Legal
Privacy Policy
arranko helps you log what you eat and see your calories and macros. To do that it has to keep some personal data, including data about your body. This page says what we keep, why, who helps us run the app, how long we keep it, and how you stay in control.
The short version
- We keep only what the app needs to work: your account, your profile, your goals and what you log.
- A photo, a typed description or a voice note goes to Google's Gemini AI only when you ask for an estimate, and only after you said yes in the app.
- Your meal photos are private: only you can see them.
- We never sell your data and there are no ads.
- You can delete your account and everything in it at any time, from the app.
Who runs arranko
arranko is run by [FULL LEGAL NAME], an individual based in Portugal, who is the controller of your personal data. For anything about your data, write to privacy@arranko.app.
What we keep
| Data | Why |
|---|---|
| Account: your email address and password (stored only in scrambled form, never readable) | To sign you in and send you account emails: confirming your email, resetting your password, telling you when it changed. |
| Profile: age, sex, height, weight, activity level, goal, units, rest day and reminder settings | To work out your calorie and macro targets and show them the way you chose. |
| What you log: meals (name, amount, calories, protein, carbs, fat, meal and date), meal photos you add, favourites, weigh-ins, your streak and badges | That is the app: your day, your history and your progress. |
| Plan and usage counts: whether you have Premium and how many AI estimates you used today and this month | To apply the Free Plan and Premium limits fairly. |
| Foods we couldn't find: the food name only, with nothing that links it to you | To add missing foods to our food database. |
Your weight, height and meals are health data under EU law. We keep and use them only because you asked us to, by creating an account and saying yes when the app asks. You can take that back at any time by deleting your account.
The app also keeps a copy of your data on your phone so it works without a connection. Signing out or deleting the app removes it from the phone.
AI estimates
When you ask arranko to estimate a meal from a photo, a typed description or a voice note, we send it through our server to Google Gemini, Google's AI, which returns the foods and amounts it sees. This happens only when you ask for an estimate, and only after you said yes to the question the app shows the first time. You can turn it off again in Settings.
We use Google's paid service, under which Google does not use what we send to improve its products. Google may keep it for a limited time to detect abuse. We don't keep your voice notes; a photo is kept only if you save the meal with it.
Estimates can be wrong. Always check them and adjust the amounts if needed.
Barcode scans
When you scan a barcode, the app looks the product up in Open Food Facts, a free public food database. Only the barcode number is sent, nothing about you.
Crash reports and anonymous usage
If the app crashes, it sends a crash report so we can fix it: the error, the app version and the phone model, never your meals, photos or body data. We use Sentry for this, on its servers in the EU.
The app also counts how it is used, for example which screens people open and whether they come back, so we can improve it. These counts use a random id that isn't your name or email, and are kept by PostHog on its servers in the EU. You can stop them at any time with Share anonymous usage in Settings.
Who helps us run arranko
These services handle data for us, only to do their job and under data-processing agreements:
| Service | What for | Where |
|---|---|---|
| Supabase | Database, sign-in and photo storage | EU (Ireland) |
| Google Gemini | AI meal estimates | Google's servers, which may be outside the EU |
| Resend | Account emails | United States |
| Sentry | Crash reports | EU (Germany) |
| PostHog | Anonymous usage counts | EU (Germany) |
| Apple and Google | App stores and Premium payments, under their own privacy policies | Their own servers |
When data leaves the EU, it is protected by the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
We never sell your data, never share it with advertisers and never use it to show ads. We share it with the police or a court only if the law requires it.
How long we keep it
- Your account and everything you logged: until you delete your account. Deleting removes it at once; our backups are overwritten within 7 days.
- Crash reports: up to 90 days.
- Anonymous usage counts: up to 12 months.
- Account emails: Resend keeps a record of each email sent for up to 30 days.
Your rights
Under the GDPR you can:
- See the data we keep about you and get a copy you can take elsewhere.
- Correct it: most of it you can change yourself in the app.
- Delete it: Settings → Delete Account, or see Delete your account.
- Take back your yes to AI estimates (Settings) or to anonymous usage (Share anonymous usage in Settings).
- Object to or limit how we use your data.
Write to privacy@arranko.app from the email address of your account. We answer within one month. If you think we got something wrong, you can also complain to the Portuguese data protection authority, the CNPD, or the authority in your own country.
Security
Your data travels encrypted (HTTPS), and the database only lets each account read its own data. Meal photos are private and shown through links that expire after an hour.
Age
arranko is for people aged 16 and over. If you think someone younger has an account, write to us and we will delete it.
This website
arranko.app uses no cookies, no analytics and no trackers. It is hosted on GitHub Pages, which may log visitors' IP addresses for security.
Changes
If we change this policy, we update the date at the top. If a change matters, for example a new service that handles your data, we tell you in the app before it applies.