Privacy policy

Last updated: 17 October 2026

Sikono is an app for logging what you eat and your weight. It is made and run by Angelos Mangos, an individual based in the Netherlands ("we", "us"). We are responsible for your personal data under the EU General Data Protection Regulation (GDPR). You can reach us at [email protected].

The short version: almost everything stays on your phone. There are no accounts, no ads, no analytics and no tracking, and we never sell data.

What stays on your phone

Your profile (sex if you give it, birth year, height and activity level), your weigh-ins, your food diary, the foods you create, your plan and your settings are stored only on your device. We never receive them.

Your phone's own backup (Google's backup on Android, iCloud on iPhone) may include this data if you have backups turned on. That backup is between you and Google or Apple, under their terms.

What leaves your phone, and why

Barcode lookups

When you scan or type a barcode, the app asks Open Food Facts, a free and open food database, for that product. Open Food Facts receives the barcode and, like any website, your IP address, as it does when the app shows a product's photo from its database. We don't send anything else, and the product it returns is saved on your phone. This is needed to provide the feature you asked for (GDPR article 6(1)(b)).

Barcode scanning on Android

On Android, the camera reads barcodes with Google's ML Kit, through Google Play services. The camera picture is read on your phone and isn't sent anywhere, but Google may collect information about how the scanner runs (such as device details and performance) to maintain and improve ML Kit, as its terms describe. On iPhone, barcodes are read by the system itself.

AI photo logging (Pro)

When you take or choose a photo of a meal, the app shrinks it and sends it to our server, which runs on Cloudflare. Our server checks that you have Pro and then sends the photo to Google's Gemini AI on Google Cloud (Vertex AI), which recognises the foods in it. We use Google Cloud's EU service, so the photo is read in the EU. The answer comes back to your phone, where the app matches it to its own food data.

• Your photo is not stored. Our server keeps it only while it's being read and doesn't save it anywhere. Google Cloud works for us under its business terms, which don't let Google use your photos to train or improve its AI, and we've turned off Google's temporary caching of requests. Like any Google Cloud customer on its standard terms, our requests are checked by Google's automated systems for abuse of its services, and Google may keep a request they flag for a limited time to look into it.
• To check your subscription, the app sends the proof of purchase your app store gives it (a purchase token on Google Play, a signed transaction on the App Store). We check it with Google or Apple and remember only a scrambled version (a hash) of it for up to an hour, so we don't have to ask every time.
• To limit use fairly, we count how many photos each subscription sends per day, using the store's ID for the subscription. Counts are deleted the next day.

Before your first photo, the app asks for your permission. A meal photo can say something about your diet, so we rely on your explicit consent (GDPR articles 6(1)(a) and 9(2)(a)). You can stop at any time by not using the feature, and you don't have to use it to use the rest of Sikono.

Subscriptions

Pro is bought through Google Play or the App Store. They handle the payment, and we never see your payment details. The app only learns from the store whether you have Pro, and which plan.

Who processes data for us

• Cloudflare hosts our server, so it handles the connection, including your IP address.
• Google reads meal photos for us (Gemini on Google Cloud, in the EU), and on Android, Google Play services runs the barcode scanner.
• Google Play and Apple handle purchases, as described in their own privacy policies.

Meal photos are read in the EU. Cloudflare, and Google for the barcode scanner, may process data outside the EU, including in the United States. Those transfers are covered by the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.

How long we keep data

• Meal photos: not kept at all.
• Daily photo counts: deleted the next day.
• Subscription checks: deleted within a day after they run out (each one lasts an hour at most).

Your rights

Under the GDPR you can ask us for access to your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. You can also withdraw your consent at any time. Because we keep almost nothing, and nothing with your name on it, most of these are covered by the app itself: deleting the app deletes everything it stored. For anything else, email [email protected].

If you think we've handled your data wrongly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or the authority where you live.

Age

Sikono is for people aged 18 and over. We don't knowingly process data of anyone younger.

Changes to this policy

If we change this policy, we'll update the date at the top and, for important changes, tell you in the app before they apply.