Privacy Policy

Effective 12 October 2026 · Version 2026-10-12

In short

• No account, no cloud. Your recipes, workouts, body measurements, photos and settings are stored only on your device. We never see them and have no copy.
• No tracking, no ads. No advertising cookies, no following you across visits, nothing passed on to ad networks. Only anonymous page views are counted (section 9). We do not sell personal information.
• Pebo works only on your device, without artificial intelligence and without internet. What you write to him is neither stored nor sent.
• Personal data only travels over the internet when you buy, restore a purchase, look up a barcode or write to us. What happens then is described below.

1. Controller

Cuenca Mellima Operations, sole proprietorship of Aaron Cuenca, Neunkircherstrasse 9, 8214 Gächlingen, Switzerland, email: support@vitalityhub.app

This policy follows the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. Data on your device

The app stores your content in your browser's storage (IndexedDB) and a few settings (for example light or dark look) in local storage. This is technically necessary for the app to work, including offline. This data only leaves your device if you create a backup yourself and pass the file on.

Body measurements and workouts are health-related data. They stay exclusively on your device. Protect your device with a screen lock.

3. Visiting the website and hosting

When you open vitalityhub.app, your device loads the app files from our hosting provider Lovable. This creates the usual technical log data (IP address, time, file requested, browser). It is used for secure operation and deleted after a short time. The legal basis is our legitimate interest in a secure service.

4. Purchase with Stripe

Payments are made via Stripe Managed Payments. Stripe and its service Link (reseller at checkout) process your payment details, name, email address, billing address, country and IP address, including for tax calculation and fraud prevention, and Link sends you the receipt. Link is responsible for this processing itself; its privacy policy: link.com/privacy. From Stripe we only receive the payment status, amount, email address and receipt number, never full card details.

After payment, our server confirms with Stripe that the payment was made. About once a week the app checks online whether the payment has been refunded; to do so it sends the payment number (for a lifetime code, the code's Stripe customer number) to our server, which asks Stripe. Our server stores nothing in the process.

We keep payment records for as long as the law requires (in Switzerland usually ten years). The legal basis is performance of the contract and our statutory retention duty. Stripe's privacy policy: stripe.com/privacy

5. Restoring a purchase

When you restore a purchase on a new device, the app sends your email address and the receipt number to our server. It asks Stripe whether the purchase exists and stores nothing; Stripe handles the request as our service provider. Afterwards, the purchase email address stays only on your device so you can see it under "More".

5a. Access codes

When you redeem a trial or access code, the app sends the code to our server. It checks the code and records at Stripe that this code has been used, so it works only once. Only an identifier of the code is stored, nothing about you and nothing from the app. Our server stores nothing.

6. Barcode scan (Open Food Facts)

When you scan or enter a barcode, your device looks the number up directly at Open Food Facts (world.openfoodfacts.org). Open Food Facts sees your IP address and the barcode number, but no other data from the app. Confirmed products are stored on your device. Open Food Facts privacy: world.openfoodfacts.org/privacy

7. Other features

• Scale reports: PDFs and photos are read on your device.
• Drink reminder: the calendar file is created on your device and added to the calendar you choose.
• Sharing medals: the picture is created on your device; you decide where to share it.

8. Support by email

If you write to us, we process your message to reply. Our email runs on Apple iCloud Mail. We keep correspondence only as long as needed for your request and legal obligations.

9. Cookies and storage

We do not set cookies for analytics or marketing and use no tracking. Our hosting provider Lovable counts page views anonymously: which page, country, language, browser and device type, and which website you came from (its domain only). No cookie is set, no click is recorded and nothing from the app is sent; address parts such as invitation codes are removed first. The app stores only what it needs to work (see section 2); this needs no consent and no cookie banner. Stripe's payment page (checkout.stripe.com) sets its own cookies needed for payment and fraud protection under Stripe's rules.

10. Recipients and other countries

Data is only received by the providers named: Lovable (hosting), Stripe and Link (payment, reseller at checkout), Apple (email) and Open Food Facts (barcode look-up, directly from your device). They may also process data outside Switzerland and the EU, for example in the USA. For this we rely on adequacy decisions or the standard contractual clauses of the European Commission or the Swiss FDPIC.

11. Your rights

You have the right to access, rectification, erasure, restriction, objection and data portability, insofar as we process your data. Write to support@vitalityhub.app. You can also complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority of your country of residence. If you live in the USA, you have the rights your state grants; we do not sell or share personal information for advertising.

You control the data on your device yourself: a backup downloads it, and at the bottom of this page you can delete all data on this device.

12. Minors

The app is intended for adults. We do not knowingly process data of children.

13. Changes

We update this policy when the app or the law changes. The version on this page applies.

Binding version

This text exists in German, English, French and Italian. If the language versions differ, the German version prevails.