Privacy policy

Who is responsible

Michael Goldman, a private person in the Netherlands, runs Pratly and is responsible for your data (the "controller" under the GDPR).

What is kept

• Your account: name, email address, language and time zone. Your password is kept only as a secure hash that nobody can read.
• What you enter: your food diary and plans, foods, meals and preps, your profile (such as sex, date of birth, height and activity), goals and targets, weight, body measurements, body-fat estimates, cycle dates if you track them, water, fasting, your shopping list, and the photos you choose to keep.
• To keep accounts safe: sign-in sessions (with the name of the browser or app), sign-in attempts (kept for one day), request counters (stored as hashes), and a log of AI requests that records which feature was used, when and whether it worked, never what was sent.

Health data and your consent

Your diary, weight, measurements and cycle dates are health data under the GDPR (article 9). Pratly keeps them only because you explicitly agreed to it when you created your account. You can withdraw that consent at any time by deleting your account, which deletes the data.

Everything else is kept because it is needed to give you the app you signed up for (GDPR article 6(1)(b)), and the security records because keeping accounts safe is a legitimate interest (article 6(1)(f)).

Where it is kept

On one server in the Netherlands, managed by the person who runs Pratly, with nightly backups on the same machine. Your phone keeps a copy too, so the app works offline; signing out removes it.

Who else gets data, and when

• Open Food Facts, a non-profit food database: when you scan a barcode or search for a product online, the server sends it the barcode or your search words, never your name, account or diary.
• Google (Gemini) and OpenRouter: AI on the server is switched on only for a few named test accounts. For those, what is sent to an AI feature (text or a photo) goes to Google, or to OpenRouter as a backup, under their own terms; on Google's free tier these let Google use it to improve its products. Everyone else gets AI only where it runs on their own phone, and then nothing leaves the phone.
• Cloudflare: traffic between the app and the server passes through Cloudflare's network, which protects the server. Cloudflare handles it only to deliver it.
• Google sign-in: if you sign in with Google, Google tells Pratly your name, email address and Google account number, which Pratly keeps to recognise you next time. Google learns that you signed in to Pratly, and nothing from your diary.
• Apple sign-in: if you sign in with Apple, Apple tells Pratly your Apple account number, an email address (your own, or a private one that Apple forwards to you) and, the first time only, your name; Pratly keeps them to recognise you next time. Pratly also keeps a token from Apple, used only to revoke your Apple sign-in when you delete your account. Apple learns that you signed in to Pratly, and nothing from your diary.
• An email delivery service: your email address and the text of the email, to send sign-up and password-reset emails. There are no newsletters.
• Apple or Google: if you turn on notifications, their text passes through your phone's push service to reach you.
• Google, in the Android app: the barcode scanner uses Google's ML Kit, which reads codes on your phone itself. ML Kit sends Google statistics about how it runs (phone model, Android version, how fast it worked and a random number for the app's installation), never the camera picture or the code.
• Recipe websites: when you import a recipe from a web address, the server fetches that page. The site sees the server, not you.
• People you connect with: only what you choose to share, such as a food or meal you send them, or your diary and weight if you give them access. You can remove someone at any time (Me → Sharing → ⋯ → Remove): from then on they see nothing of yours and can't send you anything. “Report a problem” opens an email to us with only that person's account number, nothing else of theirs.

Nobody else: no advertisers, no data brokers, no analytics.

How long

As long as you have an account. Things you delete are erased for good within 90 days (a marker stays that long so your other devices learn of the delete). Deleting your account erases everything at once; the last copies leave the backups within 14 days.

Your rights

Under the GDPR you may see, correct, export and delete your data, limit or object to its use, and withdraw your consent. You can do much of it yourself: Me → Data & export gives you a copy of your diary, foods, meals, weights, measurements and targets, and Me → Account → Delete account deletes everything. For anything else, including a copy of the rest, write to the address below. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Security

Connections are encrypted (HTTPS) and passwords are hashed with Argon2. There are two cookies: one keeps you signed in, the other remembers your language. No tracking cookies.

Children

Pratly is not meant for anyone under 16.

Changes

When this policy changes, the new version appears here with a new date. Important changes are announced before they apply.

Contact

Questions about your data, or want to use one of your rights? Write to: