Privacy Policy

Loqma (لقمة) · Last updated: June 2026

Loqma is built by one person in Saudi Arabia. This policy explains, in plain words, what information Loqma collects, why, who we share it with, how long we keep it, and the choices and rights you have. We try to collect as little as possible. We never sell your data and we never show ads.

1. Who we are

"Loqma", "we", "us" refers to the developer of the Loqma app (getloqma.com). For any privacy question or request, contact support@getloqma.com. We act as the controller of your personal data under the Saudi Personal Data Protection Law (PDPL); where applicable we also honor equivalent rights (e.g. GDPR).

2. Information we collect

Information you give us

• Account: when you sign in with Apple or Google we receive an email address and a user identifier. We never see or store a password. You may also use the app as an anonymous guest, in which case an account is created without an email.
• Your profile: age, height, weight, sex, activity level, your goal, your pace, and any foods you choose to avoid — used only to calculate your plan.
• What you log: the meals you describe — by text, voice, photo, or barcode — and the foods, calories, macros and micros derived from them; your weight entries; and your water intake.
• Feedback / support: messages you send us through the in-app suggestion box or by email.
• Waitlist (website only): if you join the waitlist on getloqma.com, the email you enter — used solely to tell you when the app is available.

Information created as you use Loqma

• Health & fitness: the calories, macros and weight you log are health data. If you turn on Apple Health, Loqma reads your active energy to round out your daily picture and, with your permission, writes the calories and macros you log back to Health.
• Voice clips & photos: when you log by voice or photo, the audio clip or meal photo is captured and sent for processing (see §4). These are not stored after they are read.
• Usage analytics: basic product events (app opens, onboarding steps, logs, subscription status) and an app-generated install identifier, so we can understand whether the app is useful and where people get stuck. These events do not contain your meal text, photos, voice, name, or email.
• Device basics: app language and operating system, attached to analytics events.

3. What we do NOT collect

We do not collect your contacts, your precise location, your advertising identifier (IDFA), or your browsing on other apps and websites. Loqma does not track you across other companies' apps or sites, and contains no third-party advertising SDKs.

4. How your information is used (and who processes it)

To turn "what you ate" into numbers, and to keep your history working, your data passes through a small set of trusted service providers. We share only what each one needs:

• Anthropic (Claude): your meal text and photos are sent to Anthropic's AI to estimate nutrition. For branded or unfamiliar products the AI may run a web search to improve the estimate.
• ElevenLabs: when you log by voice, the audio clip is sent to ElevenLabs (Scribe) to transcribe your speech into text, which is then estimated like any typed meal.
• Open Food Facts: when you scan a barcode, the barcode number is looked up in the Open Food Facts database to get a product name.
• Supabase: stores your account, profile, logs, and weights, protected so that only your account can read them.
• PostHog: stores the usage analytics described above.
• Apple & Google: handle sign-in. Apple also handles subscription billing, and Apple Health stays on your device (we only read/write it locally, with your permission).

We use your information to: estimate the nutrition of what you log; store your history, streak and plan; calculate your targets (a deterministic formula, never AI); send the reminders you opt into; provide support; keep the service secure and prevent abuse; and meet legal obligations. We never sell your data, and we never use it for advertising.

5. Legal basis for processing

We process your data to perform our contract with you (running the app you asked for), with your consent (e.g. Apple Health access, notifications, optional profile fields), and for our legitimate interests in keeping Loqma working, secure, and improving (analytics). You can withdraw consent at any time (see §8).

6. AI processing

Estimates come from an AI model and are approximate by nature — Loqma is not a medical or nutritional authority. Your meal text and the foods you save are stored in your account so your history works. Your photos and voice clips are processed to read your meal and are not stored by us. Our AI providers process this content to return a result; per their terms they do not use it to train their public models. AI estimates are always editable by you.

7. How long we keep it

• Your account, profile, logs and weights are kept for as long as your account exists.
• Photos and voice clips are not retained after they are read.
• When you delete your account, your account data is deleted immediately, and we also request deletion of your analytics records.
• Waitlist emails are kept until launch or until you ask us to remove you.

8. Your rights and choices

You can, at any time:

• Access & correct: your profile and logs are visible and editable inside the app.
• Delete everything: Settings → Delete account removes your account and all associated data immediately and permanently, and triggers deletion of your analytics records. This works even for anonymous (guest) accounts.
• Withdraw consent: turn off Apple Health or notifications in Settings (or iOS Settings) whenever you like.
• Control logging: if your subscription lapses, Loqma becomes read-only — your data stays visible, and AI processing stops.
• Complain: you may contact us first at support@getloqma.com, and you have the right to lodge a complaint with the Saudi Data & AI Authority (SDAIA) or your local data-protection authority.

9. Security

Data is encrypted in transit (HTTPS). Stored data is protected by row-level security so that only your authenticated account can read it. API keys for our providers are kept server-side and never shipped inside the app. No method is perfectly secure, but we take reasonable measures to protect your information.

10. Children

Loqma is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

11. International transfers

Some of our providers (above) operate outside Saudi Arabia. Where your data is transferred internationally, we rely on the providers' contractual and technical safeguards to protect it consistent with applicable law.

12. Changes to this policy

If we change this policy we will update the date above and, for material changes, give notice in the app or on this page. Continuing to use Loqma after a change means you accept the updated policy.

13. Contact

Questions or requests: support@getloqma.com.