1. Scope
This policy applies when you create or use a SPED account, sign in with Google, upload meal images, view calorie and progress information, book appointments, use subscriptions or Extra Meals, submit or complete payments, or otherwise interact with SPED services.
SPED includes accounts that may be self-managed or managed by an assigned doctor, retail provider, or authorized SPED administrator. Access to information depends on the account type and the functions required to provide the service.
2. Information we collect
Account and contact information
- Name, username, email address, phone number, account role, status, and authentication information.
- Google account identifier, profile name, email address, profile image URL, and connection date when you choose Google sign-in.
Health, nutrition, and progress information
- Date of birth, age, gender selection, height, weight, health goal, daily calorie target, BMI, and related progress records when provided or recorded.
- Meal images, meal dates, food descriptions, estimated calories, AI confidence information, scan attempts, and meal history.
Appointments and provider information
- Doctor, clinic or location selection, appointment date and time, notes, appointment status, cancellation information, and consultation fee information.
Subscription and payment information
- Subscription plan, billing period, payment status, transaction or payment reference, payer/sender reference, payment proof where applicable, amount, currency, and payment processing responses.
- We do not need to store your bKash PIN, OTP, or full payment-account credentials in SPED.
Device and technical information
- Device fingerprint or registered-device identifier used for account access and security controls.
- Session, request, error, audit, and security information that may include timestamps and technical network information generated by the service.
3. How we use information
We use information only as reasonably necessary to operate and protect SPED, including to:
- Create, authenticate, maintain, and secure user accounts.
- Estimate calories from uploaded meal images and maintain meal history.
- Calculate and display calorie totals, weight trends, BMI, and progress information.
- Apply scan limits, free-trial limits, subscriptions, Extra Meal allowances, and billing rules.
- Book, manage, pay for, and record appointments with participating doctors.
- Process and verify subscription, Extra Meal, appointment, and other supported payments.
- Allow authorized doctors, retail providers, and administrators to manage accounts and services they are responsible for.
- Send service-related notifications and maintain operational, security, and audit records.
- Diagnose errors, prevent misuse, enforce access controls, and improve reliability.
4. AI meal analysis
When you submit a food image for calorie analysis, SPED sends the image to the Google Gemini generative AI service so it can identify visible foods and estimate calories. The resulting food description, calorie estimate, confidence value, and service response may be stored with your meal record.
AI-generated calorie estimates are approximate and may be inaccurate. SPED is not a substitute for professional medical, nutritional, or emergency advice. If you require medical diet guidance, use a qualified healthcare professional.
5. When information is shared
SPED may disclose limited information in these circumstances:
- Google: for Google sign-in and Google Gemini meal-image analysis when you use those functions.
- Payment providers: including bKash and configured payment channels, to initiate, verify, reconcile, or support a payment.
- Your assigned provider: a doctor or retail provider may access information for users or patients assigned to their account where needed to provide the SPED service.
- Authorized SPED administrators: for account administration, subscriptions, billing, service support, security, and system operations.
- Infrastructure providers: hosting, email, storage, and other technical service providers may process information only as required to operate SPED.
- Legal and safety reasons: where disclosure is required by applicable law, legal process, or to protect users, the service, or others from fraud, abuse, or security threats.
Third-party services process information under their own terms and privacy practices. We aim to send only the information reasonably required for the function you request.
6. Payment information
SPED may record payment amounts, transaction IDs, payer or sender references, payment status, payment proof, and gateway responses to verify purchases and maintain billing history. For bKash checkout, sensitive authentication such as your PIN and OTP is handled within the bKash payment flow rather than being requested for storage by SPED.
Payment information is used for subscriptions, Extra Meals, appointments, refunds or reconciliation where applicable, and support or dispute handling.
7. Data retention and deletion
We retain information while your account is active and for as long as reasonably necessary to provide SPED, maintain billing and audit records, resolve disputes, enforce agreements, meet legal obligations, and protect the service. Different categories of information may have different retention periods.
Self-service account deletion is available from the SPED profile area for supported user accounts. Deleting an account removes the account record and related records that are designed to be deleted with it, subject to any information that must be retained for legitimate legal, accounting, fraud-prevention, or security purposes.
If a doctor, retail provider, or administrator created or manages your account, you may also need to contact that provider or SPED support for account-management requests that are not available directly in your profile.
8. Security
SPED uses administrative and technical safeguards intended to protect personal information, including authenticated access, role-based access controls, password hashing, session controls, device checks, authorization rules, and server-side validation.
No internet service or storage system can guarantee absolute security. You should use a strong password, keep verification codes private, and protect access to your email, Google, and payment accounts.
9. Your privacy choices and rights
Depending on your account and applicable law, you may be able to:
- Review and update profile information available in SPED.
- Choose whether to use Google sign-in rather than password sign-in.
- Choose whether to upload a meal image for AI analysis.
- Request correction of inaccurate information.
- Delete a supported self-managed account through the profile feature.
- Ask for access, deletion, restriction, or other privacy assistance where required by applicable law.
Some information cannot be deleted immediately when retention is required for legal, accounting, fraud-prevention, dispute, or security reasons.
10. Children and managed users
SPED is a health and nutrition support service and is not designed for a child to create an independent account without appropriate authorization. Where a minor is added as a patient or managed user, the responsible parent, guardian, doctor, retail provider, or other authorized account manager should ensure that the account is used in accordance with applicable law and appropriate consent requirements.
11. Changes to this policy
We may update this Privacy Policy when SPED features, service providers, legal requirements, or data practices change. The current version will be published on this page with an updated effective date. Material changes may also be communicated through the app, website, or another appropriate channel.
12. Contact
SPED is operated by ZAMAN IT. For questions, requests, or concerns about this Privacy Policy or your personal information, use the official SPED support/contact details shown in the SPED application, website, or its Google Play Store listing.
When making a privacy request, provide enough information for us to identify the relevant account and verify that the request is authorized. Do not send passwords, PINs, or OTP codes.