Privacy policy

Last updated: October 10, 2026 · Terms of use · Français · Back to the app

1. Who is responsible for your data

Annelo is published by XFR3D (SIREN 931 577 472), the data controller. For any question or to exercise your rights: annelo@xfr3d.com.

2. The data we process

Account: email (or username), password (stored only as an irreversible hash), creation date, Google identifier if you sign in with Google, Premium status.
Profile: sex, age, height, weight, activity level, goal and calculation settings.
Journal and catalogue: what you eat (foods, quantities, times, calories and macros), your daily weight, your foods and recipes, your notes.
Automatic estimation (Premium): the texts, photos and voice dictations you send to get a food estimated, and the correction conversation.
Subscription: store (Apple or Google), product, subscription reference, status and end date. We receive neither your card number nor your payment details.
Technical: a session cookie and a few preferences (see section 7), a daily counter of estimations per account, and activity tracking without content (last login, number of estimations, technical errors), kept 400 days at most. If you ask for a new password, a single-use link valid for 30 minutes is sent to you by email.

Your weight and diet can reveal information about your health. We use them only to run Annelo for you: calculations, statistics, printable report. We do no advertising, no profiling and no resale.

3. Why and on what basis

Providing the service you asked for (account, journal, statistics, subscription): performance of the contract.
Health data (weight, diet) and automatic estimation: your consent, given by entering this data and starting an estimation yourself. You can withdraw it by deleting the data or your account.
Security, preventing abuse and limiting the cost of estimations: legitimate interest.

4. Automatic estimation (OpenAI)

When you request an estimation, the text, photo or voice recording, and your correction conversation, are sent to our provider OpenAI (United States), using a key specific to Annelo and without your name or email. OpenAI processes this content to answer. We ask it not to store it (setting store: false) and, according to its documentation, it does not use it to train its models; it may however keep a technical copy for up to 30 days in its abuse-monitoring logs. For a branded product, the food description also serves as a web search query run by OpenAI.

Photos are not kept by Annelo: they are used for the estimation and then disappear.
Voice dictations are transcribed by OpenAI, and the recording is kept 14 days on our server before automatic deletion, or as soon as you delete your account.
Correction conversations stay 24 hours in our server's memory, then are forgotten.
Estimations are rough figures, never medical advice.
To improve estimations, a food name and its macros may be stored in a shared cache, unrelated to your account, only after several matching uses by several people.

5. Sign in with Google

If you choose "Continue with Google", we only ask for your verified email address and your Google identifier (scopes openid and email). We do not access your contacts, calendar or files, and share nothing back with Google. Annelo's use of information received from Google complies with the Google API Services User Data Policy, including its Limited Use requirements. You can revoke access from your Google account.

6. Purchases and subscription

The Premium subscription is sold and billed by Apple (App Store) or Google (Play). We receive from them the confirmation of your subscription to turn Premium on or off. Cancellation and refunds are handled with the relevant store; deleting your Annelo account does not cancel a subscription.

7. Cookies and local storage

Annelo uses a strictly necessary session cookie (30 days, not readable by scripts), and browser storage for your preferences: language, theme, units, statistics period and the clipboard used to copy entries. No advertising cookies or audience measurement tools. Charts and the font are served by Annelo itself: nothing is loaded from a third-party site.

8. Who has access

Only you see your journal in the app.
Annelo's administration can view an account's journal, for support and maintenance.
Providers (processors):
- OpenAI: automatic estimation and dictation transcription (United States, see section 4).
- Google: sign in with Google, if you choose it (section 5).
- OVH: sending password reset emails (your email address and the link go through its servers).
Apple and Google, for the subscription.

9. How long

Account data, journal, catalogue: as long as your account exists, deleted when you delete it.
Voice dictations: 14 days at most. Sessions: 30 days. Reset link: 30 minutes.
Activity tracking without content: 400 days at most, deleted with the account.
Server security backups: they may still contain your data until they are rotated, and are never used for anything other than restoring the service.

10. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability, and the right to withdraw your consent at any time.

Rectify: profile, journal and catalogue can be edited in the app; email and password in the account settings.
Delete: account settings, "Delete my account". Your account and all your data (profile, journal, catalogue, dictations, sessions, activity tracking) are deleted immediately, after confirmation with your password (or by typing "supprimer" for a Google account).
Get a copy: the printable report for the period of your choice is available in the app; for a full copy of your data, write to us and we will answer within one month.
Other requests: annelo@xfr3d.com.

If you believe your rights are not respected, you can complain to the CNIL (cnil.fr) or to your local data protection authority.

11. Security

Passwords are hashed, exchanges use HTTPS and login attempts are rate-limited.

12. Changes

If this policy changes significantly, we will say so in the app. The update date is at the top of the page.