Privacy Policy

Summary

We are Verd Apps S.L. (CIF [CIF pendiente]), and we build wellness apps under the Verdapps brand. This policy explains what data we collect, why, and what choices you have. We collect as little as we can. We do not sell behavioural data.

• How we collect your personal data;
• What personal data we collect;
• Who we share it with; and
• The rights and choices you have.

1. Who we are

When we say “Verdapps,” “our,” “we,” or “us,” we mean Verd Apps S.L.. This Privacy Policy applies to all of our apps, services, and the verdapps.io website (together, “Services”) unless specified otherwise.

This Privacy Policy explains how we will use personal data about you and the steps we take to ensure your personal data is kept secure and confidential. It should be read together with our Terms of Service.

2. How we collect personal data

We may collect personal data from you through our website, mobile applications, or other channels operated by or on behalf of Verdapps.

3. What personal data we collect

Data you provide voluntarily

• Contact details (name, email address);
• Account credentials;
• Profile data (such as preferences and dietary settings);
• Meal photos, where an app offers AI-based nutrition scanning;
• Other data you choose to give us.

Meal photos (AI nutrition scanning)

Apps such as Cal Eat let you take a photo of a meal to get an AI nutritional estimate. When you do this, that photo is:

• Sent to our AI provider (Google Gemini) to analyse the meal and estimate its calories and nutrients; and
• Stored on our servers (Firebase Storage), linked to your account, so the photo stays attached to that entry in your meal history and you can look back on it later. We do not discard the photo after analysis.

We do not use meal photos for any purpose beyond providing and improving this feature, we do not sell them, and we do not share them with advertisers. You can request deletion of your meal photos at any time as described in Section 13.

Data we collect automatically

• Usage analytics (anonymous);
• Device data (type, OS, language);
• Approximate location based on IP;
• Cookies and similar technologies.

Data we obtain from third parties

Where you connect via Apple, Google, or another platform, we may receive basic profile information from that platform. We never receive sensitive categories of data (health, race, religion, political opinions) unless you explicitly provide them through a feature designed for that purpose.

4. How we use your personal data

We may use your personal data to:

• Provide and improve the Services;
• Send service-related messages;
• Respond to support requests;
• Detect and prevent fraud or abuse;
• Comply with legal obligations.

We do not sell your data. We do not share it with advertisers for behavioural targeting.

5. Legal grounds for processing

We rely on (i) your consent, (ii) the performance of a contract with you, (iii) our legitimate interests, and (iv) compliance with legal obligations.

6. Who we share your data with

• Service providers who process data on our behalf, including our AI provider (Google Gemini), which processes meal photos and text you submit to generate nutritional estimates;
• Authorities, where legally required;
• Anyone else, only with your consent.

7. Cookies

We use a minimal set of cookies and similar technologies to make the Services work and to understand anonymous usage. You can disable cookies in your browser settings.

8. Advertising

We do not display third-party advertising on our Services and we do not sell your data to advertisers.

9. Data security

We use HTTPS, encryption in transit, and reasonable technical and organisational measures to protect your data. No transmission over the internet is fully secure, so we cannot guarantee absolute protection.

10. Data retention

We retain your personal data only as long as needed for the purposes described in this policy and as required by law.

11. International transfers

Our Services are global and your data may be processed outside your country of residence. Where this happens, we use the EU Standard Contractual Clauses as safeguards.

12. Age limits

Our Services are not directed to children under 13. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us data, please contact us.

13. Your rights and how to contact us

You have the right to:

• Access: request copies of your personal data;
• Rectify: correct inaccurate or incomplete data;
• Erase: ask us to delete your data;
• Restrict: limit how we use your data;
• Portability: receive your data in a portable format;
• Object: oppose certain uses of your data;
• Complain: file a complaint with the Spanish data protection authority (AEPD).

To exercise any of these rights, write to hello@verdapps.io.

Changes to this Policy

We may amend this policy from time to time. The date at the top of this page reflects the most recent revision. If we make significant changes, we will notify you.