Privacy policy

The Food Formula respects your privacy. This privacy policy explains which personal data we process when you use our app and website, why we do that and what rights you have.

Which data we process

• Account data: name, email address and password, stored encrypted.
• Profile: gender, goal, target weight, country and your daily step in the programme.
• Meal and progress data: meals you enter, scan or copy, favourites, your own recipes and results.
• Photos you provide yourself: meal photos, barcodes, photos of recipes and photos of your fridge or cupboard.
• Technical data: device type, language and error reports to improve the app.

Why we use this data

• To keep track of your account, progress and food formula.
• To offer AI features: plate recognition, barcode scanning, recipe scanning and pantry tips from your fridge or cupboard photos.
• To keep the app safe, stable and personal.

Legal basis (GDPR)

• Performance of the contract: to provide your account and the features of The Food Formula.
• Consent: for optional features such as the camera (plate and barcode scanner), push notifications and Project 1000 questionnaires. You can withdraw consent at any time.
• Legitimate interest: to keep the app secure, prevent abuse and improve the service.
• Legal obligation: e.g. for administrative and tax retention duties.

Permissions on your device

• Camera: only active when you scan a meal, barcode, recipe or your pantry. Images are processed to recognise food and are not stored separately on our servers.
• Push notifications: only if you give permission, for reminders and tips.
• Photos/files: only when you choose a photo or screenshot to upload yourself.
• You can change these permissions at any time in your phone settings.

Photos, scans and pantry tips

• Photos you take or upload (meal, barcode, recipe or up to five photos of your fridge or cupboard) are sent over an encrypted connection to our AI provider to recognise food, ingredients or nutritional values.
• We do not keep these photos on our servers; only the recognised result (for example the product, recipe or macros) is linked to your account if you save it.
• Your pantry photos are stored in reduced size locally on your own device so that follow-up tips can stay based on your stock. They only leave your device at the moment of analysis.
• The "Upload new photos" button erases the stored photos from your device. Clearing the app data or deleting the app also erases them.

Storage on your device

Besides the data in our account system, the app stores a limited amount of data locally on your device, such as your language choice, onboarding progress, notification preferences and the saved pantry photos. This data stays on your device only and is removed when you clear the app data or delete the app.

Subscriptions

Payments and trial periods are handled exclusively by the Apple App Store and Google Play. We do not receive card or payment details. Subscription status is managed through RevenueCat.

RevenueCat

RevenueCat receives an anonymized user ID and purchase data to sync your subscription between devices. They do not process card or payment details.

Third parties and sub-processors

We only share data with parties that are needed to run the app. They may not use your data for their own purposes.

• Lovable Cloud / Supabase: hosting of account, database and storage (EU).
• RevenueCat: subscription status management.
• Apple App Store & Google Play: handling of payments, trial periods and renewals.
• AI provider (Lovable AI Gateway): processing scan and text requests for plate and food recognition. Images and text are not used to train external models.
• Email provider: sending confirmation, recovery and service emails.

International transfers

Our servers are located in the EU. Some sub-processors (such as Apple, Google and AI providers) may process data outside the EEA. In that case appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) are used.

No medical advice

The Food Formula provides general nutrition and wellness information for educational purposes only. It is not intended as medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional for personal medical or dietary advice.

Data retention

• We keep personal data for as long as necessary to provide The Food Formula and to manage your account.
• If you delete your account or submit a deletion request, we will delete or anonymize your personal data within a reasonable period (in principle within 30 days), unless we are legally required to keep certain data longer.
• Anonymized data that can no longer be linked to you may be kept for statistics and product improvement.
• Payment data is not stored by The Food Formula, but processed by the Apple App Store, Google Play Store and RevenueCat according to their own retention periods and privacy policies.

Account deletion

You can delete your account at any time in the app through Settings > Delete account. This removes your profile, meal logs, favorites, recipes and other app data from our database. Any active subscription is not cancelled automatically: manage that in your Apple or Google account. You can also request deletion by email at rowena@devoedingsformule.app.

Project 1000

Data you voluntarily provide through Project 1000 questionnaires may be used in anonymized form for statistical analysis, product improvement and reporting. Personal data is never made public. Participation is voluntary and you can stop at any time by deleting your account or contacting us.

Children

The Food Formula is not intended for children under the age of 16. We do not knowingly collect data from children. If you believe we have received data from a child, please contact us so we can delete it.

Security

We take appropriate technical and organizational measures to protect your data, including password encryption, access controls (Row Level Security) and encrypted connections (HTTPS).

Your rights

• Access to the data we hold about you.
• Correction of inaccurate or incomplete data.
• Deletion of your data (right to be forgotten).
• Restriction of or objection to processing.
• Data portability: a copy of your data in a common format.
• Withdrawal of consent previously given.
• Lodging a complaint with your data protection authority (in the Netherlands: autoriteitpersoonsgegevens.nl).
• You can submit requests to rowena@devoedingsformule.app. We will respond within 30 days.

Changes

We may update this privacy policy from time to time. The most recent version is always available on this page, with the date of the last update shown below.

Contact

Data controller: Rowena Isabella Wehnes · rowena@devoedingsformule.app

This privacy policy applies to the Children's Food Formula. Rowena Isabella Wehnes is the data controller, reachable at rowena@devoedingsformule.app. It explains the data processed by the app, its purposes and the rights of parents and children.

Data we process

• Account information: name, email address and authentication data. Passwords are securely handled by the authentication service and are not available to us as readable passwords.
• Child profiles: the entered name, age, gender, country and link to the parent's account.
• Nutrition and progress: meals, nutritional values, scan results and corrections, recipes, favourites, shopping items, missions, challenges, stickers and rewards.
• Movement and avatar: movement plans, activities, minutes, chosen avatar appearance, equipped items and stored avatar images.
• Friends and referrals: invitation codes, friend requests, connected children, shared recipes, gifts, trade offers and referral credits. Email invitations also involve the entered recipient address.
• Payments and communication: amounts, payment statuses, payment and subscription identifiers, service messages, feedback and email delivery records. We do not store full card details or banking login credentials.
• Technical information: language and device settings, necessary session data and error reports for operating and securing the service.

Purposes and legal bases

• Necessary account and subscription data is processed to perform the agreement with the parent or guardian and provide selected features.
• We may rely on legitimate interests for security, investigating errors and preventing misuse, taking the privacy interests of children and parents into account.
• Data required for administrative and tax duties is processed to meet legal obligations.
• You choose optional features. Device camera permission is not GDPR consent to all subsequent processing. Where legally required, including any explicit consent for health data, consent must be obtained separately and validly. You can withdraw consent through rowena@devoedingsformule.app without affecting earlier lawful processing.

Children and guidance

A parent or authorised guardian creates and manages the account. Children may use the app together with that parent. Meal and movement data can reveal health information and deserves extra protection. Enter only necessary data you are authorised to provide. Examples shown before a child profile exists are not real child data and are not stored as personal achievements.

Friends and sharing between accounts

Child data is not public. When using the friends feature, connected families may see the connected child's name, age and gender and intentionally shared content such as recipes, gifts and trade offers. Meal diaries are not published as public profiles. Email invitations are sent to the address you enter. Share invitations and content only with appropriate recipients and avoid unnecessary personal information.

Camera, photos and AI

• The camera or photo picker is used when you take or choose a photo. Device permissions can be changed in your device settings.
• For a scan, the chosen photo and relevant text are sent to an AI service to recognise food or a recipe. Scan results and corrections may be saved in your account. Avoid photos containing faces, names or unnecessary personal information.
• AI may also provide food suggestions and avatar editing. Depending on the feature, relevant meal information, age, language, corrections or a cartoon image and selected avatar items are included. Generated avatar images are stored in restricted storage.
• AI results are estimates, not medical advice. These results are not used alone for decisions with legal or similarly significant effects. AI providers' retention and further processing are also governed by their applicable agreements and terms; this policy does not guarantee immediate removal of every image by every party.

Service providers and payments

• Lovable Cloud provides the app's hosting, account service, database and storage.
• Mollie handles the online payments (such as iDEAL and Bancontact) and direct debits and may receive account, customer and payment information for this purpose. Mollie also processes certain data for its own legal obligations; consult Mollie's privacy policy.
• AI requests pass through Lovable AI Gateway to the model provider used for the feature, including Google for recognition and OpenAI for avatar editing. Necessary photos, text or cartoon images are passed to those services.
• The email service processes recipients and message content for confirmation, recovery, invitation and service emails.
• Service providers receive only the data needed for their task. Appropriate processing agreements are required for parties processing data on our behalf.

International processing

Depending on the service, data may be processed outside the European Economic Area. Such transfers may take place only with a valid GDPR transfer basis and suitable safeguards, such as an adequacy decision or EU Standard Contractual Clauses where needed. Contact rowena@devoedingsformule.app for information about the providers, locations and safeguards.

Storage on your device

The app uses necessary browser or device storage for your session, language, active child and display preferences. This supports the app's operation. Signing out or clearing browser data can remove local session and preference information; it does not automatically delete stored account data.

Retention and account deletion

• Account, child, meal, movement and progress data is retained while your account exists and is needed for selected features. Invitations, scan results and communication records are not retained longer than needed for their purpose or a legal obligation.
• You can start deletion through Settings > Delete account. This also stops an ongoing subscription immediately. You may alternatively request deletion at rowena@devoedingsformule.app.
• Account deletion covers your account and linked app data. Legally required administration may need to be retained longer; basic Dutch tax records generally have a seven-year retention period. Mollie's and other independent controllers' retention is subject to their own obligations.
• Removal from active systems does not necessarily mean every copy in backups or with a provider disappears immediately. Applicable retention schedules and agreements govern those copies. Recipes or emails already received by others are not automatically removed from their own copies.

Security

We apply appropriate technical and organisational measures, including secure authentication, account-level access restrictions and encrypted connections. Avatar images are held in restricted storage. No online service can guarantee absolute security.

Your rights and your child's rights

• You may request access, correction, deletion, restriction of processing and, where applicable, object to processing or request data portability.
• For a copy of your data in a commonly used digital format, or a request on behalf of your child, email rowena@devoedingsformule.app. We may verify identity and authority to protect child data.
• You may withdraw previously given consent. A feature depending on that consent may then become unavailable.
• We normally respond within one month. If a lawful extension is needed, we will explain its reason and duration within that first month.
• You can complain to the Dutch Autoriteit Persoonsgegevens at autoriteitpersoonsgegevens.nl or the competent authority in your country.

Changes and contact

We will provide appropriate information about significant changes to processing. The date below is the last substantive revision date. Data controller: Rowena Isabella Wehnes · rowena@devoedingsformule.app.