Privacy policy

Privacy Policy

Effective from 22 September 2026 | Version 1.0

This Policy explains how Maneos collects, uses, stores and protects personal data when you use the maneos.io website, the Maneos mobile app and related services. Maneos does not sell your personal data.

1. Data controller

The data controller is MORARI GLOBAL SRL, a Romanian company with its registered office in sat Tomești, comuna Tomești, Str. Azaleei nr. 5, bl. 30, sc. A, et. 2, ap. 10, Iași County, postal code 707515, Romania, Tax ID (CUI) 52425152, registered with the Trade Register under no. J2025065989000, hereinafter referred to as “Maneos”, “we” or “the controller”.

For questions about privacy and exercising your rights: help@maneos.io. For general support: help@maneos.io.

2. Who this policy applies to

This Policy applies to people who visit the website, create an account, purchase a subscription or use Maneos features, including the food diary, photo analysis, indicative calorie calculation and workout features.

Maneos is intended for people who are at least 16 years old. We do not knowingly allow people under 16 to create an account. If we learn that we have collected data from a person under this age, we will take steps to delete the account and the associated data.

3. The data we collect

3.1 Account and identification data

• email address, name or nickname, and login credentials;
• age or date of birth, when requested to personalise the service and verify eligibility;
• language, country and account preferences.

3.2 Nutrition, activity and physical condition data

• height, weight, sex, activity level, goals and progress;
• food diary, foods, portions, calories and nutritional information;
• workouts, activities and answers provided during setup;
• information you choose to enter that may reveal aspects of your health or lifestyle.

Some of this information may constitute health data, a special category of data under the GDPR. We process it only after obtaining your explicit consent, which you may withdraw at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

3.3 Photos and uploaded content

When you use food analysis, we collect the uploaded photos and the data associated with them. Photos are stored in the Maneos database so that your history, diary and results can be displayed in your account. We do not use photos for facial recognition and we do not intentionally extract biometric data. Please do not upload images of other people, documents, bank details or any other information not needed for analysing the food.

3.4 Subscription and payment data

Payments are processed by Stripe. Maneos receives data such as the subscription type, amount, currency, payment status, transaction date, customer identifier and, where applicable, billing details. We do not store the full card number, the security code or any other complete card data.

3.5 Technical and usage data

• IP address, device type, operating system, app version and technical identifiers;
• date and time of access, features used, errors and security logs;
• cookies, local storage and similar technologies, as described in the Cookie Policy.

4. How we use data and the legal bases

• Creating and managing the account: account data and technical data; legal basis – performance of the contract.
• Calculating goals and personalising the service: profile, nutrition and activity; legal basis – performance of the contract and explicit consent for health data.
• AI photo analysis: the photo and the necessary instructions; legal basis – performance of the contract and explicit consent where health data is involved.
• Processing the subscription: transaction and billing data; legal basis – performance of the contract and legal obligations.
• Security, fraud prevention and troubleshooting: technical data and logs; legal basis – legitimate interest in protecting the service and its users.
• Operational communications: email and account information; legal basis – performance of the contract.
• Marketing, if enabled: email and preferences; legal basis – consent, where required by law.
• Compliance with legal obligations: account data, transactions and documents; legal basis – legal obligation.

5. Artificial intelligence analysis

For the food and calorie estimation feature, the photo and the information needed for the request may be sent to OpenAI, an artificial intelligence service provider. OpenAI processes this data to generate the requested result. There may be transfers or access from outside the European Economic Area, protected by the applicable legal mechanisms, including standard contractual clauses, where appropriate.

AI-generated results are estimates and may be incomplete or inaccurate. Maneos does not, based solely on this analysis, make decisions that produce legal effects concerning you or similarly significantly affect you. Do not use the result as a diagnosis or medical advice.

6. Recipients and processors

We may share data, strictly to the extent necessary, with:

• OpenAI, to process AI analysis requests;
• Stripe and its affiliates, for payments, subscriptions, fraud prevention and financial obligations;
• contracted providers of hosting, databases, email, notifications, maintenance, security and support;
• professional advisers, auditors and public authorities, where required or permitted by law;
• a buyer or successor, in the event of a reorganisation, merger or sale, in compliance with the law.

Providers that process data on our behalf are contractually required to use it only in accordance with our instructions and to apply appropriate security measures.

7. International transfers

Some providers may process data outside Romania or the European Economic Area. In such cases we rely, as appropriate, on an adequacy decision, the standard contractual clauses approved by the European Commission and supplementary measures. You can request information about the relevant safeguards at help@maneos.io.

8. Retention period

• Account, profile and diary data and photos: for as long as the account exists and, as a rule, up to 30 days after the account is deleted, to complete removal from active systems; backups are overwritten according to the applicable technical cycle.
• Transaction data and financial and accounting records: for the period required by tax and accounting legislation.
• Security and troubleshooting logs: only for as long as necessary for security, incident investigation and the defence of legal rights.
• Rights requests and proof of consent: for as long as necessary to demonstrate compliance and resolve any disputes.

We may retain anonymised data, which no longer allows you to be identified, for statistics and service improvement.

9. Data security

We apply technical and organisational measures proportionate to the risks, such as access control, authentication, protection of communications, incident monitoring, limiting staff access and backups. No system can guarantee absolute security. If a security breach occurs, we will act and make the notifications required by law.

10. Your rights

Under the GDPR, you have the right to information, access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent. You also have the right not to be subject to a decision based solely on automated processing where it produces legal or similarly significant effects.

You can send a request to help@maneos.io. We may ask for reasonable information to verify your identity. As a rule, we respond within one month, a period that may be extended in the cases permitted by law.

You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) or with the competent authority in the EU Member State where you live or work.

11. Account deletion

You can request deletion of your account through the feature available in the app or by email at help@maneos.io. Deleting your account does not automatically cancel a recurring subscription; the subscription must be cancelled separately according to the payment instructions. Some data will be retained where there is a legal obligation or a legitimate reason provided by law.

12. Changes to this policy

We may update this Policy to reflect changes to the service, providers or the law. We will display the date of the new version and, for significant changes, we will provide appropriate notice before they take effect.

13. Contact

• Privacy: help@maneos.io
• Support: help@maneos.io
• Controller: MORARI GLOBAL SRL, Str. Azaleei nr. 5, bl. 30, sc. A, et. 2, ap. 10, sat Tomești, comuna Tomești, Iași County, postal code 707515, Romania.