Privacy policy

Last updated: 2 November 2026 · Version 2026-11.1

This policy explains which personal data we process when you use the almarfit.com website and the AlmarFit app, why, how long we keep it and what your rights are. We wrote it as clearly as we could, because part of this data is about your health.

1. Who processes the data

The data controller is NUTRIFIT & FILM SRL, tax ID (CUI) 47011901, Trade Register no. J2022020440404, share capital RON 200, registered office at Str. Scarlatescu 27-29, Et. P, Cam. 3, Sector 1, Bucharest 011158, Romania (“AlmarFit”, “we”). The nutrition and coaching services are provided by Maria Nistor through this company.

For any question about your data, write to [email protected]. We have not appointed a Data Protection Officer (DPO), as the law does not require it; all requests come directly to us.

2. What data we process, why and on what basis

When you visit the website

• Technical data (IP address, browser and device type, pages visited, date and time), needed for the website to work and to protect it against attacks. Basis: our legitimate interest in a secure website (Art. 6(1)(f) GDPR).
• Anti-bot check when signing up: on the sign-up forms and the code page, Cloudflare Turnstile checks, usually without asking you anything, that a person is filling in the form; for this, Cloudflare receives the IP address and technical information about the browser. In the AlmarFit app the same check is made by Google Play Integrity (on Android) and Apple App Attest (on iPhone), which confirm that the request comes from the original app on a real phone; we only receive the result of the check. Basis: our legitimate interest in preventing fake accounts and attacks (Art. 6(1)(f) GDPR).
• Cookies and statistics. Necessary cookies work without consent. Statistics (Google Analytics) and marketing (Meta Pixel) are switched on only if you agree in the cookie window, and you can withdraw your consent at any time from “Cookie settings”. We use them only on the public pages of the website: they are never loaded in your account (the client area) or in the AlmarFit app. Details in the Cookie policy. Basis: your consent (Art. 6(1)(a)).
• Visit statistics, without cookies. On the public pages we count visits with Burst Statistics, on our own server, without cookies and without keeping the IP address: an anonymous code, with a key changed every day, so that a visit is counted once a day; the pages read, where the visitor comes from, the device, the browser and the presses on a few buttons. It does not run in the account or in the app, and it respects “Do Not Track”. Details in the Cookie policy. Legal basis: our legitimate interest (Art. 6(1)(f)).

When you ask for the free plan or contact us

• The messages you send us by email, form or WhatsApp, so we can answer. Basis: your request and our legitimate interest in replying. If you write to us on WhatsApp, the WhatsApp privacy policy also applies.

When you have an account in the AlmarFit app (the free account, the free 3-day plan or a paid plan)

• Account data: name, email, phone, date of birth (to check that you are at least 18, for the calculations below and so that on your birthday you get a card from Maria in the app; your age does not appear on the card), password (stored only encrypted; we cannot see it), chosen language. Basis: our contract (Art. 6(1)(b)).
• Your city, only if you fill it in (in My details, or in the question on the home page, which appears only once): so Maria knows where you are from. Only Maria and the AlmarFit team see it, and you can change or delete it at any time. Basis: your consent (Art. 6(1)(a)).
• For the free 3-day plan we ask for the same account data when you sign up, plus the consents below. Before the 3 days start, the app asks your sex, whether you are pregnant or breastfeeding, your height, weight, goal and how active you are, so that the plan suits you; the free plan is not available during pregnancy or breastfeeding. You add any other data in the app yourself, if you wish, and it is processed as for Elite Plan. In the free plan you have your own group too, the free plan’s group (Free; see below).
• From the free account (also after the 3 days or after a paid plan ends) you can use the messages with Maria and the artificial intelligence features too; their data is processed as described below.
• Health and body data: sex, age, height, weight, measurements, goal, activity level, pregnancy or breastfeeding, perimenopause, menopause or polycystic ovary syndrome (only if you choose to tell us), intolerances and allergies, food preferences, the weight at which you felt best, then everything you note in the journal (weight, water, meals, calories and protein, workouts, sleep, energy, cravings, notes), weekly check-ins and your reference and progress photos. This data belongs to the “special categories” and we process it only with your explicit consent (Art. 9(2)(a) GDPR), which you give when you create your account, so Maria can prepare your plan and follow your progress. On the Maintenance Plan, the app compares the weight you note with your goal: if it stays more than 2 kg above the goal for two weeks, it shows you a suggestion and tells Maria.
• Calculations made by the app from your data: the reference weight range, basal metabolic rate (BMR) and estimated daily need. They are estimates for Maria and for you; they do not make automated decisions about you.
• Your plan, your messages with Maria, her comments on your days and Maria’s private notes about you (seen only by her). Basis: the contract and your consent.
• The AlmarFit groups: each plan has its own group (Elite, Light, Free, for the free 3-day plan, the free account and a plan that has ended, and Maintenance), and in the app you are added automatically to the group of the plan you have now; when your plan changes, you move to the new plan’s group and no longer see the old one. You can leave the group at any time, in the group info; after that we do not add you back, and you can rejoin yourself if you wish. Your messages, photos and reactions in the group are seen by the members of your group and by Maria; the AlmarFit team may see them only to look after the group. Your email, phone and journal data are not shown. The group rules are the same for every member and are in the group info: no offensive messages and nothing medical (no diagnoses, treatments or medical advice). Please do not write in the group health information you do not want the other members to know. Basis: our contract (the group is part of your plan, Art. 6(1)(b) GDPR) and our legitimate interest in bringing together the clients of the same plan (Art. 6(1)(f)); you can object at any time by leaving the group.
• Your first name, initial and profile picture (if you added one in the app) are seen by the members of your group while you are in it, once you have opened the group for the first time; until then the other members do not see you in the group, and you get group notifications only from Maria. Maria also sees your picture next to your name in her pages. If you leave the group, the others no longer see your picture. Basis: our contract and our legitimate interest (Art. 6(1)(b) and (f) GDPR).
• Reports and blocks in the group: you can report a message to Maria; we keep who reported which message and when, so that Maria can decide (remove the message or keep it), and we do not tell the person who reported them. You can block a person in the group (not Maria): you no longer see their messages or get notifications from them; only you see and change your list of blocked people, in the group info. Basis: our legitimate interest in keeping the group safe (Art. 6(1)(f) GDPR) and your consent.
• Images sent in the chat: those in your conversation with Maria are seen only by you and Maria, those in the group only by the members of your group and Maria. They are reduced and cleaned of hidden data (such as the place where they were taken) and deleted automatically after 45 days. Basis: your consent.
• Voice messages (only in your conversation with Maria, up to 2 minutes): only you and Maria can listen to them, and they are deleted automatically after 45 days. They are not transcribed or sent to other services. Basis: your consent.
• Meal photos (“Scan your meal”), only if you use the feature: the photo is reduced, cleaned of hidden data (such as the place where it was taken) and sent to Anthropic, which recognises the foods and estimates the grams. We do not keep the full photo: only the foods you confirm are saved in your journal. If you agree (we tell you when we ask for your consent for photos), we keep a small copy of the photo (600 pixels) in your scan history for 90 days; only you and the AlmarFit team see it. You can stop this at any time on the Scan screen, and the copies kept are deleted then; the copy of a photo from which you add nothing is deleted within 2 days at most. The foods you confirm and the products you scan by barcode also stay in your “My scans” list, where you can delete them at any time. When you scan a barcode, the camera image does not leave your phone: only the code reaches us, and to find the product we send that code, with nothing about you, to Open Food Facts. Because a photo of a meal can say something about your health, we ask for a separate consent before the first photo and keep its date. Basis: your explicit consent (Art. 9(2)(a) GDPR). The feature is optional: you can also log meals by searching, and if you stop using it, no photo is sent.
• A product’s label (Scan → The label), only if you use the feature: the photo of the nutrition table (and, if you want, of the front of the pack, for the name) is reduced, cleaned of hidden data and sent to Anthropic, which reads the values. The product you save, with its barcode and values, joins the food list for all clients, without showing who added it. A small copy of the photo of the table (600 pixels) stays with the product so the values can be checked: you and Maria see it, other clients do not. The copy stays while the product is on the list; if you delete your account, the product stays on the list, but without your photo and without any link to you. Basis: your consent, the same consent as for meal photos.
• “My fridge”, only if you use the feature: the products you note (name, amount, place and the date they are good until), your home shopping list and the recipes you cook from them. We use them only to show you what you can cook and what to use first. Maria does not see your fridge; she sees only what you choose to note in your journal. If you add products from a photo of a receipt or of your fridge, the photo is reduced, cleaned of hidden data and sent to Anthropic, which recognises the foods. We do not keep the full photo: only the products you confirm are saved and, if you agree, a small copy of the photo in your scan history for 90 days, as with meal photos. Please do not photograph card details on a receipt. You can delete the products at any time in “My fridge”. If you ask for a recipe made up by AI from what you have, only the list of your foods goes to Anthropic (nothing about you); the recipes you choose to keep are saved in your account. The products and recipes are in your “My data” file and are deleted together with your account. Basis: your consent; for photos we ask for a separate consent before the first photo, which you can withdraw at any time in Account → Privacy.
• “Say what you ate”, only if you use the feature: the text in which you describe what you ate is sent to Anthropic, which recognises the foods and estimates the grams. We send neither your name nor anything else about you, and we do not keep the text: only the foods you confirm are saved in your journal. If you dictate with the 🎤 button (on the website or in the app), your voice is recognised by your browser or your phone (for example Google in Chrome and on Android, Apple in Safari and on iPhone), under their own rules; only the text reaches us. We ask for a separate consent before the first use and keep its date; you can withdraw it at any time in Account → Privacy. Basis: your explicit consent (Art. 9(2)(a)).
• The record of the use of artificial intelligence features: for each use (a scan, “Say what you ate”, a label, a recipe from the Fridge) we note the date and time, the account, the plan you have at that moment, the feature, the model used, how many units of text it processed (tokens), the estimated cost and whether it worked; never the photo or the text. We do this to count the uses of your plan and to keep costs under control. The record is seen by the site’s administrator and by Maria (the cost per feature, per plan and per client). Basis: the contract, for the uses of your plan (Art. 6(1)(b)), and our legitimate interest in keeping costs under control (Art. 6(1)(f)).
• Confirming your account: when you sign up we send a 6-digit code by SMS (or, if you ask, on WhatsApp) to the phone number you gave, and the account opens once you enter the code. For this, your number goes to Twilio, which sends the code and tells us whether it is right; on WhatsApp the message also passes through WhatsApp (Meta). If the code does not arrive, you can ask Maria to check your details and confirm your account; the request and the account wait for at most 7 days. On the device you signed up with we keep a technical cookie for 48 hours, so the code page stays open there. Once the account is open, we send you an email with a link to confirm your email address as well; until you confirm it we remind you on the website and in the app (and once by email, on the fifth day), and after 7 days we show you a confirmation screen each time you open it, which you can put off; the account works normally all along. When confirmation by SMS is not switched on, the account opens through the link in the email, valid for 48 hours, and the technical cookie lets the link log you in directly on the phone you signed up with. Basis: the contract (Art. 6(1)(b) GDPR) and our legitimate interest in preventing fake accounts (Art. 6(1)(f)).
• One account per person: we compare a new address with the existing ones (the same mailbox written with dots or a “+” counts as the same), we do not accept temporary email addresses for the free plan, and we show Maria when the phone number in a request is the same as another account’s, and when the free plan starts we also compare fingerprints of the phone and of the name with the date of birth (see section 4). Basis: our legitimate interest in preventing misuse (Art. 6(1)(f) GDPR).
• Technical data from your sign-up: the IP address, the country (worked out from the IP address), whether you signed up on the website or in the Android or iPhone app, the type of browser or the app version, and the result of the anti-bot check. We use them only to detect and stop fake accounts and attacks (for example, many accounts made from the same connection). Only the website administrator and Maria see them. We keep them for 12 months from sign-up (see section 4). Basis: our legitimate interest in protecting accounts and the service (Art. 6(1)(f)).
• Security log: successful and failed logins (with the name or address typed), sign-ups, sending and checking codes, requests for a new password, password or email changes, account deletions and limits reached, each with the date and time, IP address, country, website or app, and the type of browser or app version. We do not make “fingerprints” of your phone or browser: we only use what every request carries anyway. Only the website administrator and Maria see the log, and it is deleted automatically after 90 days (see section 4). Basis: our legitimate interest in protecting accounts and being able to trace an attack (Art. 6(1)(f)).
• Your menstrual cycle (optional, only if you turn on tracking in Journal → Cycle): your period days, flow, symptoms, energy, mood and notes. From them we estimate the phases of your cycle and recognise the days your body holds water, so they do not spoil your weight trend. Here you can also tell us, if you like, “Your situation” (hormonal contraception, polycystic ovaries, menopause or close to it, pregnancy or breastfeeding), to adapt what the app shows you; if you already answered the questions for your plan, we start from those answers. Except for contraception (which stays only in Cycle), what you choose here is also saved as your answer to the questions for your plan, which Maria sees so she can take it into account; you can change it at any time in My account → For your plan. Maria sees this data only if you choose “Me and Maria” (the default is “Only me”), and you can stop it at any time; she then sees the day and phase of your cycle, how long your cycle and period usually last and what you noted, and your plan changes only if she decides so. The data is not sent to anyone else. You can delete it at any time from Journal → Cycle → Settings; we keep at most the last 2 years. Basis: your explicit consent (Art. 9(2)(a) GDPR).
• Your subscription: start and end dates, renewals, history of months. Basis: the contract.
• Proof of what you accepted: the version of the terms and consent you accepted, the date and your request for the service to start immediately. Basis: legal obligation and our legitimate interest in being able to prove what was agreed.
• Your last login, so we know whether an account is still used (see section 4). Basis: our legitimate interest in not keeping data without a purpose.
• The app activity log: what you do in the app and when (for example: you opened the app, ticked a meal, saved your day, sent a message, without its text, uploaded a photo, changed your profile). Only Maria sees it, so she can follow your progress and help you in time. In the group, the other members see when you are active in the app (“active now”, “active 10 minutes ago”); you can turn this off at any time in the group info, and then you do not see who is active either. Legal basis: our contract and our legitimate interest in providing your coaching (Art. 6(1)(b) and (f)).
• Notifications, if you switch them on: the technical address of your phone or browser for notifications. Notifications travel through the notification services of Apple, Google or your browser, so we write them without health data (no weight, foods or message text): they also appear on the lock screen. You can turn them off at any time.
• Approximate location for the sky and the weather, only if you allow it: on the home page, the sky shows the sunrise, the sunset and the weather where you are. In the app we ask you once; the location is rounded to about 11 km and kept only on your phone. On the website, the browser asks you only if you tap the sunrise and sunset times; the location is rounded to about 1 km and kept only in your browser. Without permission, we use the city that matches your device’s time zone. To get the weather, the rounded coordinates (yours or the city’s) go to Open-Meteo, a weather forecast service: either through our server, with nothing about you, or straight from your phone or browser, in which case Open-Meteo also sees your IP address. We do not save the location in your account; we keep only the time zone (for example Europe/Bucharest), so that reminders come at your time. You can withdraw the permission at any time in your phone’s or browser’s settings. Basis: your consent (Art. 6(1)(a)).
• “Invite a friend”: if a friend signs up with your link, you see her first name and how the invitation stands (she has created an account, her subscription is active, you have received the extra days, or her subscription is no longer active), so you know when you get the extra days; she sees your first name, and Maria sees who invited whom. The code in the link contains the first letters of your first name. If your friend opens the link without being logged in, the code is kept in her browser for 30 days (the af_inv cookie), so that her sign-up is linked to you. To prevent misuse, we compare her email and phone with yours. Basis: the contract, for the extra days, and our legitimate interest in running the invitation programme (Art. 6(1)(b) and (f)).
• Reviews, only if you choose to write one (as a client with a paid plan, now or in the past): the display name you choose, your story and, if you wish, a “before” and an “after” photo. The review appears on almarfit.com only after you tick the consent to publish it and Maria approves it; the photos appear only if you tick this separately too, and they then become public, as images of the website. Next to your story, Maria may write the result in a few words (for example the kilograms lost), only with your consent. You can change or withdraw it at any time from your account; when you withdraw it or delete your account, the review and the public copies of the photos are deleted. Reviews received in other ways are published only with the person’s consent. Basis: your explicit consent (Art. 9(2)(a)), because a review can say something about your health.
• Emails with tips and offers, only if you want them: when you create your account there is a separate, optional tick, never ticked in advance. We keep the date of your consent and the version of the text you accepted. You can withdraw it at any time: from the unsubscribe link in each such email, from your email program’s unsubscribe button, or in My account → Notifications → Email, where you can also switch it on again. We keep the date you withdrew it, as proof that we respected it. Messages about your account, payments and security do not depend on this consent. Basis: your consent (Art. 6(1)(a)).

Payments and invoices

On the website, Elite Plan, the Maintenance Plan and the Light Plan are paid through PayU if your account has a Romanian phone number, or through Stripe (card, Apple Pay or Google Pay). Only the payment processor receives your card details; we receive your name, email, the plan chosen, the amount, the date and the payment status; for the invoice we also read your billing address from Stripe, if you gave it when paying, without keeping it on the website. To know who processes your payment, we use the prefix of your phone number. With the monthly subscription paid through PayU we also keep the code of the card saved at PayU (not the card number), which we use to charge the renewals, the last 4 digits of the card and the IP address of the first payment; we delete the card code, here and at PayU, when you stop the subscription or delete your account. If you join the waitlist, we keep the plan you want and the date you joined until you get a seat or leave the list. Older payments by bank transfer are processed with the payer’s name and the bank statement details. For each payment on the website we issue the invoice in the invoicing program Oblio, with your name, email, billing address (if you gave it when paying), the plan, the period paid, the amount and the payment reference, and send it to you by email; the law requires us to send it through the Romanian tax authority’s RO e-Factura system. You do not have to give us your personal identification number. Basis: legal obligation (Art. 6(1)(c)).

In the AlmarFit app for iPhone or Android, where payment is available there, plans are paid through the App Store (Apple) or Google Play (Google). Only the store receives your payment details; from it we receive the plan bought, the date, the paid period, the subscription status (renewal, stop, refund) and the transaction code, linked to your account by an identifier without your name or email. We use them to open your plan and keep it up to date. Basis: the contract (Art. 6(1)(b)) and legal obligation.

3. Who else receives the data

We do not sell or rent your data. It is received only by the providers who help us operate, with whom we have data processing agreements, and by authorities when the law requires it:

• Hetzner Online GmbH (Germany): the servers hosting the website and the app, in the European Union.
• Cloudflare, Inc. (USA): website protection, fast delivery of pages and the anti-bot check (Turnstile) on the sign-up forms.
• Twilio Inc. (USA): sending the confirmation codes by SMS or WhatsApp; it receives the phone number and the language of the message, and it creates and checks the code. When you ask for the code on WhatsApp, the message also passes through WhatsApp Ireland Ltd (Meta).
• Google Ireland Ltd (Google Workspace) (Ireland): sending the website’s and the app’s emails (confirmations, approvals, reminders and, only with your consent, tips and offers). The website hands them over through the FluentSMTP plugin, installed on our server. For the emails with tips and offers, sent only with your consent, we may also use an email marketing platform: an external one, based in the EU or with the transfer safeguards below, or one installed on our own server. The platform receives only your name, email address and consent, never health data.
• PayU S.A. (Poland): payment processing for clients with a Romanian phone number; for the payment data, PayU is a data controller, as stated in its notice on the payment page.
• Stripe Payments Europe Ltd (Ireland): card payment processing; may transfer data to Stripe, Inc. (USA).
• Oblio Software SRL (Romania): the invoicing program, issuing the invoices for payments on the website; it receives the name, email, billing address (if you gave it when paying), plan, period paid, amount and payment reference.
• Apple Distribution International Ltd (Ireland) and Google Ireland Ltd (Google Play) (Ireland): payments in the app, only if you pay through the App Store or Google Play; they may transfer data to the USA.
• Anthropic, PBC (USA) — recognising the foods in meal photos, only when you use “Scan your meal”, reading the values on a product’s label, only when you scan it, and in photos of receipts or of the fridge, only when you add products to “My fridge” that way, the list of the foods in your fridge, only when you ask for a recipe made up by AI, and the text in which you say what you ate, only when you use “Say what you ate”. Anthropic does not use the photos and texts to train its models and deletes them within 30 days at most.
• Apple, Google, Mozilla: the phone and browser notification services, through which notifications travel, written without health data.
• Google (Play Integrity) and Apple (App Attest): checking that sign-up requests from the app come from the original AlmarFit app on a real phone; the phone makes the check with Google Play or Apple services, and we only receive the result.
• Open-Meteo: the weather forecast for the sky on the home page; it receives only the rounded coordinates of where you are, if you allowed the location, or of the city of your time zone (and your IP address, when the request goes straight from your device).
• Google Ireland Ltd (Google Analytics) and Meta Platforms Ireland Ltd (Meta Pixel): only if you accepted statistics or marketing cookies, and only on the public pages of the website, never in your account or in the app.
• The bank, the accountant and the Romanian tax authority (ANAF), for payments, accounting and invoicing.
• Public authorities, only when the law obliges us.

Transfers outside the EU. Cloudflare, Google, Apple, Meta, Stripe, Twilio and Anthropic may also process data in the USA. Transfers rely on the European Commission’s decision on the EU-US Data Privacy Framework and, where relevant, on the standard contractual clauses approved by the Commission. For Anthropic, transfers rely on the standard contractual clauses included in its data processing agreement. Your journal, reference and progress photos and messages are stored on Hetzner servers in the EU; only what you send to the artificial intelligence features (“Scan your meal”, “My fridge”, “Say what you ate”), when you use them, goes to Anthropic in the USA; the small copies of photos that we keep (section 4) are also stored on the servers in the EU.

4. How long we keep the data

• Your account and app data (profile, journal, photos, messages, plan) are kept as long as you use your account, even after your subscription ends, so you find everything if you come back. You can download or delete them at any time from “My data”.
• Unused accounts are deleted automatically, with all their data, after 3 years without any login. You receive an email 30 days before; logging in once restarts the period. We keep only an internal record with the first name and initial, the date and the reason for the deletion, as proof that the rule is applied; it is deleted after 3 years too.
• Group messages (and your reactions and reports): they stay in the group where you wrote them until you delete them (or Maria removes them for breaking the rules) or until you delete your account; we do not delete them automatically. A deleted message goes with its text. Your list of blocked people is kept while you have the account.
• Images in the chat and the group: 45 days after sending, then deleted automatically; the message stays, marked “Image expired”.
• Voice messages: 45 days after sending, then deleted automatically; the message stays, marked “Voice message expired”.
• Meal photos, photos for “My fridge” and the text of “Say what you ate”: we do not keep the full photo or the text. Anthropic deletes them within 30 days at most. If you agreed, a small copy of the photo stays in your scan history for 90 days, then it is deleted automatically (you can delete it earlier, together with the scan in your history, or all of them at once by stopping this on the Scan screen). We keep the date of your consent for each feature while you have an account.
• The record of the use of artificial intelligence features: 13 months, then it is deleted automatically. If you delete your account, your rows stay only in the totals, with no link to you.
• The photo of a product’s label (the small copy): while the product is on the food list. If you delete your account, the photo is deleted and the product stays without it.
• Unconfirmed accounts: if you do not confirm the account (with the code from the SMS or, when confirmation by SMS is not switched on, with the link in the email) within 48 hours, the account and everything you entered when signing up are deleted automatically. If you asked Maria for help with the code, the account waits for at most 7 days, then it is deleted automatically if Maria has not confirmed it.
• The app activity log: 12 months, then deleted automatically. It is deleted at once if you delete your account.
• If you delete your account, your profile, journal, photos, messages, plan and Maria’s notes about you are deleted immediately. Your group messages, reactions and reports, and your profile picture, are deleted too. We keep only the proof record below and the records the law requires.
• Proof of acceptance and subscription history are kept for 3 years after the contract ends (the general limitation period), in case of a disagreement. If you delete your account, we keep separately only a minimal record: your name, email, the versions you accepted and their dates, your request to start immediately, and the history of payments and of the subscription, without health data. The record is deleted automatically after 3 years.
• Invoices and accounting documents are kept as long as accounting law requires, independently of your account.
• App Store and Google Play purchases: as long as accounting law requires. If you delete your account, they stay without any link to you (no name, no email), only as a record of the payments.
• Your consent to emails with tips and offers: as long as you have your account and have not unsubscribed. The date you unsubscribed is kept as long as the account exists. Both are deleted with the account, whether you delete it or it is deleted automatically after 3 years without any login.
• Fingerprints for the free 3-day plan: encrypted codes of the email address, of the last 9 digits of the phone number and of the name together with the date of birth, from which these data cannot be rebuilt. We keep them also after the account is deleted, for as long as we offer the free plan, so that it can be used only once per person. Basis: our legitimate interest in preventing misuse of the offer (Art. 6(1)(f)).
• Published reviews and their public photos: until you withdraw them or delete your account.
• Contact messages: as long as needed to answer you, then at most 12 months.
• Security log: 90 days, then it is deleted automatically. The rows about a deleted account stay until the end of those 90 days, so that an attack can still be traced after the deletion.
• Technical data from your sign-up: 12 months from sign-up, then deleted automatically; deleted at once if you delete your account.
• Technical data from visits (server and Cloudflare logs): for a short period, as long as needed to protect the website.

5. How we protect the data

The website and the app use an encrypted connection (HTTPS). Your photos are stored privately and can be seen only by you and Maria (except those you choose to publish with a review). Hidden data, such as the place where a photo was taken, is removed automatically. Passwords are encrypted, accounts with access to data have extra protection, and data is backed up regularly. If an incident ever put your data at risk, we would notify the authority within 72 hours and inform you as well, when the law requires it.

6. Your rights

You have the right to request access to your data, its correction, its deletion, the restriction of processing, portability (receiving it in an easy-to-use format) and to object to processing based on our legitimate interest. You can withdraw your consent at any time, without affecting what was done before; withdrawing consent for health data in practice means stopping using the app and deleting the account.

Many of these rights you exercise yourself, directly in the app: in “My data” you download your journal, correct your data and delete your account. For any other request, write to [email protected]; we answer within one month.

If you are not satisfied with how we process your data, you can lodge a complaint with the Romanian data protection authority, ANSPDCP, B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, www.dataprotection.ro, or with the authority in the EU country where you live.

7. Minimum age

The AlmarFit app is intended for people aged at least 18. We do not knowingly process data of minors; if we find out that it happened, we delete it.

8. Changes

If we change this policy, we publish the new version here, with the update date. For important changes we let you know in the app or by email, and if a new consent is needed, we ask for it.