosted by Vercel, which processes the technical details every visit sends, such as your IP address and browser type, to deliver the pages and keep the service secure. Vercel keeps those logs for the period it sets.
We do not sell or rent your personal data.
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases under Article 6(1) of the GDPR:
We work from Türkiye, and so does Opsida Teknoloji. Open Food Facts is based in France. Google, Cloudflare and Vercel are based in the United States, and Supabase in Singapore; each may process data in its own country and in others. Purchase records are stored in Frankfurt, Germany.
Depending on where you live, you can ask us for a copy of your personal data, and ask us to correct or delete it, to restrict or stop using it, or to give it to you in a portable format. You can also complain to your data protection authority.
In practice we hold very little about you: usually only your emails and, if you bought the Family Pack, Apple's record of that purchase. We cannot see your kitchen.
To make a request, email support@stratanaut.com. We reply within one month at the latest. If you live in Türkiye, your rights under Law No. 6698 (KVKK) and how to apply are set out in our KVKK Aydınlatma Metni, in Turkish.
Delete items inside the app, or delete the app to remove everything from your device; iCloud data can be managed from iOS Settings. We hold none of your kitchen data, so we have none of it to erase. To have your emails to us deleted, write to support@stratanaut.com.
If this policy changes, the updated version will be posted on this page with a new version number and date. If a change affects what data the app handles, we will also say so in the App Store release notes.
Questions about privacy? Email support@stratanaut.com.