- We use your data only to make Piumo work for you: no ads and no selling of data.
- We process your weight, diary and other health data only with your explicit consent.
- Usage statistics, crash reports and promotional notifications start only if you accept them.
- Meal photos are deleted right after the analysis.
- You can download all your data or delete your account at any time, from the app.
1. Who is responsible
The data controller is to be completed, to be completed. For any question about your data, write to to be completed.
2. What data we process and why
If you use Piumo as a guest, without an account, your profile and diary stay on your phone and we don't receive them. We only receive the food searches and the barcodes you scan, with nothing that identifies you. With an account we process this data:
| Data | Why | Legal basis |
|---|---|---|
| Account: email, password (stored only in hashed form), your Google or Apple identifier if you sign in with them, language and time zone | Create your account, sign you in, sync your data across devices, send service emails (for example the link to set a new password) | Performance of the contract (Art. 6(1)(b) GDPR) |
| Profile and health: sex, date of birth, height, weight, activity level, goal; food diary, water, weigh-ins, physical activity, fasts, recipes | Work out your daily needs and show you your diary and progress | Your explicit consent, asked at sign-up (Art. 9(2)(a) GDPR) |
| Workouts from Health Connect or Apple Health: type, duration, calories, distance and steps of each workout | Add them to your activity diary, only if you connect the app | Your explicit consent (Art. 9(2)(a) GDPR), given when you connect and withdrawn in your phone settings |
| Meal photos (Piumo Pro) | Recognise the foods and estimate the amounts | Your explicit consent, asked before the first photo (Art. 9(2)(a) GDPR) |
| Subscription: plan, dates, transaction identifiers and status. We never see payment details, which stay with Apple or Google | Activate Piumo Pro and keep tax records | Performance of the contract and legal obligations (Art. 6(1)(b) and 6(1)(c) GDPR) |
| Usage statistics and crash reports: screens opened, features used, phone model, technical details of crashes. Never health data | Understand what to improve and fix errors | Your consent (Art. 6(1)(a) GDPR), optional |
| Notifications: device identifier for push notifications, registered when you sign in | Deliver notifications; news and offers only if you accept them. Fasting reminders are created on your phone and never go through us | Performance of the contract for the device registration; your optional consent for promotional notifications (Art. 6(1)(a) GDPR) |
| Foods you suggest: name, brand, nutrition values | Add them to the public catalogue, if we approve them, without your name | Performance of the contract (Art. 6(1)(b) GDPR) |
| Technical data: IP address, date of last access, server logs | Protect the service from abuse and attacks (for example by limiting sign-in attempts) | Legitimate interest in security (Art. 6(1)(f) GDPR) |
Consent to health data is needed to use Piumo with an account: without it we can't work out your needs or save your diary. The other consents are optional and you can change them at any time in Settings › Privacy and data. Withdrawing consent doesn't make what happened before it unlawful.
We make no automated decisions with legal effects on you. Your daily needs are an estimate that you can always change.
3. Who processes data for us
To run Piumo we rely on these providers, who process data on our behalf and only for the stated purpose:
- Amazon Web Services (Amazon Web Services EMEA SARL): servers and service emails, in the European Union.
- OpenAI: analysis of meal photos. The photo is processed in the United States; OpenAI doesn't use it to train its models and may keep it for up to 30 days for abuse monitoring.
- Google (Google Ireland Limited): Sign in with Google, Firebase Analytics and Crashlytics (only with your consent), Firebase Cloud Messaging for notifications, Google Play for purchases on Android.
- Apple (Apple Distribution International Ltd.): Sign in with Apple and the App Store for purchases on iPhone.
When you search for a product that isn't in our catalogue, our server looks it up in the public Open Food Facts database using only the search text or the barcode, with no data about you.
Some providers may process data outside the European Economic Area, in particular in the United States. In those cases the transfer is covered by the EU-US Data Privacy Framework or by the standard contractual clauses approved by the European Commission.
We don't sell your data and don't use it for advertising. We disclose it to authorities only when the law requires us to.
4. How long we keep it
- Account data and your diary are kept for as long as you have an account.
- Meal photos are deleted from our servers right after the analysis, even if it fails. The recognised foods stay in your diary only if you save them.
- Entries you delete from the diary disappear from the app at once; an empty deletion marker is kept for up to 90 days to update your other devices.
- Password reset links are valid for one hour.
- When you delete your account, your email and sign-in details are deleted at once and your health data within 30 days (usually within minutes). Only subscription records are kept, with nothing that identifies you, for the 10 years required by tax law. Foods you suggested and we approved stay in the catalogue, without your name.
- Database backups are overwritten within 30 days.
5. Your rights
You can ask us at any time to access your data, correct it, delete it, restrict its processing, receive it in a readable format (portability) and object to processing based on legitimate interest. You can do much of this yourself in the app, in Settings › Privacy and data:
- Download my data: a JSON file with everything we know about you.
- Delete account: permanent deletion. You can also do it on the web.
- The switches for statistics and promotional notifications.
For anything else, write to to be completed: we reply within one month. If you think we handle your data unfairly, you can complain to the Italian data protection authority (Garante per la protezione dei dati personali) or to the authority of the country where you live.
6. Minimum age
Piumo is meant for people aged 16 and over: the app doesn't accept later dates of birth. If we find an account of someone younger, we delete it.
7. Security
Connections are encrypted (HTTPS), passwords are stored only as Argon2id hashes and sign-in tokens are kept in the phone's secure storage. Only the people who run the service access the data, and only when needed.
8. Changes
If we change this policy we update the date at the top. If the changes are significant we tell you in the app and, where needed, ask for your consent again.