Your information

Privacy policy

Effective 2026-09-04

What Deficut uses, why it needs it, and how you stay in control.

What we collect

Your account email and sign-in details; fitness profile (age, sex, height and activity), goals, weight entries and notes, nutrition, recipes and workouts; preferences; purchase status; and anything you send to support. Our providers may also process IP addresses and technical logs. Stores handle payments—we do not receive full card details.

How we use and share it

We use your information to run your account, sync logs, calculate fitness guidance, provide reviews, manage purchases, answer support requests, and keep the service secure.

• Supabase: sign-in, synchronized data, and server functions.
• RevenueCat, Apple and Google: purchases and subscription access. Apple or Google also handle sign-in if you choose them.
• Anthropic: calculated fitness summaries for AI weekly reviews you request. These are personal information, not anonymous data. Raw log history is not sent to the model; completed reviews are saved to your account.
• Open Food Facts: food searches and barcode lookups. Deficut’s product service also handles these requests.
• Cloudflare: website delivery and security.

Information may also be disclosed where required by law or necessary to protect people’s rights or the service.

We process information as needed to perform our contract with you, with your consent for optional health access and AI reviews where required, for legitimate interests such as security and support, and to meet legal obligations. You may withdraw consent at any time.

Health data and optional permissions

With your permission, Deficut reads steps from Apple Health or Health Connect to update activity and calorie estimates. It never writes to either health store. Readings are processed on your device; the resulting activity average can sync and appear in AI-review summaries. Health data is not used for advertising or sold to data brokers.

Turn off tracking in Deficut or revoke health access in device settings to stop future reads. This does not erase existing records. The camera only scans barcodes—images are not saved or uploaded. You can type barcodes instead. Reminders are scheduled locally and can be disabled in the app or device settings.

Storage and deletion

App data is stored locally and synced to your account when connected. No storage or transmission method is completely secure.

Deficut's primary database is hosted in the European Union. Other providers may process information in the EEA, the United States, and other countries where they operate.

When information is transferred outside the EEA, we rely on adequacy decisions, standard contractual clauses, or another lawful safeguard where required.

We keep active account data while your account exists. After deletion, records may remain in backups for up to 90 days. We keep security and technical logs for up to 30 days, support correspondence for up to 24 months, and purchase or tax records for as long as legally required.

Deleting your account removes its active database records and attempts local cleanup on that device. Offline copies on other devices, backups, provider logs and purchase records need separate handling. Original health-store records are unaffected.

Food products you create for the shared database remain available to others, with your account attribution removed after deletion. Do not include personal information in them. Account deletion does not cancel a store subscription.

Your choices and rights

Edit your information, disable optional permissions, or request deletion. Depending on applicable law, you can request access, correction, erasure, portability or restrictions, object to processing, and withdraw consent without affecting prior lawful processing. Contact us below; we may verify account ownership. You can also complain to your local data-protection authority.

You must be at least 16 years old to use Deficut.

This website

No advertising, analytics scripts, tracking cookies, account sign-in, or email verification are included on this website. Hosting providers may process connection and security logs.