Privacy Policy

General information

The following notes give a simple overview of what happens to your personal data when you use our app or our website. Personal data is any data by which you can be personally identified. You will find detailed information in the privacy policy below.

Data collection in the app and on the website

Analysis of app usage

If you have consented, we evaluate statistically how the app is used. Without your consent, this analysis does not take place.

You will find detailed information in the section “Analysis of app usage with PostHog”.

We run the servers of our app and our website with the following provider:

Hetzner is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in providing our app and our website reliably and securely.

Data protection

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection provisions and this privacy policy.

When you use our app or our website, various items of personal data are collected. Personal data is data by which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

We point out that data transmission over the internet (for example when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Information about the controller

The controller for data processing in the app and on the website is:

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data (for example names, email addresses and the like).

Retention period

Unless a more specific retention period is stated within this privacy policy, your personal data remains with us until the purpose of the data processing no longer applies. If you assert a justified request for erasure or withdraw consent to data processing, your data will be deleted, unless we have other legally permissible grounds for storing your personal data (for example retention periods under tax or commercial law); in the latter case, deletion takes place once those grounds no longer apply.

General information on the legal bases of data processing

Where you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR, or Art. 9(2)(a) GDPR where special categories of data under Art. 9(1) GDPR are processed. Where you have consented to the storage of information on your device or to access to such information, the data processing additionally takes place on the basis of Section 25(1) TDDDG. Consent can be withdrawn at any time. Where your data is necessary for the performance of a contract or for pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. We further process your data where it is necessary for compliance with a legal obligation, on the basis of Art. 6(1)(c) GDPR. Data processing may also take place on the basis of our legitimate interest under Art. 6(1)(f) GDPR. The legal bases relevant in each individual case are set out in the following paragraphs of this privacy policy.

Recipients of personal data

In the course of our business activities we work with various external parties. This sometimes also requires the transfer of personal data to those external parties. We pass personal data on to external parties only where this is necessary for the performance of a contract, where we are legally obliged to do so (for example the transfer of data to tax authorities), where we have a legitimate interest in the transfer under Art. 6(1)(f) GDPR, or where another legal basis permits the transfer. When using processors, we pass on our users' personal data only on the basis of a valid data processing agreement.

Withdrawal of your consent to data processing

Many data processing operations are possible only with your explicit consent. You can withdraw consent you have already given at any time. The lawfulness of the data processing carried out up to the withdrawal remains unaffected by the withdrawal.

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work or the place of the alleged infringement. This right to complain exists without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place insofar as it is technically feasible.

Access, correction and erasure

Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing, and where applicable a right to the correction or erasure of that data. You can contact us at any time about this and about any further questions on the subject of personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us about this at any time. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored with us, we generally need time to verify this. For the duration of that verification, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data happened or is happening unlawfully, you can request the restriction of the data processing instead of erasure.
• If we no longer need your personal data but you need it to exercise, defend or establish legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
• If you have lodged an objection under Art. 21(1) GDPR, a balancing of your interests and ours has to be carried out. For as long as it has not been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, that data may — apart from being stored — only be processed with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of an important public interest of the European Union or of a member state.

TLS encryption

For security reasons and to protect the transmission of confidential content, such as your profile and meal data, the app and the website use TLS encryption. On the website you can recognise an encrypted connection by the browser address line starting with “https://” and by the lock symbol in the address line.

When SSL or TLS encryption is active, the data you transmit to us cannot be read by third parties.

Objection to advertising emails

The use of contact data published under the imprint obligation to send advertising and information material that has not been expressly requested is hereby objected to. The operators of these pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example by spam emails.

Cookies and local storage

The app and the website store information on your device: in cookies (small text files that your browser stores) and in the local storage of the browser or the app.

We only set cookies that are technically necessary: one cookie that keeps you signed in until you sign out, and one cookie that stores the language you chose for one year. We do not set third-party cookies for advertising or analytics.

In local storage we keep your settings, your consent choices and a copy of your data in the app, so that the app loads quickly.

The legal basis for this necessary storage is Section 25(2) no. 2 TDDDG, as it is strictly necessary for the service you requested. The related processing takes place on the basis of Art. 6(1)(b) GDPR and our legitimate interest in a functioning and secure app (Art. 6(1)(f) GDPR).

Storage that is not necessary only takes place with your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). This only concerns the analysis of app usage. You can withdraw your consent at any time in the cookie settings.

You can set your browser to refuse cookies or to delete them when it closes. Without the necessary cookies you cannot sign in on the website.

Server log files

Our server automatically stores information in server log files each time the app's interfaces or the website are accessed. These are:

• browser or app and its version (user agent)
• operating system used
• referrer URL
• requested address and response status
• time of the server request
• IP address

This data is not merged with other data sources. The server log files are deleted after 7 days.

This data is collected on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in operating the app and the website securely and without errors; the server log files have to be recorded for this purpose.

Enquiry by email or telephone

If you contact us by email or telephone, your enquiry, including all resulting personal data (name, enquiry), is stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR where your enquiry is connected with the performance of a contract or is necessary for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) where this has been requested; consent can be withdrawn at any time.

The data you send us in contact enquiries remains with us until you ask us to delete it, withdraw your consent to its storage, or the purpose of the data storage no longer applies (for example after your request has been dealt with). Mandatory statutory provisions — in particular statutory retention periods — remain unaffected.

Sending emails

We send emails about your account, such as confirming your registration or resetting your password, and replies to your enquiries through the Private Email service of Namecheap, Inc., 4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA (hereinafter Namecheap). Your email address and the content of the email are processed.

The legal basis is Art. 6(1)(b) GDPR. We have concluded a data processing agreement with Namecheap. Transfers to the USA are based on the European Commission's standard contractual clauses.

Signing in with Google or Apple

Instead of an email address and password, you can sign in with your Google or Apple account. To do this, you sign in with Google or Apple. The providers are Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 and Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork.

After you sign in, Google gives us your email address, your name, the address of your profile picture and an identifier of your Google account. Apple gives us your email address or a relay address created by Apple, your name at the first sign-in, and an identifier of your Apple account. We never receive your Google or Apple password.

The legal basis is Art. 6(1)(b) GDPR. Google and Apple are themselves responsible for their own processing; their own privacy policies apply.

Analysis of app usage with PostHog

Only if you have given your consent do we record how the app is used, for example which pages are opened and which features are used. For this, we store a random identifier in your device's local storage; we do not set cookies for this. We do not record text you type or screen recordings, and we do not track you across other apps or websites.

For each event, we store the name of the event with related details, the page opened without search parameters, the platform, language, plan, app version, a session identifier and, if you are signed in, the ID of your account.

The data is stored in our own database and with PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA (hereinafter PostHog). PostHog stores the data on servers in Frankfurt am Main. PostHog is certified under the EU-US Data Privacy Framework.

The legal basis is your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). You can withdraw your consent at any time in the cookie settings. Withdrawal does not affect the lawfulness of processing carried out before it. Events in our own database are deleted after 24 months.

We log your decision about consent (given, changed or withdrawn) with the time, the version of the privacy notice, the identifier of your browser or device (user agent), a hash of your IP address formed with a secret key and, if you are signed in, the ID of your account. This lets us prove your consent (Art. 7(1) and Art. 6(1)(c) GDPR). We keep this log for as long as your account exists and delete it three years after the account is deleted; without an account, three years after your decision.

Reproductive status (health data)

In your profile, you can state whether you have a period, or that you are pregnant or breastfeeding. If you are pregnant, you can also add your due date and your weight before pregnancy; if you are breastfeeding, your child's birth date. The app uses this information to calculate the nutrient reference values that apply to you. This information is health data within the meaning of Art. 9 GDPR.

We process this information only if you have given your explicit consent beforehand (Art. 9(2)(a) GDPR). The app asks for it the first time you choose one of these options. If you decline, the information is not stored. Declining has no other effect: every other feature stays available.

The information is stored in your profile: for signed-in users in our database, otherwise only on your device. To calculate the reference values, it is sent to our server. It stays in your profile until you change it, withdraw your consent or delete your account. We do not pass it on to third parties and never use it for analytics. The due date, weight before pregnancy and child's birth date are removed when you change the state.

You can withdraw your consent at any time in Settings; the information is then removed from your profiles. Withdrawal does not affect the lawfulness of processing carried out before it.

We log your consent and its withdrawal with the time, the version and language of the consent text, the platform, the identifier of your browser or device (user agent), a hash of your IP address formed with a secret key and the ID of your account. Without an account, nothing is logged; if you consented on this device and then sign in, we log the consent at that moment. This lets us prove your consent (Art. 7(1) GDPR). We keep this log for as long as your account exists and delete it three years after the account is deleted.

Record of your acceptance of the Terms of Service

When you first start the app, you confirm your minimum age and accept the Terms of Service. As a record, we store: the version of the Terms of Service, the confirmation of the minimum age, the language, the platform (web, iOS or Android), the time, the identifier of your browser or device (user agent) and, if you are signed in, the ID of your account. We do not store your IP address, only a hash of it formed with a secret key.

The legal basis is Art. 6(1)(b) GDPR (conclusion of the user agreement) and our legitimate interest in being able to prove your acceptance (Art. 6(1)(f) GDPR).

We keep the record for as long as your account exists. If your account is deleted, we remove the link to the account and delete the record three years later (the regular limitation period). Without an account, the record is deleted three years after your acceptance.

Photo search with Anthropic Claude and Google Gemini

In the app you can search for foods with a photo. A photo is sent only after you have taken or chosen it and confirmed it.

To recognise the foods, we send the photo to the Claude API of Anthropic, PBC, 548 Market Street, PMB 90375, San Francisco, CA 94104, USA (hereinafter Anthropic). Anthropic processes the photo as our processor under its Data Processing Addendum, which is part of our agreement with Anthropic.

Only the reduced photo and the language set in the app are sent. Your name, email address, user ID and IP address are not sent to Anthropic. We do not store the photo — not on our servers, in logs or in analytics data. Anthropic does not use the photos to train its models. Anthropic deletes the photo and its answer within 30 days; if its automated checks find a breach of its usage policy, it can keep them for up to 2 years.

To suggest a portion for each food found, we then send the names of the foods, their portion notes and the household measures we hold for them to the Gemini API of Google Cloud EMEA Limited, Velasco, Clanwilliam Place, Dublin 2 (hereinafter Google). No photo and no data about you are sent. Google processes this text as our processor under the “Data Processing Addendum for Products Where Google is a Data Processor”. Google does not use it to improve its products. Google logs requests for a limited period, solely to detect violations of its usage policies and for legally required disclosures.

Anthropic is based in the USA; the transfer of the photo rests on the EU standard contractual clauses, which are part of Anthropic's Data Processing Addendum. For Google, processing in the USA cannot be ruled out; Google LLC is certified under the EU-US Data Privacy Framework.

To apply the limit, we store how many photo searches you have left and when that last changed: for your account if you are signed in, otherwise for a random ID that the app creates on your device. This ID does not identify you and is used for nothing else. This record is deleted as soon as your photo searches are full again.

The app uses the camera only while the camera view of the photo search is open. To choose an existing photo, the app uses the operating system's photo picker. The app receives only the chosen photo and no access to your photo library.

The legal basis is Art. 6(1)(b) GDPR, as you request the feature as part of using the app. Please do not photograph people.