Privacy Policy

Last updated: July 29, 2026

Medical disclaimer: Como is not a medical device. The nutritional information provided is for informational purposes only and does not diagnose, treat, cure, or prevent any medical condition. Always consult a qualified healthcare professional before making dietary changes.

This Privacy Policy explains how Juan Verges ("Developer", "I") collects and handles your information when you use the Como mobile application and the comocomo.app website.

1. Data Controller

I am an independent developer established in Santo Domingo, Dominican Republic, and I am the controller of your personal data. Where the EU or UK General Data Protection Regulation applies to you, I act as controller within the meaning of that regulation.

Name: Juan Verges
Location: Santo Domingo, Dominican Republic
Contact: [email protected]

2. Data I Collect

To provide calorie tracking features, Como collects the following:

Account Information: Email address, used for login and data syncing.
Sensitive Health Data: Weight, height, age, and gender, used to calculate your caloric needs. Health data is treated as a special category of personal data requiring a high level of protection, and it is processed on the basis of your explicit consent.
User Content: Food photos, text descriptions, voice notes, and logs you submit for nutritional analysis.
Purchase Data: Subscription status and transaction identifiers, so I can tell whether your account has an active subscription. I never see or store your card or bank details — payment is handled entirely by the App Store or Google Play.
Device and Crash Data: Basic device information, push notification tokens, and crash logs collected via Google Firebase to deliver notifications and diagnose technical issues.

3. How I Use Your Data

Provide calorie estimates and track your nutrition goals.
Identify food items in photos via AI analysis.
Diagnose and fix technical issues during the beta period.

I do not sell your personal data to third parties.

4. AI Food Analysis

The photos, text, and voice notes you submit are sent to Google Vertex AI (the Gemini model family) for nutritional analysis and to generate replies. Google processes this content as my processor under its enterprise terms: it is not used to train Google's general-purpose models, and it is not linked to your identity on Google's side.

Nutritional estimates are also matched against public food databases (OpenNutrition and Open Food Facts). No personal data is sent to those sources — the lookup happens against data already held on my own infrastructure.

5. Third-Party Services

Google Firebase: Authentication, database hosting, file storage, push notifications, and crash reporting. Data may be stored on servers located in the EU or the United States.
Google Vertex AI: Food image recognition, transcription, and nutritional estimation.
RevenueCat: Manages subscription state and validates purchase receipts from the App Store and Google Play.
Apple App Store / Google Play: Process all payments as the seller of record. I receive only subscription status, never payment credentials.

These providers act as processors on my behalf. I do not sell your personal data, and I do not share it with third parties for advertising.

6. Data Security

Encryption in Transit: All data is transmitted over HTTPS/TLS.
Encryption at Rest: Your data is stored on Google Firebase servers, which apply encryption at rest by default.

7. International Data Transfers

I am established in the Dominican Republic and use Google Cloud infrastructure, so your data may be transferred to and processed in the European Union or the United States. Where data is transferred out of the EEA or the UK, Google applies Standard Contractual Clauses and additional safeguards under its data processing terms.

8. Your Rights

Depending on where you live, you may have the following rights. Where the EU or UK GDPR applies to you, all of them do:

Access a copy of the data I hold about you.
Request correction of inaccurate data.
Request deletion of your account and all associated data.
Object to or request restriction of certain processing.
Receive your data in a portable format.
Withdraw your consent for health data processing at any time, without affecting processing already carried out.
Lodge a complaint with your local data protection authority.

To exercise any of these, email [email protected]. I respond within 30 days.

9. Account and Data Deletion

In-App: Settings → Account → Delete account. This takes effect immediately.
By Email: Send a request to [email protected]. All deletion requests are fulfilled within 30 days.

See the account deletion page for the full list of what is removed, what is retained for tax and accounting purposes, and how to cancel an active subscription.

10. Children's Privacy

Como is intended for adults and is not directed at children. You must be at least 18 years old to use it, as set out in the Terms of Use. I do not knowingly collect personal data from children.

11. Changes to This Policy

This policy may be updated as the app evolves. The "last updated" date above will change, and material changes will be communicated via the app or by email.