Privacy policy

Last updated: 8 October 2026

In short

• Your data is processed only by appwickler, the developer of Ovaluma. No third parties are involved: no ad networks, no analytics providers, no external AI services.
• The AI that evaluates your meals and trainings runs on appwickler's own computers. Your messages and photos are not sent to AI providers such as OpenAI, Google or Anthropic.
• The website counts visits with Matomo, which appwickler runs on its own server – without cookies and without third-party services. The app contains no analytics.
• We don't sell your data or pass it on.

Controller

appwickler
[Anschrift / postal address]
Email: [E-Mail]

What data we process and why

Your account

Email address and password (stored only encrypted), so you can log in. Legal basis: Art. 6(1)(b) GDPR (contract).

Your answers from the onboarding

Goals, sex, year of birth, height, weight and target weight, everyday activity, fitness level, training days, duration and places, diet, eating habits, allergies, health limitations and notes, sleep, stress and mood. Ovaluma uses them to tailor nutrition and training advice to you and to calculate your daily targets.

Some of these answers are health data. We process them only with the explicit consent you give during the onboarding (Art. 9(2)(a) and Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future, e.g. by email to [E-Mail].

What you record in the app

Meals with their nutrition values, trainings, weight and well-being. They are stored as your history and shown to you in the app. Legal basis: Art. 6(1)(b) GDPR and, as far as they are health data, your consent (Art. 9(2)(a) GDPR).

Your conversations with the AI

Your messages, photos of your meals, the AI's answers and your device's language setting (so the AI answers in your language). To make its answers fit you, the AI also gets your profile, your daily targets and your recent history.

The AI can remember things you tell it, e.g. "doesn't eat fish". You see these notes in the app under "AI profile" and can delete them there at any time.

Photos are stored protected: only you and appwickler's AI can access them. Legal basis as above (Art. 6(1)(b) and Art. 9(2)(a) GDPR).

On your device

The app stores only your login on your device and, until you create an account, your answers from the onboarding.

Server logs

Every access to the app server and the website logs technical data (IP address, time, requested address, browser or app version) to detect errors and abuse. It is deleted after 5 days. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).

Website

The website sets no cookies and loads no content from other providers (e.g. fonts or maps).

To see how the website is used, it counts visits with Matomo, a web analytics software thatappwickler runs on its own server (matomo.caprover.appwickler.com); no data goes to third parties. Matomo records the pages you visit, the time, the page you came from, your browser, operating system, screen size and language, and your IP address, which it stores only shortened, so that it can't be linked to you. Without cookies, Matomo can't recognize you on a later visit. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the website). If you don't want this, turn on "Do Not Track" in your browser: Matomo then doesn't record your visits.

Where your data is stored

Your data is stored on a server of appwickler rented from Hetzner Online GmbH (Gunzenhausen, Germany) in Germany. Hetzner only provides the server, acts on our instructions (data processing under Art. 28 GDPR) and does not use your data for its own purposes. The AI reads the data it needs for an answer from this server and writes only its answer back.

For nutrition values, Ovaluma uses its own copy of the Open Food Facts database. None of your data is sent to Open Food Facts.

How long we keep your data

As long as your account exists. When you have your account deleted, we delete all its data: profile, history, conversations with the AI, photos and notes. Server logs are deleted after 5 days.

Your rights

You have the right to

• access your data (Art. 15 GDPR),
• rectification (Art. 16 GDPR) and erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on legitimate interests (Art. 21 GDPR),
• withdraw your consent with effect for the future (Art. 7(3) GDPR).

Just write to [E-Mail]. You can also lodge a complaint with a data protection supervisory authority, e.g. the one where you live.

Age

Ovaluma is for people aged 16 and over.

Changes

When Ovaluma changes, we update this privacy policy. You always find the current version here and in the app's menu.