Privacy Policy

Version 2026-05-30 · May 30, 2026 · Minimum age: 16 years

This Privacy Policy describes how Gilean collects, uses, stores and protects personal data of users of the application.

Important note: this draft is not legal advice. Before commercial publication of the App, it should be reviewed by a qualified legal professional, especially to complete controller details, actual providers, retention periods and final legal bases.

1. Data controller

The data controller will be identified in the published version of the App and in Gilean's official channels.

Until legal review is completed, the controller's contact details should be considered to be completed.

2. Minimum age

Gilean is intended for users who are at least 16 years old.

By creating an account, you confirm that you are at least 16 years old. If Gilean becomes aware that an account was created by a user under this age, it may take appropriate measures, including suspension or deletion of the account.

3. Personal data processed

Gilean may process the following categories of data:

3.1 Account data

• email address;
• name or display name;
• user identifier;
• authentication provider used, if you sign in through social services;
• account creation and update date;
• email confirmation status.

3.2 Questionnaire data

To generate a personalized plan, you may provide:

• age;
• biological sex;
• height;
• weight;
• personal goal;
• desired time to reach the goal;
• eating habits;
• food preferences, intolerances or restrictions;
• physical activity level;
• information about training, sleep, lifestyle and custom requests;
• intermittent fasting preferences, if enabled by you.

3.3 Plan and progress data

Gilean may process:

• generated nutrition and training plans;
• food items marked as consumed;
• extra food items added by the user;
• calorie and macro-nutrient estimates;
• weight and body measurements entered by the user;
• progress photos uploaded by the user;
• shopping list data and ingredients marked as purchased.

3.4 Technical data

Gilean may process technical data necessary for the operation of the App, including:

• language selected or detected from the device;
• session information;
• technical logs;
• application errors;
• data necessary for security, authentication and abuse prevention.

4. Purposes of processing

Personal data is processed to:

• create and manage the user account;
• authenticate the user;
• generate personalized nutrition and training plans;
• save questionnaires, plans, progress and settings;
• show calories, macro-nutrients, measurements, photos and goal progress;
• estimate calories and macro-nutrients for food items added by the user;
• manage password reset, email confirmation and account security;
• allow deletion of data or the account;
• improve the App's stability, security and technical quality;
• comply with legal obligations or respond to lawful requests from authorities.

5. Legal bases for processing

Legal bases may include:

• performance of a contract or pre-contractual measures, to provide the features requested by the user;
• user consent, where required, for example for processing particularly sensitive data or optional features;
• legitimate interest, for security, abuse prevention, technical improvement and error management;
• legal obligation, where processing is necessary to comply with applicable law.

6. Health and wellness-related data

Some data entered by the user, such as weight, body measurements, progress photos, physical goals, eating habits, fasting preferences and information about personal conditions, may be considered sensitive data or otherwise delicate information.

Gilean processes this data only as necessary to provide the features requested by the user and according to the settings selected in the App.

You should avoid entering unnecessary medical information or data relating to third parties.

7. Use of artificial intelligence services

To generate plans, estimate foods and personalize content, Gilean may send certain questionnaire and account information to third-party artificial intelligence services, such as Google Gemini or equivalent providers.

The information sent is limited to what is necessary to generate the requested content.

Where possible, Gilean should avoid sending unnecessary direct identifiers, but personal or sensitive information may be included in prompts if provided by the user and necessary for personalization.

AI-generated content may be saved in the user's account so it can be displayed in the App.

8. Providers and data recipients

Gilean may use technical providers for:

• authentication;
• database;
• storage;
• serverless functions;
• email delivery;
• artificial intelligence;
• hosting and infrastructure;
• technical monitoring and security.

Expected providers may include Supabase, Google Gemini and other services necessary for the operation of the App.

Providers process data according to their own terms and, where required, under data processing agreements.

9. International transfers

Some providers may process data outside the European Economic Area.

In such cases, Gilean will adopt appropriate measures under applicable law, such as adequacy decisions, standard contractual clauses or other suitable legal tools.

This section must be completed in the final version based on the providers actually used.

10. Data retention

Data is retained for as long as necessary to provide the Service, maintain the account, comply with legal obligations, manage security and resolve possible disputes.

In general:

• account data is retained while the account remains active;
• questionnaires, plans, measurements, photos and logs are retained while the user maintains the account or until deletion is requested;
• some technical logs may be retained for limited periods for security and maintenance;
• data required by legal obligations may be retained for the period required by law.

You may delete data or the entire account through the features available in the App, where provided.

11. User rights

Within the limits set by applicable law, you may exercise the following rights:

• access to your data;
• correction of inaccurate data;
• deletion of data;
• restriction of processing;
• objection to processing;
• data portability;
• withdrawal of consent, where processing is based on consent;
• complaint to the competent supervisory authority.

To exercise these rights, you may contact the controller using the contact details provided in the published version of the App.

12. Security

Gilean adopts reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration or disclosure.

No information system can guarantee absolute security. You must protect your credentials and use secure passwords.

13. Account and data deletion

You may request deletion of your data or of your entire account through the dedicated section in the App, if available.

Account deletion results in loss of associated data, including plans, questionnaires, photos, measurements and food logs, except for data that must be retained for legal or security reasons.

14. Changes to this Privacy Policy

Gilean may update this Privacy Policy over time.

In case of material changes, you may be informed through the App, by email or by other appropriate means. Where required, you may be asked to accept the updated version again.

The version and date shown at the top identify the applicable text.

15. Contact

For questions about this Privacy Policy or to exercise your privacy rights, you may contact the controller at the email address that will be provided in the published version of the App.