Qoot

🇬🇧 Privacy Policy

Privacy Policy

Last updated: June 6, 2026

1. Who we are

This privacy policy explains how Serenity Media (a French SASU registered under SIREN number 999 352 842, with its registered office at 8 bis Hameau de Girou, 09300 Villeneuve-d'Olmes, Ariège, France) collects, uses and protects your personal data in connection with:

  • the getqoot.com website (including the waitlist sign-up); and
  • the Qoot mobile application (halal nutrition tracking).

Serenity Media acts as the data controller within the meaning of the General Data Protection Regulation (GDPR).

Contact: for any question about your data, email us at hello@getqoot.com.

2. Data we collect

2.1 On the getqoot.com website (waitlist)

DataPurpose
Email addressTo notify you of Qoot's launch and send product updates
Display language / regionTo tailor our communications to your language
Sign-up dateTo manage the waitlist

2.2 In the Qoot app

CategoryData involved
AccountEmail address, account identifier
ProfileGoals, dietary preferences, units (metric/imperial)
Nutrition and health dataLogged meals, nutritional values, weight and weight history, hydration
Meal photosImages you capture or upload for food analysis
LocationApproximate location or city, used solely to calculate prayer times
SubscriptionSubscription status and purchase history (via the app stores and RevenueCat)
Technical dataUsage and diagnostic data needed for the app to function

Health data. Some data (weight, nutrition tracking) may constitute health-related data. We process it only to provide the tracking service you request, on the basis of your explicit consent, and never use it for other purposes without your agreement.

3. Why we process your data (legal bases)

  • Providing the service you request (nutrition tracking, meal analysis, prayer times) — legal basis: performance of a contract.
  • Waitlist and product communications — legal basis: your consent, which you may withdraw at any time.
  • Subscription management — legal basis: performance of a contract.
  • Service improvement and security — legal basis: legitimate interest.
  • Processing of health data — legal basis: explicit consent.

4. AI-powered meal photo analysis

When you use the meal analysis feature, the photo you provide is sent to our artificial intelligence provider (Anthropic, provider of the Claude model) in order to identify the food and estimate its nutritional values and halal status. This transmission is strictly limited to the requested analysis. We never publish your photos and never use them for advertising purposes. This automated analysis produces no legal effect concerning you; it is merely an indicative estimate.

5. Recipients and processors

We never sell your data. We rely on technical processors who act on our behalf and under our control:

ProviderRole
SupabaseDatabase hosting and authentication
AnthropicAI-powered meal photo analysis
RevenueCatSubscription management
Apple App Store / Google PlayPayment processing and app distribution
Aladhan APIPrayer time calculation based on your location
Open Food FactsProduct information when scanning barcodes
Website host (Lovable / hosting provider)Operation of the getqoot.com website

6. Cookies and trackers

The getqoot.com website and the app may use cookies and similar technologies:

  • Strictly necessary cookies: essential for the site to function (for example, managing your session). These do not require your consent.
  • Analytics and advertising cookies: where applicable, we use trackers provided by third-party platforms (for example Meta/Facebook, TikTok) to measure the performance of our campaigns and the effectiveness of our advertising. These trackers are only placed after your consent, collected via our cookie consent banner.

You can change your preferences or withdraw your consent at any time via the site's cookie management banner.

7. Transfers outside the European Union

Your data is hosted by Supabase in the European Union (EU-West region, Ireland). Some of our providers (notably Anthropic, RevenueCat, Apple, Google) may process data outside the European Union, including in the United States. Where this occurs, such transfers are governed by appropriate safeguards (the European Commission's Standard Contractual Clauses, adherence to the EU–U.S. Data Privacy Framework, or equivalent mechanisms).

8. Data retention

  • Waitlist email: until the app launches and you sign up, and at most 24 months after sign-up if the app has not launched, or until you unsubscribe.
  • Account and tracking data: for as long as your account is active. When you delete your account, your data is erased within 30 days, unless a legal retention obligation applies.
  • Meal photos: kept for as long as needed to display your journal, and deleted when the meal or account is deleted.
  • Billing data: retained for the period required by applicable accounting and tax obligations (generally 10 years).

9. Your rights

Under the GDPR, you have the following rights: access, rectification, erasure, restriction, objection, portability, and withdrawal of your consent at any time.

To exercise these rights, email hello@getqoot.com. You may also lodge a complaint with the CNIL (the French data protection authority, www.cnil.fr) or with your local supervisory authority.

10. Security

We implement technical and organisational measures to protect your data: encryption of communications, database access control (row-level security policies), and limiting data access to authorised persons only.

11. Minors

The app is intended for people aged at least 16. We do not knowingly collect data from people below this age. If you believe a minor has provided us with data, please contact us so we can delete it.

12. Changes

We may update this policy. In the event of a material change, we will notify you by email or within the app. The date of the last update appears at the top of this document.

13. Contact

Serenity Media — SIREN 999 352 842
8 bis Hameau de Girou, 09300 Villeneuve-d'Olmes, Ariège, France
Email: hello@getqoot.com