Privacy Policy

Last updated: July 8, 2025

Fueli ("the App", "we", "us") is developed by Lewin Widmer. This Privacy Policy explains what information the App collects, how it is used, and who it is shared with.

1. Information we collect

Account information

• Email address and password (if you sign up with email), handled by Firebase Authentication.
• Name and profile photo, if you sign in with Google.

Profile and nutrition information you provide

• Dietary restrictions, allergies, disliked ingredients, and favourite cuisines.
• Calorie and protein goals, main goal (e.g. build muscle), household size, cooking skill, and budget preferences.
• Meal plans generated for you, meals you swap, favourite meals, and feedback you give on meals (e.g. "loved it," "too expensive").
• Food items you manually log or scan by barcode.

Apple Health data (fully optional)

If you choose to connect Apple Health in Settings, the App reads your most recent body weight, height, active energy burned, and step count, and writes the calories, protein, carbohydrates, fat, and fiber from meals you log back into the Health app. This only happens if you explicitly enable it, and you can disconnect it at any time in iOS Settings.

Purchase information

Premium subscriptions are purchased and billed entirely through Apple's App Store. We receive confirmation of your subscription status (active, expired, etc.) from Apple — we never see your payment card details.

Usage and device information

• App events such as sign-up, app opens, meal plan generation, and meal swaps, tied to your account ID, collected via PostHog for product analytics.
• Your IP address, used briefly at sign-up to limit how many accounts can be created from the same network, as an anti-abuse measure.
• An advertising identifier, collected by Google AdMob when you watch a rewarded ad as a free-tier user.

2. How we use this information

• To generate and personalize your meal plans (your dietary preferences and goals are sent to Google's Gemini AI model to produce meal suggestions).
• To enforce free-tier and premium-tier usage limits.
• To detect and prevent abuse of free-tier limits (e.g. mass account creation).
• To show you food photos for generated meals, via the Pexels API.
• To look up nutrition information for barcode-scanned products, via the Open Food Facts public database.
• To improve the App based on aggregate usage patterns.
• To show rewarded video ads to free-tier users via Google AdMob.

3. Who we share information with

We use the following third-party services to operate the App. Each processes data under its own privacy policy:

• Google Firebase (Authentication, Firestore database, Cloud Functions, App Check) — core app infrastructure and data storage.
• Google Gemini API — receives your dietary preferences and nutrition goals (not your name, email, or account ID) to generate meal plan content.
• Google AdMob — serves rewarded ads to free-tier users and may collect advertising identifiers.
• PostHog — product analytics, receiving app-usage events tied to your Firebase account ID.
• Apple App Store / StoreKit — processes subscription payments and provides us with your entitlement status.
• Open Food Facts — a public, open nutrition database queried when you scan a barcode. No personal data is sent with these requests.
• Pexels — stock photo API used to fetch representative images for meals.
• Kickbox — checks whether your email's domain is a known disposable/temporary-email provider at sign-up. Only the domain (e.g. "example.com"), not your full email address, is sent.

We do not sell your personal information.

4. Data retention and deletion

You can permanently delete your account and associated data at any time from Settings → Delete Account. This removes your profile, meal plan data, and your authentication record. Some records (e.g. anonymized analytics events, or data Apple retains for its own transaction records) may persist independently of your account deletion, governed by those providers' own policies.

5. Your rights

Depending on where you live (including under the GDPR if you are in the EU/Switzerland), you may have the right to access, correct, delete, or export your personal data, and to object to certain processing. To exercise these rights, contact us at [email protected].

6. Children's privacy

Fueli is not directed at children under 16, and we do not knowingly collect personal information from them.

7. Security

Data is stored and transmitted using Firebase's infrastructure, which encrypts data in transit and at rest. Server-side requests are protected with Firebase App Check to help prevent abuse.

8. International data transfers

Your data may be processed on servers located outside your country of residence, including in the United States, via Google Cloud/Firebase's infrastructure.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact

Questions about this policy or your data can be sent to [email protected].