spoonlet.

YOUR DIARY, YOUR CHOICE

Privacy Policy

Privacy, in plain words.

Last updated: 11 September 2026

Spoonlet is provided by Health3 AG, Wiesenstrasse 10A, 8952 Schlieren, Switzerland. Contact us at support@health3.app about privacy or support.

The food diary

Your meals, ingredient searches, food labels, favorites, goals, reviews and drafts are stored in the app on your device. Spoonlet does not send this diary to our servers or to RevenueCat. No user account is needed.

The app keeps a previous local save for recovery. If a diary is damaged, it can preserve that damaged copy while recovering a valid save. These recovery files remain in the app’s local storage.

Backups, sharing and deletion

Spoonlet excludes its diary from automatic device cloud backups and requests exclusion from automatic device transfer. Use Settings → Export a backup before replacing your phone or uninstalling. Operating-system behavior can vary; your exported copy is the transfer method Spoonlet supports.

You choose where an exported backup or PDF is shared. Those destinations have their own privacy practices. Settings → Erase local diary removes the active diary, local recovery copies and Spoonlet’s temporary exports. It keeps appearance preferences, your weight-unit preference and store purchase access. Previously exported or shared copies must be deleted separately wherever you saved them.

Optional Plus purchases

Apple or Google processes payment. RevenueCat helps validate purchases, restore access and manage subscription entitlements. It processes an anonymous app user identifier, purchase records and technical details such as platform, app/SDK version, locale and currency. The purchase service can initialize when the app opens, even before you buy Plus. It does not receive your food diary. Spoonlet does not set identifying customer attributes or enable advertising attribution or optional SDK diagnostics.

RevenueCat’s purchase dashboard provides purchase analytics. This is separate from food or behavioral tracking. We do not sell your diary, add advertising trackers, or use diary data for targeted advertising. See RevenueCat’s privacy information and the privacy information of your app store.

Service providers and protection

We require service providers processing information on our behalf to protect it consistently with this policy and applicable data-protection obligations. Their access is limited to providing the relevant purchase, hosting or support service. Apple and Google also process store information under their own privacy terms. Your food diary is not shared with these service providers.

When you contact support

If you email us, we receive the address and information you choose to send. We use it to respond and resolve issues. Please send only the details needed; a phone model and description of the problem are usually enough. We do not receive a diary backup unless you decide to attach one.

This website

These pages do not use advertising or analytics scripts. Netlify hosts this website and processes ordinary request information, such as IP address and connection logs, to deliver and protect it. See Netlify’s privacy policy. Links to other services follow those services’ privacy practices.

Retention and your choices

Local diary data remains until you erase it or remove the app. Exported copies remain where you save them. Support correspondence is retained as needed to resolve your request and keep appropriate support records. Purchase-related records may be retained as needed to provide access, prevent fraud and meet legal requirements.

We cannot retrieve a diary stored only on your phone. See “Your rights” below for how to request access, correction or deletion of information you have provided to us.

Data controller and EU/UK representatives

Health3 AG, Wiesenstrasse 10A, 8952 Schlieren, Switzerland, is the data controller for the information described in this policy. Data-protection questions can be sent to privacy@health3.app or support@health3.app.

Health3 AG is based in Switzerland, outside the EU/EEA and the United Kingdom. Under Article 27 of the EU GDPR and the UK GDPR we have appointed representatives that you and data-protection authorities can contact about how your personal data is handled:

Legal bases for processing

Where the EU GDPR, UK GDPR or the Swiss Federal Act on Data Protection (FADP) applies, we process personal data on these bases:

We do not sell personal data and do not use it for automated decisions that produce legal or similarly significant effects for you.

International transfers

RevenueCat processes purchase records in the United States. Netlify may process website request logs in the United States. Apple and Google process store data under their own terms. Where personal data leaves Switzerland, the EEA or the UK, we rely on the recipient’s adequacy status or on standard contractual clauses and comparable safeguards required by the FADP, EU GDPR and UK GDPR.

Your rights

Depending on where you live, you have the right to access, rectify, erase or receive a copy of the personal data we hold about you, to restrict or object to its processing, and to withdraw consent where processing is based on consent. Contact support@health3.app or privacy@health3.app to exercise these rights. We may ask for enough information to verify your request and will respond within the time the applicable law allows. Store payment records and subscription cancellation are managed through Apple or Google.

You also have the right to lodge a complaint with a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EEA your local data-protection authority, and in the United Kingdom the Information Commissioner’s Office (ICO). Residents of the United States may contact the Federal Trade Commission or their state Attorney General.

Children

Spoonlet is not directed at children and is not intended for individuals under 16. If we learn that we have collected personal data from a child, we will delete it.

General information

Spoonlet provides food records and general information, not diagnosis or treatment. If the service or its data practices change, we will update this policy and provide any notice or choice required for the change.