Your data, plainly.
Privacy Policy
Version 1.0 · last updated 18 July 2026
Who is responsible
Orzio is operated by Lev Zolotarov, an individual based in Cyprus (the “controller”). Contact: levzo@pm.me.
What we collect
Meal photos and barcode or nutrition-label photos, retained while your account exists. Model outputs: identified foods, portions, macro estimates, confidence values, and raw model responses. Your logs: meals, snacks, portions, timestamps, weight entries, goals, diet rules, allowed and banned foods, and saved products. Messages you send to the bot, including captions and text descriptions of meals. Usage telemetry: commands and buttons used, which model served each request, latency, token counts, cost, errors, and which surface (Telegram, Discord, Shortcut, or web) was used. Account identifiers: your Telegram and/or Discord user id and display name, timezone, day-start setting, and a hash of your shortcut secret. We collect no email, password, address, or payment data at this stage.
What we use it for
Providing the service: analysis, logging, history, and summaries. Fixing bugs and diagnosing failures. Improving the service: evaluating and comparing vision models, tuning prompts, and improving accuracy and the compliance engine, using stored photos, model outputs and telemetry for that purpose. Nothing else. No advertising, no profiling for third parties, no sale of data.
Who processes it
Vercel (hosting and image storage), Neon (database), Anthropic, OpenAI and Google (vision analysis of photos and descriptions), Telegram and Discord (message delivery), and Open Food Facts and other barcode libraries (barcode lookups; a barcode you scan may be queried against them). We do not sell personal data and do not share it for advertising.
Legal basis
Under the GDPR: performance of the service you requested, and legitimate interest for improvement, security and debugging. Health-adjacent data (weight, food intake) is provided voluntarily by you for the purpose of running the service.
How long we keep it
Data is kept while your account exists, and deleted after the account-deletion flow completes (Settings → Delete my account: scheduled 30 days out, cancellable during that window). Backups may persist for up to 30 further days. After deletion, only aggregate counters that contain no personal data and cannot be linked back to you may be retained; nothing user-identifiable survives.
Your rights
Access, correction, deletion, export, and objection, plus the right to complain to the Cyprus data protection authority. Deletion is available in Settings or by emailing levzo@pm.me; requests are honoured within one month. A JSON export of your data is available from the deletion flow, or on request.
Age
Orzio is for users 18 and over. Accounts identified as belonging to someone under 18 are deleted.
International transfers
The processors above may handle data outside the EEA under their standard safeguards.
Changes
Material changes bump the policy version and re-prompt you for acceptance in the chat.