Privacy Policy

Effective {{EFFECTIVE_DATE}}

EasyKut helps you count calories and plan meals. To do that it stores data about your body and what you eat, which counts as health data under the EU General Data Protection Regulation (GDPR). This page explains what we store, why, who else handles it, and how you control it.

Who is responsible

The controller of your data is {{CONTROLLER_NAME}}, {{CONTROLLER_ADDRESS}}. Contact for anything about your data: {{CONTACT_EMAIL}}.

What we store

• Account: your email address, an optional name, your password (stored only as a hash, never readable), and the time you agreed to this policy.
• Body data and goal: sex, birth date, height, weight, goal weight, activity level, chosen pace and diet style, and a measured maintenance figure if you choose to use one.
• Logs: the foods, meals and day plans you create, and your weigh-ins.
• Technical data: your IP address, kept in server logs for up to 14 days and used to block abuse (for example too many sign-in attempts).

We do not use advertising, analytics or tracking cookies. The app keeps your sign-in session in your browser's local storage so you stay signed in; nothing else is stored in your browser.

Why, and on what legal basis

• To run your account and the app (performance of our agreement with you, GDPR Art. 6(1)(b)).
• To process your body data, weight and food logs, which are health data: your explicit consent (GDPR Art. 9(2)(a)), given when you create an account. You can withdraw it at any time by deleting your account.
• To keep the service secure (rate limiting, abuse prevention): our legitimate interest (GDPR Art. 6(1)(f)).
• To send password reset emails when you ask for one, and a security email when your account is signed in from a new device.

We do not sell your data, use it for advertising, or use it to make automated decisions about you. The calorie and macro targets EasyKut shows are estimates from standard formulas, not medical advice.

Who else handles your data

• {{HOSTING_PROVIDER}} hosts the server and its database in {{HOSTING_COUNTRY}} (EU).
• Brevo (Sendinblue SAS, France) sends password reset and security emails. It receives your email address and the email content.
• USDA FoodData Central (United States) and Open Food Facts (France) receive the text you type into food search, from our server. They receive no account or body data.

Each processor handles data only on our instructions.

How long we keep it

As long as you have an account. When you delete your account, your account and all of its data are deleted from the live database at once. Backups are made daily and kept for at most 30 days (server backups: 7 days; copies made before updates and the off-site copy at {{OFFSITE_BACKUP_LOCATION}}: 30 days), so your data is gone from every copy within 30 days. Server logs are kept for up to 14 days.

Your rights

• Access and portability: download everything as a JSON file from Body & goal → Your data.
• Rectification: edit any of your data in the app.
• Erasure and withdrawing consent: use Delete account in the app (the person icon next to Sign out). This deletes everything at once.
• Restriction and objection: write to {{CONTACT_EMAIL}}.
• Complaints: you can complain to a data protection authority, in particular the one where you live. Ours is {{SUPERVISORY_AUTHORITY}}.

Security

All traffic is encrypted (HTTPS). Every account sees only its own data; this is enforced by the server and tested automatically before every release. Passwords are stored as hashes.

Children

EasyKut is not meant for anyone under 16. Do not create an account if you are younger.

Changes

If we change this policy in a way that matters, we will tell you in the app before the change applies.