spoonlet.

YOUR DIARY, YOUR CHOICE

Privacy Policy

Privacy, in plain words.

Last updated: 21 September 2026. This policy also appears, in summary, under Settings → Privacy & purchases in the app.

Spoonlet is provided by Health3 AG, Wiesenstrasse 10A, 8952 Schlieren, Switzerland. Contact us at support@spoonlet.app about privacy or support.

The food diary

Your meals, ingredient searches, food labels, favorites, goals, reviews and drafts are stored in the app on your device. Spoonlet does not send this diary to our servers or to RevenueCat. No user account is needed.

The app keeps a previous local save for recovery. If a diary is damaged, it can preserve that damaged copy while recovering a valid save. These recovery files remain in the app’s local storage.

Backups, sharing and deletion

Spoonlet excludes its diary from automatic device cloud backups and requests exclusion from automatic device transfer. Use Settings → Export a backup before replacing your phone or uninstalling. Operating-system behavior can vary; your exported copy is the transfer method Spoonlet supports.

You choose where an exported backup, PDF or share image is shared. A share image shows the meals and ingredients you picked, your totals and a link to the app; it contains no other diary data. Those destinations have their own privacy practices. Settings → Erase local diary removes the active diary, local recovery copies and Spoonlet’s temporary exports. It keeps appearance preferences, your weight-unit preference and store purchase access. Previously exported or shared copies must be deleted separately wherever you saved them.

Anonymous usage statistics (optional)

Spoonlet can send anonymous usage statistics so we can see which parts of the app work and which do not. This is off unless you turn it on, either on the one-time question shown after your first logged meal or under Settings → Anonymous usage statistics, and you can turn it off at any time in the same place.

When it is on, the app sends event names such as “meal logged”, “share card exported” or “evening check-in enabled”, with small non-personal properties (counts, yes/no values, the app language), together with technical context: app version, operating system version, device model, screen size, locale, time zone and connection type. Events are grouped under a random install identifier generated by the analytics library. We never link that identifier to a name, email, purchase record or account, and we never send your meals, ingredients, search words, goals in grams, label values, nicknames, backups or share images. The full list of events is published in the app’s repository documentation and summarised in the app.

The processor is PostHog (PostHog Inc., hosted for us in the European Union in Frankfurt, Germany). The client IP address is used only to derive a country and is then discarded; session recording, automatic screen capture and error tracking are switched off. Turning the setting off stops sending and discards the install identifier, so a later opt-in starts from a fresh one. Events already sent are anonymous and cannot be traced back to you; we therefore cannot single them out for deletion. See PostHog’s privacy policy.

Home screen widget

If you add the Spoonlet widget, the app stores today’s total protein and fibre grams, your optional goals, your focus setting and whether Plus is active in a container shared only between the app and its widget on your device (an iOS App Group). No meal names or ingredients are written there, and nothing is sent anywhere. Removing the app removes the widget data.

Suggestions, feedback and ratings

Goal suggestions and close-the-gap ideas are calculated on your device from the built-in food catalog and public reference values; the weight you enter for a suggestion is used for that calculation only and is not stored. The app may occasionally ask your app store to show its standard rating prompt after a period of use; that prompt is provided by Apple or Google and sends nothing to us. If you choose Send feedback, your mail app opens with a draft containing only the app version and platform.

Optional Plus purchases

Apple or Google processes payment. RevenueCat helps validate purchases, restore access and manage subscription entitlements. It processes an anonymous app user identifier, purchase records and technical details such as platform, app/SDK version, locale and currency. The purchase service can initialize when the app opens, even before you buy Plus. It does not receive your food diary. Spoonlet does not set identifying customer attributes or enable advertising attribution or optional SDK diagnostics.

RevenueCat’s purchase dashboard provides purchase analytics. This is separate from food or behavioral tracking. We do not sell your diary, add advertising trackers, or use diary data for targeted advertising. See RevenueCat’s privacy information and the privacy information of your app store.

Service providers and protection

We require service providers processing information on our behalf to protect it consistently with this policy and applicable data-protection obligations. Their access is limited to providing the relevant purchase, hosting, analytics or support service. Apple and Google also process store information under their own privacy terms. Your food diary is not shared with these service providers.

When you contact support

If you email us, we receive the address and information you choose to send. We use it to respond and resolve issues. Please send only the details needed; a phone model and description of the problem are usually enough. We do not receive a diary backup unless you decide to attach one.

This website

These pages do not use advertising or analytics scripts. Netlify hosts this website and processes ordinary request information, such as IP address and connection logs, to deliver and protect it. See Netlify’s privacy policy. Links to other services follow those services’ privacy practices.

Retention and your choices

Local diary data remains until you erase it or remove the app. Exported copies remain where you save them. Support correspondence is retained as needed to resolve your request and keep appropriate support records. Purchase-related records may be retained as needed to provide access, prevent fraud and meet legal requirements.

We cannot retrieve a diary stored only on your phone. See “Your rights” below for how to request access, correction or deletion of information you have provided to us.

Data controller and EU/UK representatives

Health3 AG, Wiesenstrasse 10A, 8952 Schlieren, Switzerland, is the data controller for the information described in this policy. Data-protection questions can be sent to privacy@health3.app; everyday support is at support@spoonlet.app.

Health3 AG is based in Switzerland, outside the EU/EEA and the United Kingdom. Under Article 27 of the EU GDPR and the UK GDPR we have appointed representatives that you and data-protection authorities can contact about how your personal data is handled:

Legal bases for processing

Where the EU GDPR, UK GDPR or the Swiss Federal Act on Data Protection (FADP) applies, we process personal data on these bases:

We do not sell personal data and do not use it for automated decisions that produce legal or similarly significant effects for you.

International transfers

Anonymous usage statistics are stored in the European Union. RevenueCat processes purchase records in the United States. Netlify may process website request logs in the United States. Apple and Google process store data under their own terms. Where personal data leaves Switzerland, the EEA or the UK, we rely on the recipient’s adequacy status or on standard contractual clauses and comparable safeguards required by the FADP, EU GDPR and UK GDPR.

Your rights

Depending on where you live, you have the right to access, rectify, erase or receive a copy of the personal data we hold about you, to restrict or object to its processing, and to withdraw consent where processing is based on consent. Contact support@spoonlet.app or privacy@health3.app to exercise these rights. We may ask for enough information to verify your request and will respond within the time the applicable law allows. Store payment records and subscription cancellation are managed through Apple or Google.

You also have the right to lodge a complaint with a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EEA your local data-protection authority, and in the United Kingdom the Information Commissioner’s Office (ICO). Residents of the United States may contact the Federal Trade Commission or their state Attorney General.

Children

Spoonlet is not directed at children and is not intended for individuals under 16. If we learn that we have collected personal data from a child, we will delete it.

General information

Spoonlet provides food records and general information, not diagnosis or treatment. If the service or its data practices change, we will update this policy and provide any notice or choice required for the change.