Privacy policy

This policy covers the ChargeRep app on iPhone and Apple Watch (and the Mac app once it ships) and the website chargerep.com. It says what personal data we process, why, on what legal basis, who else is involved, how long we keep it and what your rights are.

The short version

• Most of what you enter stays on your iPhone. We cannot see it unless you sign in and turn on sync.
• Health and body readings leave your iPhone only if you turn on “Back up health data”. Turning it off deletes them from our server.
• A meal photo is sent to the cloud only if you allow “cloud help” for photos. It then goes through our server in Frankfurt to Anthropic’s Claude model. We don’t store it; Anthropic deletes it within 30 days and doesn’t train on it.
• Our servers are in the EU (Frankfurt, Germany).
• No ads, no tracking, no selling of data, and no cookies on the website.
• You can export your data and delete your account in the app, in Settings.

Who is responsible

The controller for your personal data is Neurova AI, owned by Andreas Chitos, Heideveldstraat 6, 5643 CH Eindhoven, the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 94328900. You can reach us at support@chargerep.com or through the form on chargerep.com/help.

Data in the app

What stays on your iPhone and Apple Watch

The app stores these on your device:

• Your profile: first name (optional), birth date, sex, height, weight, goal, activity level, equipment, limitations and workday hours.
• Safety check: whether you should start gently. We keep only that setting, never your answers.
• Targets and plans: your calorie and nutrient targets, your training plan and progress in it.
• Food log: meals, foods, portions, water and caffeine, saved meals and the foods the app remembers for you.
• Movement: breaks, workouts, reps, effort ratings, XP, levels, streaks and badges.
• Body readings: weight, waist, body fat, resting heart rate, blood pressure, blood glucose and the other readings you add.
• Settings: reminders, theme, units and your consent choices.

We have no access to this data. It stays on your device until you delete it or the app. Body readings are left out of your iPhone’s backups. The rest of the app’s data is part of your iPhone’s own iCloud or computer backup if you use one; that backup is between you and Apple.

Your Apple Watch and iPhone talk to each other directly. Widgets, the Lock Screen countdown and the Live Activity read from your iPhone only.

Apple Health

With your permission, the app reads from Apple Health: weight, height, birth date, sex, waist, body fat, resting heart rate, heart rate variability, VO2 max, blood pressure, blood glucose, steps and sleep. It uses them to prefill your profile and to show trends. Values you accept become part of your profile on your iPhone; other readings are only shown, not stored by the app. With Premium, the app writes your plan workouts and the body weight you type in to Apple Health.

We never use Health data for advertising, never sell it and never store it in iCloud. You can change these permissions at any time in the Health app.

Calendar

If you allow it, the app reads when you are busy so breaks skip your meetings. It uses only the start and end times, on your iPhone, and never uploads anything from your calendar.

Account and sync (optional)

You can use the app without an account. The app creates an anonymous account only when you first use something that needs our server: cloud help for a photo, a purchase or signing in. That account is a random ID and holds no name or email address.

If you sign in with Apple, Apple gives us a stable user ID for the app and, if you share it, your first name. We do not ask Apple for your email address.

When you are signed in and agree on “Save your progress”, the app copies your profile, food log and progress (breaks, workouts, plans, XP) to our server, so you can restore them on a new iPhone. Body readings are copied only if you also turn on “Back up health data”, which asks for its own consent. Food memory and the app’s scan history are not part of sync. We also keep a record of each consent choice (what you chose, the wording version and when), as the law asks us to.

Cloud help for meal photos (optional)

The app first tries to recognise a meal photo on your iPhone and then, on iPhones that support it, with Apple Private Cloud Compute, which runs on Apple’s servers and keeps nothing. If that does not work, and only after you allow cloud help (the app names Anthropic before anything is sent), the photo is sent to our server in Frankfurt, which passes it to Anthropic’s Claude model. The model only suggests which foods and roughly how much; the nutrient values always come from food databases, and you confirm or change them.

What is sent: the photo, reduced to at most 1,024 pixels and without location or other metadata, and the names and usual portions of foods you picked for similar photos before, so the suggestion fits how you eat. Nothing else: no name, account details or health data. We don’t store the photo. Anthropic uses it only to return the answer and to protect its service against misuse, deletes it within 30 days, and does not use it to train its models. Our server keeps, per account and day, the number of cloud scans and the amount of processing used (tokens), to apply the free and Premium limits and to see our costs. You can switch cloud help to “Ask each time” or “Off” in Settings at any time.

Purchases

Apple handles every payment; we never see your card or bank details. For Premium, Apple sends us the purchase details we need to unlock it: transaction numbers, the product, purchase, renewal and expiry dates, whether a trial or refund applies, and whether it renews. We link them to your account ID so Premium works on your devices and our server knows your cloud scan limit.

Exercise photos and videos

The app downloads exercise photos and videos from our storage at Supabase. Like any download, the request includes your IP address and basic device information. It carries no account or health data, and the files are the same for everyone.

Barcode lookups

When you scan a barcode that is not in the app’s built-in food database, the app asks Open Food Facts (openfoodfacts.org), a French non-profit, directly for that product. Open Food Facts receives the barcode and your IP address and handles them under its own privacy policy. The product details are kept on your iPhone only.

Analytics and crash reports

The app contains no advertising, no tracking and no third-party analytics. If you allow sharing with app developers in your iPhone’s settings, Apple sends us anonymous crash reports and usage statistics through App Store Connect.

Data on the website

Visiting chargerep.com

The website is hosted by Cloudflare. To deliver pages and protect the site from attacks, Cloudflare processes your IP address and the details of each request (such as the page, time and browser). The website sets no cookies, uses no analytics or tracking and loads its fonts and images from our own domain.

The waitlist

If you join the waitlist, we store your email address, the language you picked and when you signed up and confirmed. You first get an email to confirm your address (double opt-in); without confirmation we delete it after 30 days. Every email has a link to delete your address at once. To stop abuse, we keep a one-way hash of your IP address, mixed with a secret, for 24 hours; we cannot turn it back into your IP address. Emails are sent through Resend.

The contact form and email to us

If you write to us through chargerep.com/help, the form sends your name (optional), email address, the type of request, your language and your message to our support inbox by email, through Resend. The website keeps no copy. For the rate limit we keep the same one-way IP hash for 24 hours. Emails you send to support@chargerep.com are forwarded by Cloudflare to the same inbox, which is hosted by Google Workspace.

Why we process your data and on what basis

Purpose	Data	Legal basis (GDPR)
Run the app’s features on your device	Profile, food log, movement, body readings	No processing by us; the data stays on your device
Sync and restore with an account	Account ID, profile, food log, progress	Contract (Art. 6(1)(b)) and, for health-related data, your explicit consent (Art. 9(2)(a))
Back up body readings	Body readings	Your explicit consent (Art. 9(2)(a))
Identify foods in a photo with cloud help	Meal photo, names and usual portions of earlier picks, scan counts	Your explicit consent (Art. 6(1)(a) and Art. 9(2)(a))
Sell and unlock Premium	Purchase details, account ID	Contract (Art. 6(1)(b))
Record your consent choices	Consent records	Legal obligation to prove consent (Art. 6(1)(c), Art. 7(1))
Answer questions and data requests	Contact details, message	Steps you asked for (Art. 6(1)(b)), our legal duties for data requests (Art. 6(1)(c))
Waitlist emails	Email address, language	Your consent (Art. 6(1)(a))
Keep the website, forms and servers secure	IP address, hashed IP, request logs	Our legitimate interest in a safe service (Art. 6(1)(f))

You can withdraw a consent at any time in the app’s Settings, or by using the delete link in a waitlist email. Withdrawing does not affect what happened before.

Who else processes your data

We use these service providers. Each processes data only on our instructions, under a data processing agreement:

• Supabase (Supabase Inc.): our database, sign-in, server functions and file storage, in the EU (Frankfurt, Germany).
• Anthropic (Anthropic, PBC, United States): the Claude model behind cloud help for meal photos, only when you allow it.
• Resend (Resend Inc., United States): sends waitlist emails and forwards contact form messages. Emails are sent from Ireland; Resend keeps its account records and email logs in the United States.
• Cloudflare (Cloudflare, Inc., United States, with EU entities): hosts the website and forwards emails sent to support@chargerep.com.
• Google (Google Cloud EMEA Limited, Ireland, part of Google LLC, United States): Google Workspace hosts our support inbox, where contact form messages and your emails to us arrive.

These organisations decide for themselves how they handle data and have their own privacy policies:

• Apple: the App Store and payments, Sign in with Apple, Apple Health, iCloud and the crash reports you share with developers.
• Open Food Facts: barcode lookups made directly from your iPhone.

We do not sell your data, share it for advertising or let anyone use it to train AI models.

Transfers outside the EU

Anthropic, Resend and Cloudflare are based in the United States, and so are the parent companies of Supabase and Google. Where personal data reaches the United States, the transfer is covered by the European Commission’s Standard Contractual Clauses and, where the company is certified, by the EU-US Data Privacy Framework. You can ask us for a copy of the safeguards.

How long we keep data

Data	How long
Data on your iPhone and Apple Watch	Until you delete it or the app
Synced data, consent records, purchase details and scan counts	Until you delete your account; deletion removes them from our database at once
Accounts you no longer use	Deleted automatically with all their data: an account without Sign in with Apple after 12 months without use, a signed-in account after 24 months without use. Using the app with the account counts as use, and an active Premium subscription keeps it
Body readings backed up on our server	Until you turn off “Back up health data” or delete your account
Database backups at Supabase	Up to 7 days, then overwritten
Server logs (no photos, no health values)	Up to 7 days
Records of handled App Store notifications (no personal data)	90 days
Meal photos at Anthropic (cloud help)	Up to 30 days, then deleted by Anthropic
Unconfirmed waitlist sign-ups	30 days
Confirmed waitlist sign-ups	Until we send the launch email, then deleted; or sooner if you use the delete link
Hashed IP addresses from the forms	24 hours
Support messages and data requests	As long as we need to answer, then deleted within 12 months; a short note that a data request was handled is kept for 2 years

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format and to withdraw consent. Most of this works directly in the app:

• Export: Settings → Privacy → Export my data gives you a JSON file with everything the app has stored.
• Delete: Settings → Privacy → Delete account and data removes your account and every row on our server, and revokes the app’s access to your Apple ID. Without an account, it erases the app’s data on your iPhone.
• Withdraw: Settings → Privacy lets you turn off sync, “Back up health data” and cloud help.

For anything else, write to us through chargerep.com/help or at support@chargerep.com. We answer within one month and may ask you to confirm that the data is yours before we act.

You may also complain to a data protection authority: in the Netherlands, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or the authority where you live or work.

Security

All traffic is encrypted (TLS). Each account can reach only its own rows in our database (row level security), data is encrypted at rest, and keys for Apple and Anthropic live only on our servers, never in the app. Our logs hold no photos, health values, email addresses or IP addresses.

Age

You must be 16 or older to use ChargeRep. If you are 16 or 17, the app sets your targets to keep your current weight and leaves out diet pace. We do not knowingly process data of anyone younger than 16.

Automated decisions

Your targets, plan and reminders are worked out by formulas on your iPhone from what you enter. They have no legal or similarly significant effect on you, and you can change them at any time.

Not a medical service

ChargeRep is a wellness app, not a medical device. We use health-related data only to run the features you choose, never to diagnose or treat anything.

Changes to this policy

When we change this policy, we update the date at the top. If a change affects how we use data you already gave us, we tell you in the app before it takes effect and ask for consent again where the law requires it.

Contact

Neurova AI, Heideveldstraat 6, 5643 CH Eindhoven, the Netherlands. Email support@chargerep.com, or use the form at chargerep.com/help.