Privacy statement

• Account details: your email address, a name if you provide one, and an encrypted version of your password (we cannot read your password ourselves). If you sign in with Google, Google gives us your email address and name; no password.
• Profile details you enter yourself: your goal, sex, age, height, weight, target weight, fitness, diet preference, taste preferences, postcode and monthly budget. From these we calculate your calorie and protein targets.
• What you do in the app: your weekly menus, shopping lists, stock, prepared meals, frozen leftovers, weight measurements and any feedback you send.
• Payment details: whether you have a subscription, since when and until when, and the customer number Stripe creates for you. We never see or store your card or account number; that stays with Stripe.
• Technical details: your IP address is used briefly to slow down abuse (too many login attempts, for instance) and appears in our hosting provider's logs. We keep no visitor profile.

Your age, height, weight, target weight, fitness and goal say something about your health. The law calls this special category data. We process it only with your explicit consent, which you give by ticking the box when you fill in your profile. Without that consent we cannot build a weekly menu for you.

You can withdraw that consent at any time by deleting your account (under Subscription). This data is then erased immediately.

• To make the app work (our contract with you): logging in, calculating your nutrition targets, building weekly menus and shopping lists, tracking your budget, handling your subscription and sending the emails that belong to your account, such as a verification code or a cancellation link.
• With your consent: processing the health data described above.
• Legitimate interest: keeping the app secure, preventing abuse and fraud, and finding bugs.
• Legal obligation: keeping payment records for tax purposes.
• We make no decisions about you that are taken solely by a computer and have legal effects for you. The AI proposes a menu; you decide what you eat.

Your weekly menus, leftover recipes and the help with filling in your profile are generated by an AI model from Anthropic. For that we send the model the figures it needs: your goal, calorie and protein targets, diet and taste preferences, weekly budget, what you have at home and your language. Your name, email address, postcode and payment details are not sent.

Anthropic (United States) processes this data only to produce the answer, does not use it to train its models and keeps it for at most thirty days. The transfer to the US is covered by the European Commission's standard contractual clauses.

We work with a small number of suppliers that process data for us. We have a data processing agreement with each of them.

• Railway (hosting of the app; servers in the Netherlands, Google Cloud europe-west4).
• Neon (database; servers in Frankfurt, Germany).
• Stripe Payments Europe (payments and subscriptions; Ireland). For the payment itself Stripe is also a controller in its own right and has its own privacy statement.
• Resend (sending emails such as verification codes and cancellation links; servers in the EU).
• Anthropic (AI model, see above; United States).
• Google (only if you sign in with Google; Google's own privacy statement applies to that login).

• Your account and everything attached to it: as long as your account exists. If you delete your account, we erase everything immediately and permanently. Database backups are overwritten within thirty days.
• Payment records (which amount, when, which customer number): seven years after the payment, because Dutch tax law requires it. These are not card details.
• Verification codes: fifteen minutes. Cancellation links: thirty minutes.
• Server logs containing IP addresses: a few weeks at most.
• Messages you send through the contact form or by email: until your question is handled, at most one year.

BudgetFit only uses cookies that are needed to make the app work. That is why you see no cookie banner.

• bfv_session: keeps you logged in. Expires after thirty days or when you log out.
• bfv_locale: remembers your language. Expires after one year.
• If you install BudgetFit as an app on your phone, your browser stores some of the app's files to load it faster. They contain no personal data.
• No advertising cookies, no analytics cookies, no third party cookies.

All traffic with the app is encrypted (https). Passwords are stored only as an encrypted hash. Database access is limited to what the app needs. Payments run entirely through Stripe, which meets the strictest standards for card data.

You may access your data, have it corrected or erased, restrict its processing, object, withdraw your consent and receive your data in a readable file.

Most of this you can do yourself: edit your profile under Profile, and delete your whole account with all data under Subscription. For anything else, email us; you will get an answer within a month. We may ask you to prove the account is yours.

If you think we are not handling your data properly, you may lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). We would rather hear from you first.

BudgetFit is meant for people aged 16 and over. If we notice that a younger child has an account, we delete it.

If something essential changes in how we handle your data, you will hear about it by email. The current version is always on this page, with the date at the top.

Questions about your privacy or your data? Email info@budgetfitcoach.nl or use the form below.