Privacy Policy

The short version

• Your weights, goal, height and reminders stay on your phone. We have no copy of them.
• You do not create an account. The app signs you in anonymously with a random ID so that purchases and the AI coach work.
• We use Google Firebase for usage statistics and crash reports and RevenueCat to manage subscriptions. None of them receives your weight.
• If you use the AI coach, your messages go through our server in Germany to Anthropic, which writes the answer. Our server does not store what you write.
• No ads, no advertising ID, no selling of data.

1. Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is the publisher of the app in the store you downloaded it from:

App Store (iPhone, iPad): Digital Snacks OG, Servitengasse 10/14, 1090 Vienna, Austria

Google Play (Android): Josef Wilhelm, Wolfgang-Schmälzl-Gasse 12/20, 1020 Vienna, Austria

Email for all questions: me@josefwilhelm.com

2. Data that stays on your device

Everything you enter about your body is stored only in the app's local storage on your phone and is never uploaded to us or to the services in section 3:

• weight entries with date and time
• start weight, goal weight, goal direction and pace
• height and unit settings
• reminder time (the reminder is a local notification scheduled by your phone)
• your AI coach chat history

Export and import. With Pro you can export your entries as a file. It is saved where you choose (for example the Files app or a cloud drive) and is then under your control.

Deleting. Deleting an entry removes it from the device. Uninstalling the app deletes all of this data. Phone backups (iCloud, Google) may contain a copy, depending on your phone's settings.

3. Services that receive data

Firebase Authentication (Google Ireland Ltd.): on first start the app creates a random user ID. Firebase receives this ID, your IP address and device and app version. Purpose: anonymous sign-in, so that purchases and the AI coach recognise your installation.

Firebase Analytics (Google Ireland Ltd.): usage events such as "onboarding step viewed", "paywall viewed", "purchase completed" or "weight entry added" (with a rough count such as "2–5", never the weight), whether you have Pro, an app instance ID, device model, operating system, country and language. Purpose: seeing where people get stuck and which version of a screen works better. The advertising ID is not collected.

Firebase Crashlytics and Remote Config (Google Ireland Ltd.): crash reports (error trace, device model, operating system, app version) and the app instance ID. Purpose: fixing crashes and changing settings, such as the server address, without an app update.

RevenueCat (RevenueCat, Inc., USA): your random user ID and the purchase receipts from Apple or Google (product, price, country, dates). Purpose: knowing whether you have Pro and restoring purchases.

Apple and Google process your payment under their own privacy policies. We never see your name or payment details.

4. The AI coach

When you send a message, the app sends the conversation (your messages and the coach's earlier answers) and a sign-in token to our server, hosted by Hostinger in Germany. The server checks the token, asks RevenueCat whether you have Pro, counts your messages per day (stored: random user ID, date, count) and forwards the conversation to Anthropic PBC (USA), whose Claude model writes the answer.

Our server does not store the content of your messages. Its logs hold only technical events and a shortened hash of your user ID. Anthropic processes the conversation to create the answer and does not use it to train its models (see the Anthropic privacy policy). Please do not send your name or contact details; the coach does not need them. Its answers are general information, not medical advice.

5. Legal bases and how long data is kept

• Anonymous sign-in, purchase check and AI coach: Art. 6(1)(b) GDPR (providing the app and what you bought). The random user ID is kept until you ask us to delete it; daily message counts are deleted after 7 days.
• Crash reports: Art. 6(1)(f) GDPR (our interest in an app that works). Kept for 90 days.
• Usage statistics: Art. 6(1)(f) GDPR (our interest in improving the app). Event-level data is kept for 2 months; reports only show totals.
• Purchase records: Art. 6(1)(b) and (c) GDPR. Kept as long as tax law requires (in Austria 7 years).

We do not make automated decisions about you with legal or similarly significant effects.

6. Transfers outside the EU

Google, RevenueCat and Anthropic may process data in the USA. These transfers rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the EU Standard Contractual Clauses (Art. 46 GDPR). Our own server is in Germany.

7. Your rights

You have the right to access, correction, deletion, restriction, data portability and objection, and to withdraw consent at any time. Write to me@josefwilhelm.com.

We only know a random ID, not who you are. To find your purchase data, please send the order number from your Apple or Google receipt. Without it we usually cannot link any data to you (Art. 11 GDPR). All weight data you can delete yourself by deleting the app. See also Delete your data.

You can also complain to a data protection authority, in Austria the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna.

8. Children and changes

The app is not directed at children under 16.

If the app starts using data in a new way, we update this page and the date at the top. See also the Terms of Use.