Privacy Policy
Also published at voktera.com/privacy
Effective date: May 31, 2026
Omar Rihani (“we”, “us”, “our”) operates Voktera at https://voktera.com (the “Service”). This Privacy Policy explains what personal information we collect, how we use it, and your rights.
Contact us
| Operator | Omar Rihani |
| Address | 29 Sara Dr., Welland, Ontario, Canada |
| Email (general) | support@voktera.com |
| Email (privacy requests) | privacy@voktera.com |
What we collect
We collect only what we need to run the Service.
| Category | Examples | How we get it | Why |
|---|---|---|---|
| Identifiers | Email address, account user ID | You sign in | Account and security |
| Account & settings | Theme, accent, nutrition targets, confirmation preferences | You in the app | Personalization and features |
| User content | Foods, meals, todos, workouts, goals, health entries | You enter or import | Core functionality |
| Technical data | IP address, browser/device type, server logs | Automatic when you use the Service | Security, debugging, abuse prevention |
| Cookies & local storage | Session cookies, theme cookie, cookie notice choice | Your browser | Login, preferences, consent |
| Push notifications | Push subscription data (if you opt in) | You enable notifications | Reminders you request |
| Label scan (OCR) | Text extracted from labels on your device | You scan or paste in the app | OCR to suggest form values; label photos are not uploaded to our servers |
We do not collect payment card data (the Service is free), government ID, or precise GPS location for advertising.
How we use your information
We use personal information to:
- Create and secure your account (email sign-in via our auth provider).
- Store and display your logs (food, gym, tasks, goals, health).
- Run label OCR on your device when you use scan (photos stay on your device); process pasted text on our servers only when you use server features that need it.
- Send push notifications you opt into.
- Operate, secure, and improve the Service.
- Respond to your requests and support messages.
- Comply with law and enforce our Terms.
We do not sell your personal information. We do not use your data for third-party advertising.
Legal bases (EEA/UK users)
Where GDPR applies, we rely on:
- Contract — to provide the Service you signed up for.
- Consent — for push notifications (you can withdraw consent).
- Legitimate interests — security, fraud prevention, and improving the Service, balanced against your rights.
Cookies and tracking
We use cookies and similar technologies for sign-in, preferences, and security. See our Cookie Policy for details. We do not run analytics or advertising trackers.
Third-party services
We use trusted providers who process data on our behalf:
| Provider | Purpose | Their privacy policy |
|---|---|---|
| Supabase | Authentication and database hosting | https://supabase.com/privacy |
| Vercel | Hosting and serverless functions | https://vercel.com/legal/privacy-policy |
| Cloudflare Turnstile | Bot protection on sign-in (when enabled) | https://www.cloudflare.com/privacypolicy/ |
These providers may process data in East US (Ohio), United States. By using the Service, you understand your information may be transferred outside your province or country.
How long we keep data
- Account data — while your account is active and for a short period after you ask us to delete it (we aim to complete deletion requests within about 30 days, subject to backups and legal holds).
- Label photos — not uploaded for in-app scan (OCR runs on your device). Pasted text is not stored as an image.
- Server logs — kept for a limited time per our hosts’ policies (typically weeks to months).
- Cookie consent record — stored in your browser until you clear it.
Your rights
Depending on where you live, you may have the right to:
- Access a copy of your personal information.
- Correct inaccurate information (many fields you can edit in the app).
- Delete your account and associated data.
- Export your data in a portable format (contact us — we will respond within a reasonable time).
- Withdraw consent for push notifications.
- Object to or restrict certain processing where applicable.
Canada (PIPEDA): You may contact us with questions or complaints. You may also contact the Office of the Privacy Commissioner of Canada: https://www.priv.gc.ca
California (CCPA/CPRA): We do not sell or share personal information for cross-context behavioral advertising. You may request access, correction, or deletion by emailing privacy@voktera.com. We will not discriminate against you for exercising your rights.
EEA/UK: You may lodge a complaint with your local supervisory authority. We encourage you to contact us first at privacy@voktera.com.
To exercise rights, email privacy@voktera.com from the address linked to your account. We may need to verify your identity.
Security
We use reasonable safeguards, including HTTPS, access controls, and database row-level security so users can only access their own data. No method of transmission or storage is 100% secure.
Children’s privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact privacy@voktera.com and we will delete it.
International transfers
We are based in Ontario, Canada. Your data may be processed in Canada and in other countries where our providers operate (including the United States). We rely on contractual protections and provider commitments where required.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version on this page and update the effective date. Continued use after changes means you accept the updated policy, to the extent permitted by law.
Contact
Questions about privacy: privacy@voktera.com
General contact: support@voktera.com
Omar Rihani
29 Sara Dr., Welland, Ontario, Canada