PRIVACY POLICY

 

PlanEat • Last updated: September 2026

This Privacy Policy explains how DESARROLLOS TÉCNICOS, SOLUCIONES TIC, S.L. ("PlanEat", "we", "us" or "our") collects and processes personal data when you use the PlanEat mobile application, the PlanEat website, and services related to them (collectively, the "Service").

Whenever we request personal data, we will provide the information required by applicable law regarding the controller, the purposes of processing, the applicable legal basis, recipients where relevant, retention, and how you may exercise your rights.

PlanEat is a nutrition, calorie-tracking and weight-management service. It is not a medical device and is not intended to diagnose, treat, cure or prevent any disease.

1. WHO IS THE DATA CONTROLLER?

The controller responsible for processing your personal data is:

DESARROLLOS TÉCNICOS, SOLUCIONES TIC, S.L.
Tax ID (CIF): B54495700
Avenida Maisonnave 41, 3º B
03003 Alicante, Spain

Data Protection Officer (DPO): dpo@edigitaltrust.com

2. WHAT PERSONAL DATA MAY WE PROCESS?

The data we process depends on the PlanEat features you use, the permissions you grant, and the information you choose to provide.

2.1. Identification and Account Data

  • name, when provided;
  • email address;
  • user or account identifier;
  • authentication and account-management information.

PlanEat may allow registration or sign-in using third-party services such as Google or Apple. If you use Sign in with Apple and choose Hide My Email, we may receive an Apple private relay address instead of your personal email address. If you use Sign in with Google, we receive only the information Google makes available to PlanEat in accordance with your authorization and our configuration.

2.2. Personal, Nutritional and Anthropometric Data

  • date of birth or age;
  • sex, where requested and relevant to calculations;
  • height;
  • current weight and target weight;
  • weight history and progress;
  • physical activity level and, where enabled, activity-related information;
  • personal goals;
  • eating habits and dietary preferences;
  • other information you voluntarily provide during onboarding or while using PlanEat.

2.3. Food and Nutrition Data

  • foods and meals logged;
  • calories and nutritional values, including protein, carbohydrates and fat;
  • daily calorie and macronutrient targets;
  • food history;
  • photographs of food;
  • products logged or scanned, including barcode-related information;
  • daily and weekly plans;
  • information relating to progress toward your goals.

2.4. PlanEat Coach and AI Inputs
When you use PlanEat Coach or another AI-powered feature, we may process the prompts, questions, messages, photographs and other information you submit, together with relevant account or nutrition context needed to generate the requested response or result. Please do not include personal information that is unnecessary for your request.

2.5. Technical and Usage Data

  • IP address;
  • device model and type;
  • operating system and version;
  • PlanEat application version;
  • language and locale;
  • technical and app identifiers;
  • date and time of use;
  • interactions with features and in-app events;
  • errors, crashes and diagnostic information;
  • performance information;
  • other technical statistics necessary to operate, secure and improve the Service.

2.6. Subscription and Transaction Data

  • subscription plan or product purchased;
  • subscription status;
  • purchase and start date;
  • renewals and cancellations;
  • amount and currency, where available;
  • order, purchase or transaction identifiers;
  • payment status;
  • information necessary to resolve payment issues or process refunds.

The information available to PlanEat depends on whether a subscription is purchased through Apple App Store, Google Play, or our website through Shopify and its integrated payment providers. PlanEat does not directly receive or store full payment-card details where payment is processed by those providers.

2.7. Communications and Support Data
If you contact us, respond to a survey, or request support, we may process your contact details, the content of your communication, attachments you provide, and information needed to investigate and respond to your request.

3. FOR WHAT PURPOSES DO WE PROCESS YOUR DATA?

3.1. Provision and Management of the Service

  • create and manage your account;
  • authenticate access and maintain your session;
  • provide PlanEat features;
  • associate your information, preferences and progress with your account;
  • provide customer support and the services you request.

3.2. Nutritional Personalization
We may use information such as age, sex, height, weight, target weight, physical activity level, eating habits and goals to personalize PlanEat. This may include calculating estimated calorie requirements; establishing personalized calorie and macronutrient targets; generating or adapting daily and weekly plans; tracking food intake; recording progress; displaying statistics; and adapting features to your goals.

3.3. Progress Tracking
We process information you enter while using PlanEat to display progress toward the goals you establish. This may include weight, food intake, calories, macronutrients, activity and other metrics available within PlanEat.

3.4. Food Scanner, Camera and Photographs
PlanEat may allow you to log food using your camera or existing images. If you choose to use this feature, photographs may be processed by automated systems and artificial intelligence technologies to identify food, estimate foods and quantities, estimate calories and macronutrients, and facilitate meal logging.

Image-recognition and AI-generated results are estimates and may be inaccurate. You should review results before relying on or saving them. Camera and photo permissions can be changed in your device settings; disabling them may prevent related features from working.

3.5. Artificial Intelligence and PlanEat Coach
PlanEat may use artificial intelligence systems for food recognition, nutritional estimates, plan generation and personalization, analysis of logged information, operation of PlanEat Coach, and generation of personalized responses.

To provide these features, information necessary to process your request may be transmitted to technology providers acting on our behalf. We apply data-minimization principles and contractual, technical and organizational safeguards as required by applicable law. We do not authorize service providers acting on our behalf to use PlanEat users' identifiable health-related data for their own personalized advertising.

AI outputs, calorie calculations, nutritional estimates and recommendations are informational estimates and may contain errors or inaccuracies. PlanEat does not replace diagnosis, treatment or individualized advice from a physician, registered dietitian, nutritionist or other qualified healthcare professional.

3.6. Subscription and Payment Management

  • verify whether you have an active subscription;
  • activate access to paid features;
  • identify the plan purchased;
  • manage renewals, cancellations and subscription issues;
  • process or assist with refunds where applicable;
  • verify transactions and maintain our contractual relationship.

3.7. Operation, Security and Improvement

  • detect and resolve errors and crashes;
  • improve performance and user experience;
  • analyze how features are used;
  • develop and test improvements and new features;
  • protect the stability and security of PlanEat;
  • prevent fraud, abuse and unauthorized use.

Where analytics or similar technologies are not strictly necessary and applicable law requires consent, they will be used only after the required consent has been obtained.

3.8. Communications
We may send service communications concerning your account, security, authentication, subscription, payments, material changes to PlanEat, or changes to legal terms and policies.

Where we have a valid legal basis, we may also send marketing communications about PlanEat, including features, news, promotions or offers. You may unsubscribe from marketing communications at any time. Unsubscribing from marketing does not prevent strictly necessary service communications.

4. HEALTH AND NUTRITION-RELATED DATA

Some information processed by PlanEat - particularly weight, weight history, nutrition, eating habits, activity and information revealing aspects of physical condition - may constitute health data or another special category of personal data under applicable law.

Where processing of such information requires a special-category condition under applicable data-protection law, PlanEat will rely on explicit consent where appropriate and will present the relevant consent request separately from general acceptance of contractual terms. You may withdraw that consent at any time, without affecting processing lawfully carried out before withdrawal.

Where health-related data is necessary to provide a feature you request, withdrawing consent may mean that the feature, or part of the Service, can no longer be provided.

PlanEat does not sell or rent users' personal data. PlanEat does not provide personally identifiable health-related or individualized nutritional information to third parties for those third parties' own personalized advertising purposes.

5. SUBSCRIPTIONS AND PAYMENTS

PlanEat offers paid subscriptions. Depending on the device and purchase channel, payments may be processed through Apple App Store, Google Play, or Shopify and payment providers integrated with Shopify.

5.1. Apple App Store
When you purchase through Apple App Store, Apple processes the payment under its own terms and privacy practices. PlanEat does not receive or store full payment-method details. We may receive information such as the product or plan purchased, subscription status, start date, renewals, cancellations and transaction-related identifiers.

5.2. Google Play
When you purchase through Google Play, Google processes the payment under its own terms and privacy practices. PlanEat does not receive or store full payment-method details. We may receive information needed to verify and manage the subscription, including the product or plan purchased, subscription status, start date, renewals, cancellations and transaction-related identifiers.

5.3. Shopify and Website Payments
When you purchase through our website, the purchase and payment may be managed using Shopify and, where applicable, payment providers integrated with Shopify. Those providers may process the information necessary to complete the transaction in accordance with their own privacy policies and terms.

PlanEat may receive identification and contact details, email address, product or plan purchased, amount and currency, payment and subscription status, purchase date, renewals, cancellations, order/payment/transaction identifiers, and information necessary to manage issues or refunds. PlanEat does not directly store full payment-card details where those details are processed by Shopify or the applicable payment provider.

6. WHAT IS THE LEGAL BASIS FOR PROCESSING?

6.1. Provision of the Service and Account Management
Processing necessary to create and manage your account and provide requested features is based on performance of a contract with you or steps taken at your request before entering into a contract.

6.2. Health-Related and Special-Category Data
Where information constitutes health data or another special category of personal data, we will rely on an applicable legal condition. Where required or appropriate for PlanEat's personalization and tracking features, this will be your explicit consent. Consent can be withdrawn at any time.

6.3. Subscription, Payment and Accounting
Processing needed to manage subscriptions purchased through Apple App Store, Google Play or Shopify is primarily based on performance of the contractual relationship. Billing, accounting and transaction records may also be processed to comply with legal obligations.

6.4. Marketing Communications
Where required, marketing is based on your consent. Where applicable law permits communications to existing customers on another legal basis, we will comply with the applicable requirements and provide an effective opt-out.

6.5. Security, Fraud Prevention and Service Improvement
Processing strictly necessary to secure PlanEat, prevent fraud or abuse, diagnose errors and improve operation may be based on our legitimate interests, after considering the impact on your rights and freedoms.

6.6. Legal Obligations and Legal Claims
We may process information where necessary to comply with a legal obligation or, where permitted by law, to establish, exercise or defend legal claims.

7. HOW LONG DO WE KEEP YOUR DATA?

We retain personal data only for as long as necessary for the purposes for which it was collected, taking account of the nature of the data, the purpose of processing and applicable legal requirements.

Account data and information needed to provide PlanEat may generally be retained while your account remains active. When you request account deletion, we will delete or anonymize associated personal data unless retention is required or permitted for legal, tax, accounting or commercial obligations; transaction documentation; fraud prevention; dispute resolution; potential liabilities; or legal claims.

Payment and transaction records relating to Apple App Store, Google Play or Shopify may be retained for periods required by applicable law. Where processing is based solely on consent, we will stop that processing after withdrawal, subject to lawful retention obligations.

8. WHO MAY RECEIVE YOUR PERSONAL DATA?

We do not disclose personal data to third parties except where necessary to provide PlanEat, manage our contractual relationship, comply with law, protect legitimate interests where permitted, or where you have authorized the disclosure.

Depending on the services actually enabled in PlanEat, recipients or processors may include the following categories and providers.

8.1. Google Play Services
On Android devices, Google Play Services may process technical and device-related information needed for features and operation of the application, under Google's own terms and privacy practices.

8.2. Google Analytics for Firebase
Where enabled and lawfully configured, PlanEat may use Google Analytics for Firebase to understand app usage, feature interactions, technical device information, app version, performance and other usage statistics. Where consent is required for non-essential analytics, we will request it before such processing.

8.3. Firebase Crashlytics
PlanEat may use Firebase Crashlytics to detect and resolve crashes and technical issues. This may involve device model, operating system, app version, diagnostic information, date and time of an incident, and technical identifiers needed to diagnose the issue.

8.4. Apple
Apple may process information when you use Sign in with Apple, download PlanEat through the App Store, purchase or manage an App Store subscription, or use Apple services directly related to PlanEat. Apple processes that information under its own terms and privacy practices.

8.5. Google
Google may process information when you use Sign in with Google, download PlanEat through Google Play, purchase or manage a Google Play subscription, or use PlanEat features dependent on Google technology services. Google processes that information under its own terms and privacy practices.

8.6. Shopify and Payment Providers
Shopify and, where applicable, integrated payment providers may process information necessary to manage purchases, orders, payments, billing, subscriptions, renewals, cancellations, refunds, fraud prevention and related operations. PlanEat receives the information needed to verify purchases and manage subscriptions.

8.7. AI, Image-Processing, Hosting and Other Service Providers
PlanEat may use vetted providers for cloud hosting, infrastructure, storage, communications, customer support, artificial intelligence, image processing and related technical functions. These providers may process only the information reasonably necessary to perform the contracted service. Where they process personal data on our behalf, we implement appropriate data-processing terms and safeguards required by applicable law.

The specific providers used may change as the Service evolves. Where required by law, material changes affecting the processing of personal data will be reflected in this Privacy Policy or otherwise communicated to users.

9. INTERNATIONAL DATA TRANSFERS

Some providers used by PlanEat may be established outside the European Economic Area (EEA) or may process data outside the EEA. Where an international transfer is subject to Chapter V of the GDPR or equivalent requirements, we use an appropriate transfer mechanism, which may include an adequacy decision, European Commission Standard Contractual Clauses together with supplementary measures where appropriate, or another legally recognized safeguard.

10. COMMUNICATIONS AND PUSH NOTIFICATIONS

Service-related communications may concern account creation and management, security, authentication, subscriptions, payments, renewals or cancellations, important Service changes, and legal terms or policies.

Marketing communications may concern offers, promotions, news, new features, subscription plans, surveys or other PlanEat-related content where we have a valid legal basis. You may opt out using the unsubscribe mechanism provided.

PlanEat may send push notifications if you authorize them through your device. You can change or disable push-notification permissions in your device settings.

11. COOKIES AND SIMILAR TECHNOLOGIES

The PlanEat website may use cookies and similar technologies that are strictly necessary for operation. We may also use non-essential technologies to remember preferences, analyze website operation or measure usage.

Where applicable law requires consent for non-essential cookies or similar technologies, they will not be placed or accessed until the required consent has been obtained. You may accept, reject or configure non-essential cookies through the mechanism provided on our website. Further details may be provided in a separate Cookie Policy.

12. DATA SECURITY

DESARROLLOS TÉCNICOS, SOLUCIONES TIC, S.L. implements appropriate technical and organizational measures designed to protect personal data against unauthorized access, unlawful processing, accidental loss, destruction, alteration and unauthorized disclosure. Measures are reviewed taking into account the nature of the information, risks and state of technology. No electronic storage or transmission system can guarantee absolute security.

13. THIRD-PARTY LINKS AND SERVICES

PlanEat may contain links to or integrations with third-party websites, applications or services. We do not control the privacy practices of third parties acting independently from PlanEat. When you access a service provided directly by a third party, its processing is governed by its own terms and privacy policy.

14. CHILDREN

PlanEat is not intended for children under the age of 14. Where applicable law requires consent from a parent or legal guardian for a minor to use a service or for processing of the minor's personal data, the required authorization must be obtained before the relevant processing occurs.

Because PlanEat provides calorie, nutrition and weight-management functionality, minors should use the Service only where appropriate and, when relevant, with the involvement of a parent, legal guardian or qualified healthcare professional.

If we become aware that personal data relating to a child has been collected in breach of applicable legal requirements, we will take appropriate steps to delet

15. ACCOUNT AND DATA DELETION

You may request deletion of your PlanEat account and associated personal data through the account-deletion functionality made available in the Service, where available, or by contacting dpo@edigitaltrust.com.

Deleting the PlanEat account does not necessarily cancel a subscription purchased through Apple App Store, Google Play or another external payment channel. Subscriptions must also be cancelled through the applicable purchase channel where required.

Following a valid deletion request, we will delete or anonymize personal data associated with the account unless we must or are permitted to retain specific information for the reasons described in Section 7.

16. YOUR DATA PROTECTION RIGHTS

Under applicable data-protection law, you may have the right to:

  • access your personal data;
  • request rectification of inaccurate or incomplete data;
  • request erasure of personal data;
  • object to processing;
  • request restriction of processing;
  • receive or transmit data through the right to portability, where applicable;
  • withdraw consent at any time where processing is based on consent;
  • not be subject to certain decisions based solely on automated processing that produce legal or similarly significant effects, where applicable.

You may exercise your rights free of charge by contacting dpo@edigitaltrust.com. Please use the subject line: "EXERCISE OF DATA PROTECTION RIGHTS - PLANEAT".

You may also submit a written request to:
DESARROLLOS TÉCNICOS, SOLUCIONES TIC, S.L.
Avenida Maisonnave 41, 3º B
03003 Alicante, Spain

Your request should contain enough information to identify the relevant account and the right you wish to exercise. Where we have reasonable doubts about identity, we may request only the additional information necessary to verify it.

17. AUTOMATED PROCESSING

PlanEat uses automated systems and artificial intelligence to generate estimates, recommendations and personalized outputs. These functions are designed to assist you in using the Service. Unless expressly stated otherwise, PlanEat does not use these systems to make decisions that produce legal effects concerning you or similarly significantly affect you within the meaning of applicable data-protection law.

18. COMPLAINTS TO A SUPERVISORY AUTHORITY

If you believe that your personal data has not been processed in accordance with applicable law, you may lodge a complaint with the competent supervisory authority. In Spain, the competent authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD), www.aepd.es. You may also have the right to contact the supervisory authority in your country of habitual residence, place of work or place of the alleged infringement, where applicable.

19. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes to PlanEat, new features, service providers, processing activities, or legal and regulatory developments. Where changes are material, we may notify users through PlanEat, email, our website or another appropriate method. The version published through our official channels will be the version in force at that time.

20. CONTACT

For questions about this Privacy Policy or our processing of personal data, contact:

DESARROLLOS TÉCNICOS, SOLUCIONES TIC, S.L.
Avenida Maisonnave 41, 3º B
03003 Alicante, Spain
Tax ID (CIF): B54495700
Data Protection Officer (DPO): dpo@edigitaltrust.com

m