← Back to home

Privacy Policy

Last updated: March 5, 2026

Pursuant to Regulation (EU) 2016/679 (GDPR), Federico Benedetti, VAT ID 02848690414 ("Controller"), provides the following information on personal data processing.

1. Data Collected

  • Registration data: email address, first name, last name, date of birth (optional)
  • Usage data: logged meals (description, type, time), photographs, emotional states and notes
  • Technical data: authentication provider (email, Google, Apple), language and theme preferences

2. Purpose of Processing

  • Service delivery: meal logging, cloud backup, synchronization, practitioner sharing
  • Account management and authentication
  • Push notifications (meal reminders, if enabled by the user)

3. Legal Basis

  • Contract performance (Art. 6.1.b GDPR): to provide the requested service
  • Consent (Art. 6.1.a GDPR): for optional features like notifications and practitioner sharing

4. Data Storage

Data is stored on Supabase, with servers located in the European Union. Data is retained for the duration of the account and deleted upon request.

5. Data Sharing

  • Healthcare practitioner: only if the user generates and shares an access link/code. Access is read-only.
  • We do not share data with third parties for advertising or profiling purposes.
  • We do not use third-party analytics or trackers.

6. Security

Data is encrypted in transit (TLS) and at rest. Authentication uses secure protocols (OTP, OAuth 2.0).

7. User Rights

Users have the right to:

  • Access their data
  • Rectify inaccurate data
  • Delete their data
  • Export their data (PDF, Excel, JSON)
  • Withdraw consent

8. Contact

To exercise your rights or for questions: [email protected]

9. Changes

The Controller reserves the right to update this policy. Changes will be communicated through the App.

Third-party services

To provide the service we use:

  • Supabase (database, authentication, storage) — EU servers
  • RevenueCat (subscription management) — active only with subscription
  • Google Fonts (typography loading) — no personal data transmitted

We do not use analytics, tracking, or profiling services.