This policy applies to the BetterPlate mobile app, the website at https://betterplate.kardstudio.com, and related support. The controller is Kadir Harmanci, the developer and service provider of BetterPlate (“BetterPlate,” “we,” or “us”). Contact: info@kardstudio.com.

This policy is a notice, not consent. Where consent or permission is required, BetterPlate presents a separate choice.

Account data: Apple or Google user identifier, name, email address, sign-in provider, and profile photo if supplied.

Content and generation data: Food photos, videos, logos, brand assets, categories, themes, prompts, aspect ratios, camera choices, generated images and videos, favorites, and gallery records.

Account and transaction data: Language, appearance and notification preferences, optional brand profile and social handles, token balances and transactions, subscription and purchase entitlement, and referral activity.

Technical and security data: App version, device and operating-system information, IP address, session/request identifiers, error and security logs. BetterPlate does not collect precise or coarse location for targeted advertising.

Communications: The name, email address, message, form language, and submission time you provide through the website support form; support email correspondence; and other information you voluntarily provide. To secure the form and limit abuse, we may also retain a one-way hash of the submitting IP address and the browser user agent. Apple processes payment-card details; BetterPlate does not receive or store your full card number.

We collect data from you, Apple or Google sign-in, the app and device, Apple App Store, RevenueCat, Supabase, and our generation infrastructure.

We use it to create and secure your account; provide requested AI generations, gallery, brand, token and subscription features; receive, answer, and track support requests; prevent fraud and abuse; diagnose faults; protect legal rights; and meet legal obligations. Support-form information is processed as needed to provide the requested support, establish or protect legal rights, or pursue our legitimate interest in operating a secure support channel. Camera and photo-library access occurs only after device permission, and items you do not select are not uploaded.

Supabase provides authentication, database, private file storage, and server functions. fal.ai and, depending on the selected feature, model providers such as OpenAI/GPT Image, Ideogram, or Kling process selected content to produce the image or video you request. RevenueCat and Apple validate purchase and subscription entitlement. Apple or Google provide sign-in, and Apple/Expo infrastructure may deliver notifications you enable.

We may disclose limited data to authorities or professional advisers when required by valid law, a security incident, or a legal claim. We do not sell personal data or share it for third-party targeted advertising.

Before an AI generation, BetterPlate separately explains and asks permission to send the selected photo, brand elements, and generation settings through Supabase to fal.ai and the applicable model provider. BetterPlate does not use uploaded content to train a BetterPlate-owned model.

Provider retention and subprocessors are governed by our provider arrangements and their applicable terms. BetterPlate staff do not routinely review content, but limited review may occur if you request support, a security investigation is necessary, or law requires it.

You can withdraw future AI processing permission in Settings. Withdrawal stops future transfers but does not invalidate processing already completed lawfully.

Supabase, fal.ai, model providers, RevenueCat, Apple, and Google may process data outside Türkiye, including in the United States or European Union. Transfers are handled under the applicable transfer mechanism, contractual safeguards, security measures, and data-protection law. Where separate consent is legally required, it is requested independently from this notice.

We keep account, profile, gallery, and generation records while your account is active and the data is needed to provide the service. Deleting content or your account starts deletion from active BetterPlate systems.

Temporary generation files are removed after processing or troubleshooting is no longer necessary. Short-lived provider caches and backups may be removed during their normal deletion cycles. Support records are kept until the request, reasonable follow-up, and related legal or security need ends, then deleted or anonymized. Purchase, fraud-prevention, security, and legal records may be retained only for the applicable mandatory period with restricted use.

Depending on applicable law, you may request access, a copy, correction, deletion, restriction, portability, or objection; learn the purposes and recipients; object to solely automated results; withdraw consent; and seek a remedy for unlawful processing.

Delete your account in Profile > Settings > Delete Account. For other requests, email info@kardstudio.com from the address linked to your account. We may request proportionate verification. Turkish data-protection requests are answered as soon as possible and no later than 30 days.

We use reasonable safeguards such as encrypted transport, access controls, and private storage. No online system can guarantee absolute security; we will meet applicable breach-notification duties.

BetterPlate is designed for businesses and professional creators. If you cannot legally enter a binding agreement, use the service only with a parent or legal guardian’s authorization and account supervision.

We provide reasonable notice of material changes and request a new choice when a new permission is legally required. Policy version: 2026.08.13.

Controller: Kadir Harmanci (developer and service provider of BetterPlate)

Email: info@kardstudio.com

Website: https://betterplate.kardstudio.com