Privacy Policy

Who is responsible for your data

The data controller under the GDPR is Pavlo Yamchinsky. For questions about this policy or to exercise your rights, write to y.p.p@i.ua.

If you believe we process your data unlawfully, you have the right to complain to the data protection authority where you live.

What we collect

Account data: email address, password hash, display name, chosen language, time zone, your daily plans and the plan steps you mark as done.

Health data: weight and the weight entries you log, height, sex, birth year and activity level (used only for calorie calculations — the safe minimum and your personal calorie norm), the allergens you mark, your weight goal and chosen programme, your sleep and nap entries, the activities you log yourself (for example walking, running or swimming), and your onboarding health-screening answers. This is special-category data under Article 9 GDPR.

Content you create: progress photos and videos, meal photos, captions, comments, likes, reports about other people's content, the gifts you send, and the messages you send us through in-app feedback (together with the device model, operating system version, app version and language).

Technical data: push notification tokens, request timestamps, device type, your searches in the meal catalog. Product analytics is collected only after separate consent. Neither it nor the website's visit statistics ever carry record or profile identifiers.

Crash and error reports: when the app, the website or our server runs into an error, a technical report goes to Sentry — what went wrong, the app version and device details (operating system, device model, memory). We set the reports up so that cookies, sign-in tokens and account details such as your email are not attached.

Why, and on what legal basis

To provide the service — create your account, show your daily plan, store your gallery: performance of a contract (Art. 6(1)(b) GDPR).

To process health data — calculate calories and apply safety limits: your explicit consent (Art. 9(2)(a) GDPR). You can withdraw it at any time in the app, and that data is then deleted.

To send morning reminders: performance of a contract. You choose the time and frequency.

To moderate content and block abuse: our legitimate interest in a safe community (Art. 6(1)(f) GDPR).

To find and fix crashes and errors: our legitimate interest in a working, secure service (Art. 6(1)(f) GDPR).

To count anonymous website visit statistics — which pages are opened and where visitors come from: our legitimate interest in knowing whether the site is useful (Art. 6(1)(f) GDPR).

To measure product analytics: separate consent, withdrawable in settings. Without it, no event is sent.

To estimate a meal's calories from your photo: separate consent, withdrawable in settings. Without it, no photo is sent.

Who else sees it

We do not sell personal data and we do not share it with advertisers.

Service providers process data on our behalf and only on our instructions: Northflank (application hosting), Neon (database), Cloudflare R2 (storage for photos and videos), Resend (emails such as address confirmation and password reset), Expo and Firebase Cloud Messaging (push notifications), Sentry (crash and error reports), Google Cloud Vision (automated screening of uploaded photos) and Vercel (website hosting and visit statistics). In-app purchases go through a payment intermediary, and a product analytics service is used only with your consent.

On the website, we count anonymous visit statistics with Vercel Web Analytics: which pages are opened and where visitors come from. It uses no cookies and does not store your IP address, so it does not need separate consent.

If you separately turn on photo calorie estimation, your meal photo — and, if you add one, your short description of the dish — is sent to Anthropic (USA) solely for that estimate. We do not store the result; you can revoke the consent anytime in the app's settings.

Other users see a gallery entry only if you choose to share it — publicly or with your buddy. Every entry is private by default.

Every photo you add to the gallery is checked automatically by Google Cloud Vision for unsafe content; the image is sent only for that check. A photo the check finds explicit or violent is visible only to you. A photo that may be sensitive is shown to other people blurred, with a warning, and they can tap to reveal it; you always see your own photos as they are. Videos are not checked automatically yet, so only you see them.

Any user can report content or block another user. Reported content and photos flagged by the automated check may be reviewed by our moderators, solely for moderation.

If you accept an invitation from a coach, they see only the data you grant them access to. You can change or revoke that access at any time.

How long we keep it

Account data: for as long as the account exists.

Consent records: after withdrawal we keep the fact and its date, as evidence that processing was lawful.

When you delete your account, we immediately anonymise your email, name and password and delete your health data (weight, height, sex, birth year, activity level, allergens, your weight, sleep and activity entries, and your screening answers), your settings, push notification tokens, comments, likes and feedback, your gallery photos and videos, your meal photos, your daily plans and their history, streak badges, your block list and, once a moderator has reviewed them, the reports you filed. We keep the consent record as described above, and financial records (the virtual-currency balance and ledger, in-app purchase and subscription records) for accounting and store refund or dispute handling; they hold no name or email and are linked only to the anonymised account and the app store's transaction reference. Anonymising frees your address for signing up again.

Your rights

You have the right to access your data, correct it, delete it, restrict or object to processing, and receive a copy in a machine-readable format.

Account deletion is available directly in the app: Settings → "Data & consents" → "Delete account". It is immediate and irreversible.

For anything else, write to y.p.p@i.ua. We answer within one month.

Children

Shchodenno is for people aged 16 and over. At sign-up you confirm you meet that age. We do not collect your full date of birth; if you enter your birth year, we use it only to calculate your personal calorie norm. If we learn an account belongs to someone younger, we delete it.

Transfers outside the EEA

Some providers may process data outside the European Economic Area. Where they do, the transfer relies on the European Commission's standard contractual clauses or an adequacy decision.

Changes to this policy

If we change this policy materially, we will say so in the app before the change takes effect. The date at the top always reflects the current version.