Privacy policy

This policy explains what data Veegee processes, on what legal basis, for how long, and what you can ask for. It covers the mobile app and this website (veegee.app), which do not collect the same things.

Data controller

Veegee is published by Marian Szczesniak, the controller of your data. For any question or request: contact@veegee.app.

What the app processes

• Your account: email address, first name or nickname, sign-in method (Apple, Google or a link sent by email) and account identifier. If you sign in with Apple and hide your address, we only receive the relay address provided by Apple.
  Legal basis: performance of the service you request.
• Your journey: your diet and its start date, the history of your diets and challenges, your answers to the welcome questionnaire (motivations, fears), your favourites, the recipes you have cooked, and the feedback you leave on a recipe. They are used to calculate your counters, badges and projections.
  Legal basis: performance of the service you request.
• Your dietary and health information: allergies, health conditions you choose to declare (for example an iron deficiency), cooking level and goal. They are used only to set aside recipes that don't suit you and to highlight those that help you. They are optional and can be changed at any time in your profile.
  Legal basis: your explicit consent, given by filling them in. You withdraw it by deleting them from your profile.
• Your subscription, if you take one: product purchased, start and renewal dates, status. Linked to your account identifier, never to your payment details.
  Legal basis: performance of the subscription contract.
• Usage measurement: screens opened, steps completed, recipes viewed, purchases, as well as the device model, system and app version, and an installation identifier. Never the content of your allergies or health conditions. It is used to understand what works in the app and what makes people give up.
  Legal basis: our legitimate interest in improving the app. You can object at any time by writing to contact@veegee.app.

The app shows no advertising, uses no advertising identifier and sells no data.

What this website processes

• Android beta sign-up: your email address and the sign-up date, to let you know when it opens.
  Legal basis: your consent, given by submitting the form.
  Retention: up to 12 months after the app's release on Google Play, or until you ask for deletion.
• Audience measurement, if and only if you accepted it in the banner: Google Analytics and PostHog (servers in the European Union) set cookies and a visit identifier, and record the pages viewed and the clicks to the stores. Until you accept, no measurement script is loaded and no cookie is set. This data is never matched with your email address.
  Legal basis: your consent, which you can withdraw here.
  Retention: 14 months at most.
• Link counting: when you open a link to veegee.app from a social network or a share, we count that click with PostHog (servers in the European Union), without your prior consent but without cookies, without a stored identifier and without a profile: only the link's channel, the type of device and the site you came from are sent. Two clicks by the same person cannot be linked together.
  Legal basis: our legitimate interest in knowing which channels make Veegee known.
  Retention: 14 months at most.

Retention periods

Your account, journey and health data are kept as long as your account exists, and erased when it is deleted (see Account deletion). Usage measurement data is kept for 14 months at most. Subscription receipts are kept by Apple and Google under their own legal obligations.

Service providers

Veegee relies on a small number of providers, each for one function, and none of them is allowed to use your data for its own purposes:

• Google Firebase: sign-in, database (hosted in the European Union), hosting of this website, usage measurement.
• PostHog: usage measurement for the app and this website, hosted in the European Union.
• RevenueCat: subscription tracking.
• Apple and Google: sign-in with your Apple or Google account, and collection of subscription payments.

Transfers outside the European Union

Some Google services (sign-in, usage measurement) and RevenueCat may transfer data to the United States. These transfers rely on the EU–US Data Privacy Framework, supplemented by the European Commission's standard contractual clauses. Your Veegee database and PostHog measurement remain hosted in the European Union.

Payments

Subscriptions are collected by the App Store and Google Play. Veegee never has access to your bank details. You cancel from your phone's subscription settings: deleting your Veegee account does not cancel an active subscription.

Age

Veegee is intended for people aged 13 and over. If you are under 15, a parent's consent is required for processing based on your consent.

Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to set instructions for what happens to it after your death. When processing is based on your consent, you can withdraw it at any time, without affecting what was done before.

• Dietary and health information: can be changed or erased in your profile.
• Account and journey: Account deletion.
• Everything else, including access, portability and objecting to usage measurement: contact@veegee.app. We reply within one month.

If our answer does not satisfy you, you can lodge a complaint with the CNIL, the French data protection authority (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — cnil.fr).

Changes to this policy

Any change is published on this page with a new update date. If it concerns processing based on your consent, you will be asked for it again.