The controller of your personal data is FILIPPOV MIKHAIL VLADIMIR, IE, an individual entrepreneur registered in the Republic of Armenia, Komitas Ave. 59/12, 336, Yerevan 0012, Armenia (“we”, “us”). Contact: support@veilvpnapp.com.
This policy explains what the Protty mobile application (the “App”) collects, why, who it is shared with, and your rights.
When you first open the App, our server issues a random identifier that is stored on your device. It is how the App syncs your data; it is not linked to your name, email or phone number, which we don't ask for.
To calculate your calorie target and build a plan, the App asks about you: sex, age, height, current and target weight, activity level, goals, diet and foods you avoid, cuisines you like, cooking time and kitchen equipment, household size, wake-up time, eating habits and the challenges you want help with, and — only if you choose to tell us — health conditions relevant to eating. These answers are stored on our servers so your plan works across sessions.
Meals and portions, the nutrition totals derived from them, weight entries, energy check-ins, your meal plan, fridge contents and shopping list, recipe ratings, and recipes you create.
Product and dish names, descriptions and the ingredients you list are sent to our AI providers to estimate nutrition or generate a recipe.
Subscriptions are bought through Apple; we never receive your payment card details. We receive your subscription status (plan, trial, renewal, cancellation) from Apple and through our subscription-analytics provider Apphud.
We record how the App is used — for example which screens are opened, which features are used, whether a purchase was started or completed, words you search for in the recipe catalogue (so we can add dishes people look for), and app errors — together with your device model, operating-system and app version, app language and App Store country. To understand which kinds of people the App helps, analytics also receives a few coarse profile facts: your goal, sex, an age range (not your exact age), diet type, activity level, cooking time, household size and how you heard about us.
Analytics never receives your weight, height, body-mass index, health conditions, what you ate, or your photos.
If you installed Protty from an Apple Search Ads advertisement, the App asks Apple for an attribution token and passes it to Apphud, which retrieves the campaign, ad group and keyword that led to the install. This uses Apple's AdServices framework and does not involve tracking you across other companies' apps. If you didn't come from an ad, no campaign information exists.
Like any internet service, our hosting provider processes your IP address to deliver requests to our servers. We don't use it to identify you or build a profile.
Information about your body, weight, eating and health is a special category of personal data. We process it only on the basis of your explicit consent, which you give on the questionnaire screen before any such data is entered — you can't continue without it, and you can decline by not using the App. You can withdraw consent at any time by deleting your data in the App (Profile → Delete my data); this doesn't affect processing that happened before.
| Purpose | Legal basis |
|---|---|
| Calculating your targets, building and adjusting your plan, logging and showing your progress | Performance of our contract with you; explicit consent for health data |
| AI features: nutrition estimates, recipe and image generation | Performance of contract; explicit consent for health data |
| Providing Premium and checking your subscription | Performance of contract |
| Product analytics to understand and improve the App | Our legitimate interest in improving the App — you can object at any time (see section 8) |
| Security, preventing abuse, fixing faults | Our legitimate interest |
| Keeping records where the law requires | Legal obligation |
We don't sell your personal data, we don't use it for advertising, and we don't track you across other companies' apps or websites. We share data only with service providers that process it on our behalf to run the App:
| Provider | What for | What they receive |
|---|---|---|
| Railway Corporation | Hosting our servers and database | All data stored by the App's server |
| Google (Gemini API) | Nutrition estimates from photos and text; recipe generation | Meal photos you analyse; text you enter for AI features |
| Anthropic (Claude API) | Backup provider for recipe generation | Dish names and ingredient lists you enter |
| fal.ai | Generating images of your dishes | The name of the dish |
| Amplitude (EU data centre) | Product analytics | Usage events and the coarse profile facts described in section 2 — never weight, health conditions, meals or photos |
| Apphud | Subscription analytics; Apple Search Ads attribution | Anonymous identifier, purchase and subscription status, device and app information, Apple Search Ads attribution token |
| Apple | App distribution and payments | Purchases, under Apple's own privacy policy |
We may also disclose data where required by law or to protect our rights, users or the public.
Some of our providers process data outside your country, including in the United States. Where data from the European Economic Area, the UK or Switzerland is transferred to countries without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the provider's certification under the EU–U.S. Data Privacy Framework.
We keep your data for as long as you use the App. When you use Profile → Delete my data, your account and everything linked to it — questionnaire answers, logs, plan, recipes and uploaded or generated dish images — is deleted from our servers immediately, and the App's data is erased from your device. Data on your device is also removed when you delete the App. Transaction records kept by Apple and Apphud are subject to their own retention policies.
Depending on where you live, including under the EU and UK GDPR, you have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time.
You also have the right to complain to your local data-protection authority.
The App is not intended for anyone under 16, and we don't knowingly collect data from them. If you believe a child has used the App, contact us and we will delete the data.
Data travels between the App and our servers over encrypted connections (HTTPS), and access to our systems is restricted. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.
If we change this policy, we'll update the date above and, for significant changes, let you know in the App before they take effect.
support@veilvpnapp.com
FILIPPOV MIKHAIL VLADIMIR, IE, Komitas Ave. 59/12, 336, Yerevan 0012, Armenia.