About this translation: This is an English translation of the Swedish original (integritetspolicy). If the two differ, the Swedish version applies.
In short: An external AI service performs today's image analysis. Cibello's own AI model may only be trained on the user's own corrections and sanitised images after a separate, voluntary and active choice during onboarding. External AI output is never used as training ground truth.
1. Data controller
LandveX AB, corporate ID 559141-7042, Antennvägen 2, 135 48 Tyresö, Sweden, is the data controller for Cibello. Privacy questions go to privacy@cibello.app.
2. Data and purposes
- Account: email address, display name, authentication identity and security logs to create and protect the account.
- Food and household data: inventory, recipes, preferences, allergies and the user's own corrections, for the app's functions.
- Images: images the user chooses to scan in order to identify food items or receipts.
- Payment: subscription status and transaction references. Card and payment details are handled by Apple App Store or Google Play.
- Technical data: errors, performance and product analytics only according to the user's choices and necessary security needs.
- Protection against free-trial abuse: a keyed, pseudonymous HMAC fingerprint of the normalised email address is stored for at most five years. It cannot be used for login or contact and contains neither the plain-text address, user ID nor Firebase identity. Its only purpose is to prevent repeated free trials after account deletion and re-registration.
3. Gemini in production
Selected images and the necessary instruction are sent to the Google Gemini API to produce the result shown in the app. Cibello uses the paid service within the EEA. Under Google's terms, data in the paid service is not used to improve Google's products, but limited logging may occur for security and abuse prevention unless a specific zero-retention mode applies. Cibello therefore does not promise zero retention outside its own environment without technical confirmation from the provider.
Gemini results are automatic estimates. The user must check contents, allergens, dates and quantities before the information is used.
4. Cibello's own AI model – separate and voluntary training
Cibello is developing its own AI model. The training flow is technically and legally separated from the external AI service that gives the user today's results:
- Gemini answers, reasoning or suggestions are never exported as training labels or ground truth to Cibello's own AI model.
- Anonymised AI improvement allows the user's explicit correction or manually confirmed answer to be used without the image.
- Image training allows a sanitised copy of the user's image to be linked to their own correction. Metadata is removed and the image is size-limited before storage.
- Onboarding shows one joint, clear choice for these two parts of the same training purpose. The choice is not preselected and the app works even if the user does not consent.
- Consent can be withdrawn with a button in Profile. Future use then stops, the app-owned active training bank is cleared and image references are removed. Already produced, aggregated model parameters can normally not be traced back to a person.
- Cibello AI does not affect the production answer until documented benchmark and safety thresholds have been reached.
5. Legal basis
Account and core functions are processed to perform the contract. Security logging and the limited fingerprint against repeated free trials are processed on the basis of legitimate interest. Legal obligations may require other limited processing. Voluntary product analytics, AI improvement and image training are based on separate consents that can be withdrawn.
6. Storage and recipients
Data is stored for as long as required for the service, security, legal requirements and documented backup retention. Providers may include AWS for hosting and storage, Firebase for authentication, Google Gemini for selected AI analysis and Apple or Google for payment. Cibello does not sell personal data. The free-trial fingerprint is automatically deleted no later than five years after the trial started.
7. Your rights
You may request access, rectification, data portability, restriction or erasure and object to certain processing. Consents are changed in Profile. The account can be deleted directly in the app or via the account deletion page. You may also contact the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten).
8. Age
For the time being Cibello is intended for people aged 18 or over, because the terms of the Gemini API service used require adult users. The age requirement will be reconsidered if the technical provider solution changes.
9. Changes
Material changes are version-numbered and require a new acceptance in the app before continued use.