1. Introduction
Ferrum ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use Ferrum during its free beta phase.
Ferrum is an experimental tool that provides estimated nutritional information for informational purposes only.
2. Data We Collect
We collect only the minimum data required to operate the service.
2.1 Account Information
Email address — Used for:
- Account creation
- Authentication
- Password reset
We do not collect: name, age, gender, location, health records, or medical diagnoses.
2.2 User-Provided Content
When you use Ferrum, you may upload:
- Photos of meals
These images are used solely to identify food items and estimate nutritional values.
2.3 Configuration Data
Daily iron goal (optional, user-defined) — This value is stored only to personalize the user interface and is not interpreted as medical data.
3. How We Use Your Data
We use your data to:
- Provide and operate the Ferrum service
- Authenticate users
- Analyze uploaded meal photos
- Improve the accuracy and performance of the system
- Respond to user support requests
We do not use your data for advertising or profiling.
4. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your data based on:
- Consent — when you create an account and upload content
- Legitimate interest — to operate and improve the service
You may withdraw your consent at any time by deleting your account.
5. Data Storage and Processing
5.1 Image Storage
- Meal photos are stored with a European-based cloud provider
- Images are retained only as long as necessary to provide the service
5.2 Third-Party Processing (OpenAI)
- Meal images are sent securely via API to OpenAI for analysis
- OpenAI acts as a data processor
- Images are not used by Ferrum for marketing or advertising purposes
For more information, please refer to OpenAI's own privacy documentation.
6. Data Retention
- Account data is retained until the user deletes their account
- Uploaded images may be deleted automatically after processing or retained temporarily for service improvement
- Users may request full deletion of their data at any time
7. Your Rights (GDPR)
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to processing
- Request data portability (export feature coming soon)
To exercise these rights, contact us using the information provided at the end of this policy.
8. Cookies
Ferrum uses only essential cookies required for:
- Authentication
- Session management
- Security
We do not use:
- Tracking cookies
- Advertising cookies
- Analytics cookies
Because only essential cookies are used, no cookie consent banner is required under EU law.
9. Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encrypted connections (HTTPS)
- Restricted access
- Secure storage providers
However, no system is completely secure, and we cannot guarantee absolute security.
10. Changes to This Policy
This Privacy Policy may be updated as Ferrum evolves. Users will be notified of significant changes.
11. Contact
If you have any questions about this Privacy Policy or your data, contact us at: contact@ferrum.fit