Privacy policy

In short:

• Greasy Apps, a developer of mobile apps for 12+ years, currently a sole proprietorship registered in the Netherlands (KvK 97067784), is responsible for your personal data in GreaseFit.
• We store data that you want to track in the app: your foods, meals and recipes, food diary, weight and body measurements, workouts, water intake, meal plans and shopping lists. This data will always stay within GreaseFit and is not sent to analytics services. It is only processed by the providers that host and run GreaseFit for us, such as our hosting and AI provider. We only use it to improve GreaseFit after it has been anonymised or aggregated so it can no longer be linked to you.
• Photos you take in the app are sent to our servers and stored in Amsterdam. When we store a photo, we remove information stored in the photo file, such as location data. AI reads your photos to fill in product and nutrition details (see "AI-assisted processing"). We keep product photos to improve our product database. One example is that if you report a scan, we may investigate what went wrong, and will need access to the original photo and the result. We do not show your photos to other users.
• You can object to our use of your photos for the product database. Email support@greasefit.com and we will stop using your photos for this. For other uses based on our legitimate interest, you can also object; we then stop unless we have compelling reasons to continue, such as security (see "Your rights").
• Usage statistics go to our own server, not to Google. They are off by default for accounts created from this release onwards; existing accounts keep the setting they already had. You can change it at any time under Profile. Crash reports (Firebase Crashlytics) are always collected, because we need them to keep the app working.
• Your account, logs and photos are stored on DigitalOcean servers in Amsterdam, the Netherlands, and so are your usage statistics. Some data is handled outside the EU: crash reports (Google and Apple), server error reports (Sentry), sign-up notifications (Slack), website payments (Stripe) and website hosting (Vercel). The AI that reads your photos and messages may also run outside the EU. See "Data outside the EU" for how this data is protected.
• You can delete your account in the app at any time under Profile > Settings > "Delete account". We then remove your personal data as far as possible and anonymise what remains. We keep your username (your email address) for 1 year to prevent misuse, so it cannot be used for a new account during that time. Payment records are kept for up to 7 years, as the law requires.

1. Who is responsible for your data

GreaseFit is made by Greasy Apps, a sole proprietorship (eenmanszaak) registered with the Dutch Chamber of Commerce (KvK) under number 97067784. Greasy Apps is the controller of the personal data described in this policy.

This policy applies to the GreaseFit apps for Android and iOS and to the website greasefit.com. For privacy questions or requests, email support@greasefit.com.

2. What data we collect

Depending on how you use GreaseFit, we process the following data:

• Account details: your email address, first name and surname, and password, or your sign-in details if you use Google, Apple or a passkey. If you sign in with Google, we also receive the link to your Google profile picture. We record when you accepted our terms, when you last used the app and your notification settings. If you join our Android beta test, we store the email address you use for Google Play.
• Profile and body details: birth year, gender, height, current and goal weight, activity level, calorie and macro targets, and time zone.
• What you log: foods, meals and recipes (including photos you add to them), food diary entries, meal plans, shopping lists, weight, exercise, water intake and workouts (including exercises, sets, effort, notes and heart rate, if you enter them).
• Step count: if you allow it, your daily step count from Apple Health or Health Connect. We only read step count. We do not write anything to these apps.
• Photos: photos you take or select in the app, for example of a product, its packaging, a nutrition label, a meal or a recipe page. See "Product photos" below.
• What is on your photos: the details we read from them, such as the product name, brand, barcode, ingredients, nutrition values and macros.
• Personal details that happen to be visible on photos: for example people, faces, hands, reflections, documents or addresses in the background. We do not want or use this data. Please only photograph the product where you can.
• AI requests: messages you send in the AI chat, links and page text you share with the app (for example a recipe web page), the language of your app, and the results the AI returns.
• Data imports: if you import data from another app, such as a Lose It export, the file you upload and the data we read from it.
• Purchases: your subscription status and purchase references from the App Store, Google Play or Stripe. We never receive your full card details.
• Device and usage data: device model, operating system, app version, push notification tokens, how you use the app (such as screens opened and features used) and crash reports.
• Technical logs: your IP address and the details of requests that the app or website sends to our servers, including error reports.
• Messages to us: the content of emails you send to our support address.
• Website: which pages you visit and basic device details, only if you accept statistics in the cookie banner.

We do not collect advertising identifiers (such as Apple's IDFA or Google's advertising ID), we do not use advertising SDKs, and we do not use your data for advertising. We do not use your device's location.

3. Product photos

When you use a scan feature, the photos you take or select are uploaded to our servers. An AI model reads them to recognise the product and fill in details such as the name, barcode, ingredients and nutrition values. You can check and change the result before you save it.

We store your photos with your account in our file storage (DigitalOcean Spaces) in Amsterdam, the Netherlands, so you can see your scans in the app. When we store a photo, we remove information stored in the photo file, such as location data. We also use your photos and the product details you add to improve and expand the GreaseFit product database, for example to add missing products, correct nutrition values and improve how well the app recognises products and reads labels.

A photo can sometimes show more than the product, such as a hand, a face, a room or a document in the background. To protect your privacy:

• Only authorised people working for Greasy Apps, who are bound by confidentiality, can view photos. They only view a photo when needed, for example to investigate a scan you reported or to improve the product database.
• We are only interested in the product. We do not use people, faces or other personal details that happen to be visible, for any purpose.
• We never sell your photos and never use them for advertising.

Showing photos to other users

We do not show your photos to other users today. We may add this in the future, for example to show a picture of a product in the product database or in search results. If we do, we will update this policy and inform you beforehand, and you will be able to object. Before any image based on your photo is shown to other users:

• it will be focused on the product: cropped or resized, with anything that is not the product removed or blurred,
• it will be reviewed before it is shown, and
• we will not show images that still show people, faces or other personal details, and we will never show your name or account with the image.

You can object at any time to your photos being used for the product database. Email support@greasefit.com and we will stop using your photos for this purpose. Product details that are not about you, such as a product's nutrition values, may stay in the product database.

4. AI-assisted processing

Some features of GreaseFit use artificial intelligence (AI): reading the photos you scan (such as a product, its label, a meal or a recipe page), reading links and page text you share with the app, and answering your messages in the AI chat. The AI suggests food, meal, product and recipe details, which you can check and change before you save them.

Our application servers are hosted by DigitalOcean in its Amsterdam (AMS3) data center in the Netherlands. When you use an AI feature, the information needed for that feature, such as your photo, the text or link you entered and relevant app context, is sent from our servers to DigitalOcean Serverless Inference, where it is processed by an AI model running on DigitalOcean infrastructure.

According to DigitalOcean, the inputs and outputs of its inference service are not stored by DigitalOcean as part of that service, are not used by DigitalOcean to train, retrain or fine-tune AI models, and, for models hosted by DigitalOcean, are not shared with the company that created the model for training.

DigitalOcean Serverless Inference is a separate cloud service from our servers in Amsterdam. We do not rely on a guarantee that AI processing takes place only in the Netherlands or the European Economic Area (EEA), so it may involve DigitalOcean infrastructure or subprocessors outside the EEA. Where personal data is transferred outside the EEA, we rely on our Data Processing Agreement with DigitalOcean and on the EU-US Data Privacy Framework and/or Standard Contractual Clauses, as described under "Data outside the EU".

We only send information to the AI service when it is needed for the AI feature you use, and we aim to keep the personal data in AI requests to a minimum. What we store from your AI requests and results is described under "How long we keep your data".

Our security systems may also automatically block traffic that looks abusive. We do not make decisions based solely on automated processing, including AI, that have legal effects on you or affect you in a similarly significant way.

5. Why we use your data and our legal basis

We only use personal data when the GDPR gives us a legal basis. For each purpose:

• Providing the app and your account: creating your account, signing you in, storing and syncing your logs, calculating your targets and showing your progress. Legal basis: performing our contract with you (Article 6(1)(b) GDPR). For health data, also your explicit consent (see "Health data").
• Scan and AI features: reading your photos, text and links with AI to fill in food, meal and recipe details, and answering your AI chat messages. Legal basis: performing our contract with you.
• Improving and expanding the product database with your photos and the product details you add, including improving how well the app recognises products and reads labels. Only authorised people working for us can view the photos. Legal basis: our legitimate interest in an accurate and complete product database for all users (Article 6(1)(f) GDPR).
• Improving GreaseFit with the other content you enter, such as your food diary, weight, workouts, recipes, notes, AI chats and imports. We only use this content for improvement after it has been anonymised or aggregated so it can no longer be linked to you. We never use health data in identifiable form to improve GreaseFit. Legal basis: our legitimate interest in improving GreaseFit for all users, for anonymising or aggregating the data (Article 6(1)(f) GDPR). Once anonymised, the data is no longer personal data.
• Showing photos to other users: we do not do this today. If we start, we will update this policy with the purpose and legal basis and inform you beforehand.
• Usage statistics on our own server, to understand which features are used and improve the app. Legal basis: your consent (Article 6(1)(a) GDPR), through the "Allow analytics" option. You can withdraw it at any time under Profile.
• Crash reports and error monitoring, to find and fix problems and to tell bot traffic apart from real users. Legal basis: our legitimate interest in a stable, working and secure app (Article 6(1)(f) GDPR). Crash reports from the app cannot be switched off, because they are needed to keep the app working; they contain only technical details and are not linked to your account. Server error reports can include your IP address and request details.
• Security and abuse prevention: server logs, rate limiting, blocking abusive traffic, and keeping the username of deleted accounts so they cannot be used to create new accounts. Legal basis: our legitimate interest in keeping GreaseFit and your data secure and preventing misuse.
• Subscriptions and payments: processing and verifying your subscription. Legal basis: performing our contract with you, and our legal obligation to keep financial records (Article 6(1)(c) GDPR).
• Account emails and notifications: for example verifying your email address, resetting your password, telling you a scan is ready and reminders you switched on. Legal basis: performing our contract with you. We may also send all users occasional notifications about news and updates to GreaseFit. Legal basis: our legitimate interest in keeping you informed about the app. You can turn off notifications for GreaseFit in your device settings.
• Importing your data from another app, and keeping the uploaded file for 90 days to fix import problems. Legal basis: performing our contract with you and, for health data, your explicit consent.
• Answering your questions and handling your privacy requests. Legal basis: performing our contract with you, and our legal obligation to respond to privacy requests.
• Internal notifications to our team about new sign-ups and failed imports, to follow growth and spot abuse. These notifications do not identify you: a sign-up notification only shows the platform you signed up on. Legal basis: our legitimate interest.
• Website statistics with Vercel Analytics, only after you accept them in the cookie banner. Legal basis: your consent.
• Complying with the law, such as tax rules and lawful requests from authorities. Legal basis: legal obligation.

Where we rely on legitimate interest, we have weighed our interest against your privacy. For product photos, our interest is a better product database for everyone, and the photos are mostly of packaging rather than people. We limit the impact on you with strictly limited access, removing information stored in the photo file such as location data, not using people or personal details that happen to be visible, not showing your photos to other users, and your right to object at any time. For other content, we limit the impact by only using it for improvement after it has been anonymised or aggregated. You can ask us for more information about this assessment.

6. Health data

Some data in GreaseFit says something about your health, such as your weight, body measurements, what you eat, your step count and your workouts. The GDPR treats this as a special category of personal data. We only process it with your explicit consent, which you give by accepting this privacy policy when you create your account.

You can withdraw this consent at any time by deleting your account. For step counts, you can also remove access in Apple Health or Health Connect. Withdrawing consent does not affect processing that took place before. Without this data, the tracking features of GreaseFit cannot work.

We never use health data for advertising, and we never use it in identifiable form to improve GreaseFit.

7. Usage statistics and crash reports

If usage statistics are on, the app sends usage events to our own server in Amsterdam, where they are stored in our own database. These events show which screens and features you use, how long you spend on a screen, and your subscription type. When you search, the app records that a search happened and how many results came back (result_count); it does not send what you typed. They do not include your weight, height, birth year, activity level, gender or food diary.

These events are linked to a random account identifier and an app installation identifier, not to your name, email address or other contact details. We can link them to your account, so they are pseudonymous rather than anonymous, and we treat them as personal data. They are no longer sent to Google: usage statistics now go only to our own servers and are not shared with an analytics provider.

A batch of events carries no location of its own. When a batch reaches our server we look up the country and the region from the IP address it arrived on, store those two values alongside the events, and discard the IP address. The result is never a city and never coordinates.

IP Geolocation by DB-IP (https://db-ip.com). That lookup uses the DB-IP Lite database under the Creative Commons Attribution 4.0 International licence.

Raw usage events are kept for 90 days. After that only aggregated totals remain, and those are not linked to your account or your installation.

For accounts created from this release onwards, usage statistics are off unless you switch them on. If you already had an account, whatever you chose before still applies: if usage statistics were on for you, they stay on until you switch them off. You can change this at any time under Profile, and when they are off the app sends no usage events.

Crash reports go to Firebase Crashlytics (Google) so we can find and fix problems. A crash report contains technical details such as the device model, operating system, app version and what the app was doing when it crashed. It is not linked to your account, name or email address. Crash reports are always collected, also when usage statistics are switched off, because they are needed to keep the app stable and working.

If you have chosen in your device settings to share analytics with app developers, Apple (on iPhone) or Google Play (on Android) may also share crash reports and usage data with us. You control this in your device settings.

8. Who we share your data with

We do not sell or rent your personal data. We share it only with service providers that help us run GreaseFit. They process it on our instructions, under a data processing agreement, and may not use it for their own purposes:

Some companies receive data as independent controllers, under their own privacy policies:

• Apple and Google, when you sign in with Apple or Google, buy a subscription through the App Store or Google Play, or connect Apple Health or Health Connect.
• Open Food Facts and USDA FoodData Central: we look up search terms and barcodes in these public food databases. We only send the search term or barcode, never who you are.

We may also disclose data when the law requires it, for example because of a court order, or to protect our rights. If GreaseFit is sold or merged, your data may pass to the new owner, who must respect this policy. We will tell you before that happens.

9. Data outside the EU

Your account, logs and photos are stored on DigitalOcean servers in Amsterdam, the Netherlands. The following data may be handled outside the European Economic Area (EEA), mainly in the United States: usage statistics, crash reports and push notification tokens (Google Firebase and Apple), server error reports with your IP address (Sentry), sign-up notifications that only show the platform you signed up on (Slack), payments on our website (Stripe), website hosting and statistics (Vercel), and the photos, messages and links read by our AI models (DigitalOcean). DigitalOcean and Mailgun are US companies, even though DigitalOcean stores our data in Amsterdam and Mailgun handles our emails on its EU servers.

When personal data is transferred outside the EEA, we make sure it stays protected. Either the provider is certified under the EU-US Data Privacy Framework, for which the European Commission has decided that it offers an adequate level of protection, or we use the Standard Contractual Clauses approved by the European Commission, with extra safeguards where needed. You can ask for a copy of these safeguards at support@greasefit.com.

10. How long we keep your data

We keep personal data only as long as we need it:

Anonymised or aggregated data, such as AI usage totals or anonymised content used to improve GreaseFit, may be kept longer because it can no longer be linked to you and is no longer personal data.

11. Your rights

Under the GDPR you have these rights:

• Access: ask for a copy of the personal data we hold about you.
• Rectification: have incorrect data corrected. You can change most details yourself in the app.
• Erasure: have your data deleted. You can delete your account yourself in the app, or ask us by email. Data that cannot be removed completely is anonymised, and your username is kept to prevent misuse (see "Deleting your account").
• Restriction: ask us to temporarily limit how we use your data, for example while we look into a complaint.
• Data portability: receive the data you gave us in a structured, commonly used, machine-readable format, or have it sent to another service where this is technically possible.
• Objection: object to any use of your data based on our legitimate interest, including using your photos for the product database. We will then stop, unless we have compelling reasons that outweigh your interests. For the use of your photos, we will always stop.
• Withdraw consent: withdraw any consent at any time, for example by switching off usage statistics under Profile, turning off notifications, or removing access in Apple Health or Health Connect. This does not affect what we did before you withdrew it.

To use your rights, email support@greasefit.com from the email address linked to your account. If you write from another address, we may ask you to confirm that the account is yours. Using your rights is free. We respond within one month. For complex or many requests we may take up to two more months, and we will tell you why within the first month.

If you are unhappy with how we handle your data, please contact us first so we can try to solve it. You also have the right to complain to a data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). If you live in another EU country, you can also go to the authority in that country.

12. Deleting your account

You can delete your account at any time in the app under Profile > Settings > "Delete account". You do not need to contact us. Deleting your account closes it permanently and cannot be undone.

When you delete your account, we remove your personal data from our systems as far as possible. We immediately remove your name, profile picture link and sign-in details, and sign you out on all devices. Some data cannot be removed completely, because important processes in our systems depend on it, such as your logs, scan photos and AI chats. We anonymise this data: it is no longer linked to your name or other contact details, so it cannot be traced back to you as a person.

Your username, which is the email address linked to your account, is kept for 1 year after you delete your account. We keep it to prevent misuse, such as repeatedly creating new accounts. This means you cannot create a new account with the same username during that year. We only use your username for this purpose and delete it after 1 year.

We are legally required to keep certain data, such as payment and invoice records, for up to 7 years for the Dutch tax authorities. Access to these records is limited to what is needed for that purpose.

Deleting your account does not cancel a subscription. Cancel any active subscription first in the App Store, in Google Play or on your account page on greasefit.com.

You can also ask us to delete your account by emailing support@greasefit.com. To protect your account, we will only delete it after you confirm the request from the email address linked to your account. We then delete your account in the same way as described above. If you believe that data about you can still be traced back to you after deletion, for example because a photo or message contains personal details, let us know and we will remove it.

To request a copy of your data, email support@greasefit.com from the email address linked to your account.

13. Do you have to give us your data?

You need an email address, or an Apple or Google sign-in, to create an account. Without it we cannot provide the service. Profile and body details are needed to calculate your targets, but you can skip them during onboarding. Everything else is optional: photos, AI features, step counts, notifications, usage statistics and data imports. If you do not provide optional data, the related feature will not work, but the rest of the app will.

14. Security

We take the security of your data seriously. All connections between the app, the website and our servers are encrypted with HTTPS (TLS). Passwords are stored only as secure hashes. Access to personal data, including photos, is limited to authorised people working for Greasy Apps who need it for their work and are bound by confidentiality. We monitor our systems for errors and abuse. No system is completely secure. If a data breach is likely to put your rights at risk, we will inform you and the Autoriteit Persoonsgegevens as the law requires.

15. Our website and cookies

Our website uses a few cookies and similar browser storage that it needs to work: to keep you signed in, to protect forms against misuse, to remember your language for one year, and to remember your cookie choice. These do not need your consent.

We only collect website statistics with Vercel Analytics if you click "Accept" in the cookie banner. You can change your choice at any time with the cookie preferences button at the bottom of every page. When you sign in with Google or Apple, or pay with Stripe, their scripts load on the page and may set their own cookies under their own privacy policies.

16. Children’s privacy

GreaseFit is not intended for anyone under 16. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has given us personal data, email support@greasefit.com and we will delete it.

17. Changes to this policy

We may update this policy when GreaseFit or the law changes. The date at the top shows when it last changed. If we make important changes, such as using your data for a new purpose, we will tell you in the app or by email before the change takes effect, and ask for your consent where the law requires it.

18. Contact

For questions about this policy or your personal data, email support@greasefit.com. Our registered business details are available from the Dutch Chamber of Commerce (KvK) under number 97067784.