Terms, privacy and refunds

1. Important health notice

2. Terms of use

2.1. Acceptance of these terms

By registering an account or using the Service you confirm that you have read and accepted these terms. If you do not agree with them, please do not use the Service.

2.2. Age

The Service may only be used by persons aged 18 or over. The application will not let you continue if you enter a lower age, and by registering you confirm that you meet this requirement.

The threshold is deliberately set at 18, even though the law permits a lower age in some cases: the Service gives guidance on diet and body weight, which carries additional risk for younger users, and it processes data that may qualify as health data.

2.3. Your account

Using the application requires an account (email and password, or Google sign-in). You are responsible for keeping your credentials safe and for all activity under your account. The account is personal and non-transferable.

2.4. Free and Pro plans

• Free: a meal plan of up to 3 days, calorie and macronutrient calculation, manual tracking of meals and body weight, subject to a daily limit on AI requests.
• Pro (subscription): the full plan (up to 31 days), meal recognition from photographs, shopping lists, supplement summaries, meal swaps and more detailed analysis, with a higher daily limit on AI requests.

Pricing: €10 per month or €89 per year. Prices and plan contents may change; existing subscribers will be notified of any price change in advance, in line with section 2.5 and the payment processor’s rules.

2.5. Payment, renewal and cancellation

Payments are handled by Paddle as merchant of record; Paddle is the party that sells the Service to you, issues the invoice and accounts for tax where applicable. The subscription renews automatically at the end of each billing period (monthly or annual) until you cancel it. You may cancel at any time via “Manage subscription” in the application or on the website; access to Pro features continues until the end of the period already paid for. Paddle’s buyer terms are available on their website. On your card statement the charge will appear as Paddle, not as Tanjir: that follows from Paddle being the merchant of record, and is not an error.

2.6. Acceptable use

• You must not circumvent technical limits (AI request caps, Pro restrictions), scrape the Service automatically, overload it or otherwise interfere with it.
• You must not use the Service for unlawful purposes or upload content that infringes the rights of others.
• We may temporarily restrict or close an account that breaches these rules.

2.7. Intellectual property

The software, design, name and visual identity of the Service belong to us or to our licensors. You may use the plans and content generated for you for personal, non-commercial purposes.

2.8. Availability and changes to the Service

We aim to keep the Service running reliably, but we do not guarantee uninterrupted availability. Features may change, be added or be withdrawn. We will notify you of material changes to these terms through the Service or by email; continued use after a change is taken as acceptance.

2.9. Limitation of liability

The Service provides general information, not advice tailored to your state of health (see section 1). To the fullest extent permitted by law, we are not liable for indirect or consequential loss arising from use of the Service, including decisions about food, diets or supplements taken on the basis of generated content.

This limitation does not apply to loss caused intentionally or by gross negligence, to death or personal injury, or to any liability that cannot be limited or excluded under mandatory law. If you are a consumer, nothing in these terms affects any right you have under mandatory law, including consumer rights in the Republic of Serbia and, if you are resident in the European Union, rights under the law of your country.

2.10. Governing law and disputes

These terms are governed by the law of the Republic of Serbia. Disputes fall to the competent court in the Republic of Serbia.

If you are a consumer, this choice of law and forum does not deprive you of the protection afforded by the mandatory law of your country of habitual residence, nor of the right to bring proceedings before the courts of that country where that law gives you such a right.

We will first try to resolve any dispute by agreement: write to the contact address at the top of this page and we will reply within a reasonable time. Consumers in Serbia may also use out-of-court dispute resolution before a body listed in the register kept by the ministry responsible for consumer protection.

3. Privacy policy

The data controller is the person named at the top of this page, Petar Lukić, contact contact@tanjir.app. Processing is carried out in accordance with the Serbian Personal Data Protection Act and the General Data Protection Regulation (GDPR).

3.1. What data we collect

• Account data: email address, name (if you enter one), profile picture (if you upload one), and Google account details if you sign in with Google (email, name, picture).
• Profile and goal data: sex, age, height, body weight, activity level, goal (weight loss or gain), dietary preferences and allergies. Note: this data may amount to a special category of data (health data): we process it solely to provide the Service, on the basis of your explicit consent (Art. 9(2)(a) GDPR). You give that consent through a separate, unticked box before the data leaves your device, apart from accepting these terms. We record the time consent was given and the version of this text it relates to, so you can at any time ask what you accepted and when. You withdraw consent by deleting your account.
• Content you enter: meals you log, weight measurements, favourite meals, and photographs of meals you upload for recognition.
• Payment data: handled by Paddle; we neither see nor store your card number. From Paddle we receive your subscription status and customer/subscription identifiers.
• Referrals: if you use the referral programme, we store your invite code and the link between accounts: who invited whom. We need this to calculate the discount. We do not show this to other users, apart from the count of successful referrals, which only you can see.
• Consent record: the time you gave consent and the version of the legal text it relates to. We keep it because we must be able to demonstrate that consent was given.
• Technical data: basic usage records (for example the number of AI requests per day, to enforce limits) and data necessary for operation and security.

3.2. Purposes and legal bases

• Providing the Service (performance of a contract): account, plans, tracking, subscription.
• Processing body data to personalise your plan (explicit consent).
• Security, abuse prevention and billing (legitimate interest / contract / legal obligation).

3.3. Who processes data on our behalf (processors)

• Supabase: database, authentication and file storage (EU region).
• Vercel: application hosting.
• Anthropic: AI processing. The text of your request (for example the data used to build a plan) and photographs of meals are sent to the Anthropic API to generate a response. This involves a transfer of data to the United States. The transfer relies on the European Commission’s standard contractual clauses (Module 2, 2021 version), which form part of the data processing agreement concluded with Anthropic. Under that agreement, data sent through the API is not used to train models, and operational logs are deleted automatically after a short period.
• Paddle: payments and subscription management (merchant of record; for payment data Paddle acts as an independent controller).
• Resend: delivery of emails the application sends (account confirmation, password reset). Processes your email address and the content of those messages. Servers in the EU (Ireland).
• Vercel Analytics: counting visits to the site. It sets no tracking cookies, builds no profile of you and does not link visits to your account.

We do not sell your data or share it with third parties for marketing purposes.

3.4. How long we keep data

We keep your data for as long as your account exists. Deleting the account permanently erases profile data, plans, measurements, consent records and uploaded meal photographs.

The exception is data we are required by law to retain. Invoices to customers are issued by Paddle as merchant of record, so their own rules apply to that documentation. Records created on our side are kept for the periods set by the Serbian Accounting Act: source documents underlying entries for 5 years, the journal and general ledger for 10 years, and financial statements for 20 years, counted from the last day of the business year they relate to. Those records contain payment data, not your body data or photographs.

3.5. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent (withdrawal does not affect the lawfulness of processing carried out beforehand). Account deletion: available directly in the application (account menu → “Delete account”), permanent and without delay. For other rights, write to the contact address at the top of this page and we will reply within one month at the latest of receiving your request. You also have the right to complain to the supervisory authority (in Serbia: the Commissioner for Information of Public Importance and Personal Data Protection).

3.6. How we protect data

All traffic between your device and the Service travels over an encrypted connection (HTTPS). The database and file storage are located in the European Union and are configured so that each account can see only its own data. Meal photographs are held in private storage and are reachable only through a temporary link issued to you.

We do not store passwords in readable form, and we never receive your card details. The number of people with access to the data is kept to a minimum.

If a data breach occurs that is likely to affect your rights, we will notify the supervisory authority and you, within the time limits the law prescribes.

3.7. Automated processing

Meal plans, calorie estimates and food recognition from photographs are produced automatically, with the help of artificial intelligence. This is informational content, not a decision that produces legal effects concerning you or similarly significantly affects you. We do not make automated decisions to grant or refuse the Service on the basis of profiling.

3.8. Changes to this policy

We may change this policy as the Service develops. The date of the last change is shown at the top of the page. We will notify you of material changes through the Service or by email, and if the scope of health data processing changes we will ask for fresh consent. The earlier consent relates to the text in force when you gave it.

4. Refund policy

Sales and payments are handled by Paddle as merchant of record, so Paddle’s refund rules also apply to purchases.

• Right of withdrawal (EU consumers): you may withdraw from the contract within 14 days of purchase without giving a reason. Because Paddle is the merchant of record, the purchase contract is concluded with Paddle (for buyers outside the US and Canada this is Paddle.com Market Limited, England), so that consent is given during their checkout process, under their buyer terms. Under those terms you lose the right of withdrawal only if two conditions are met: that you agreed at purchase to immediate access, and that you actually began using the Service within the 14 days. If you did not begin, the right of withdrawal remains. The buyer terms are available at paddle.com.
• Refund requests: submit them through Paddle (the link in your purchase confirmation email) or to us at the contact address at the top of this page, and we will pass them on. Well-founded requests (for example a technical fault we cannot fix, or a double charge) will be granted.
• Cancelling a subscription is not the same as a refund: cancelling stops future charges, and access continues to the end of the period already paid for; a period already charged is not refunded, except in the cases above or where mandatory law requires it.

5. Cookies and local storage

The Service uses strictly necessary cookies and local storage for sign-in and account functionality (the Supabase session), to remember settings on your device (such as sound) and to keep sign-up and checkout working. We use no advertising cookies and no third-party tracking tools for marketing. During payment, the Paddle checkout may set its own strictly necessary cookies.

Cookies strictly necessary to deliver a service you requested do not require prior consent: this notice is enough. We count visits with a tool (Vercel Analytics) that sets no cookies, writes nothing to your device and builds no profile of you.

One exception is worth knowing about: if you reach us through a tagged link from one of our posts or ads, we temporarily keep only the source label in local storage (for example "instagram") so we know which channel brings people in. That label is saved with your account once you create one, is shared with no one and is not used for advertising. If you do not arrive through such a link, nothing is stored.

We ask about marketing tracking separately. On your first visit you get a question with two equally prominent buttons, “Accept” and “Reject”. Until you click, you count as having refused and nothing marketing-related loads. If you accept, the Meta Pixel loads and data about that visit (page address, time, device and IP address) goes to Meta, which uses it to measure how our ads perform. Your choice is stored on your device and you can change it whenever you like, with the button below or the “Cookies” link in the site footer.

If we introduce any further tracking tool, we will ask for your consent in advance and update this text before switching it on.

6. Contact

For any question about the Service, privacy or payments: contact@tanjir.app. We aim to reply within a few working days.