Last updated: September 1, 2026
1. Data Controller
The controller of your personal data is Dieter App. For matters related to the protection of personal data, you can contact us at: contact@mydieter.com.
2. What Data We Collect
When using the Dieter application, we collect the following data:
Data provided by the user:
- Account data: name, email address, password (stored in encrypted form)
- Dietary data: diet plans, meals, ingredients, shopping lists
- Preferences: app language, unit system, currency
- How you found us: the signup form asks, optionally, where you heard about Dieter, with answers such as “Instagram” or “my dietitian”. If you answer, we store that answer with your account and use it only to see which of our own channels people arrive from. The question can be skipped and the app works exactly the same without it; we learn nothing beyond the answer itself, and it is never passed to advertisers.
- Client health data: where a dietitian keeps records for a client, they may enter that client’s sex, date of birth, height, weight, body fat percentage, body measurements (chest, waist, hips, arm, thigh), allergies and intolerances, dietary goal and daily calorie and macronutrient targets. All of it is optional, the application works without any of it. Figures such as BMI and estimated energy requirement are calculated from these values when a screen is opened and are never stored. These data are not used for advertising, analytics or personalisation, and are never passed to the processors listed in section 4.
- Whose data this is: the health data above concerns the dietitian’s client, who is usually not the holder of the account that entered it. The dietitian decides what to record and is responsible for informing their client and for obtaining any consent required; we store it on their behalf and use it for no other purpose. A client with an account of their own sees the plan they have been given, and their dietitian’s records about them remain with that dietitian.
Automatically collected data:
- Technical data: device information, IP address (for session security)
- Push notification token: if you allow notifications, we store the identifier issued by Firebase Cloud Messaging (Google) so we can deliver notifications to your device - invitations, changes to diet access, and the reminders you set. The token is used solely to deliver them, does not identify you outside the app, and disappears when you turn notifications off or remove the app. You choose which kinds you receive in Settings.
- Activity data: date of last activity
- Contact form: if you write to us through the form on mydieter.com, we receive the message you typed, the page you sent it from, and your email address if you chose to give one. The address is optional and is used only to reply. The message reaches our mailbox and stays there as long as the matter is open, on the basis of our legitimate interest in answering people who write to us (Art. 6(1)(f) GDPR).
- Web server logs: when you visit mydieter.com, the server records your IP address, the date and time of the request, and your browser type. We use these solely for security and diagnostics, on the basis of our legitimate interest (Art. 6(1)(f) GDPR). The website itself uses no cookies and no analytics tools.
3. Purpose of Data Processing
We process your data for the following purposes:
- Creating and managing a user account
- Email address verification and account security
- Enabling creation and management of dietary plans
- Sharing diets and shopping lists with other users (groups)
- Sending notifications related to the application (verification, invitations, password reset)
- Allowing a dietitian to record a client’s parameters and measurements, to work out the figures that follow from them, and to follow that client’s progress over time
- Allowing a dietitian to record a client’s parameters and measurements, to work out the figures that follow from them, and to follow that client’s progress over time
4. Data Sharing
We do not sell or share your personal data with third parties for marketing purposes.
Data may be processed by the following entities solely to the extent necessary for the application to function:
- Mailgun - sending transactional emails (account verification, password reset, invitations)
- Zoho - the mailbox that receives messages sent through the contact form (servers in the EU)
- Stripe - subscription payment processing
- Hosting provider - storing data on servers
- Google AdMob - serving ads only in the free version of the app (see the advertising section below)
Client health data is shared with none of the above. It stays on our servers, is used only to show it back to the dietitian who entered it, and is never sent to the advertising, payment or email providers listed here.
5. Data Security
We apply appropriate technical and organizational measures to protect your data:
- Passwords are encrypted using the bcrypt algorithm
- Communication with the server is via encrypted connection (HTTPS)
- Access tokens have a limited validity period
- User sessions are monitored and can be revoked
6. Data Retention
We store your data as long as you have an active account in the application. After deleting your account, your data will be permanently removed from our servers.
A client’s health data lives with that client’s record. Deleting the client removes their parameters and every measurement recorded for them; deleting the dietitian’s account removes all of their client records along with it. A dietitian can also clear any single figure at any time by emptying the field, and delete an individual measurement from the client’s progress screen.
7. Your Rights
In accordance with applicable regulations, you have the right to:
- Access your personal data
- Rectification of inaccurate data
- Erasure of data (right to be forgotten)
- Restriction of processing
- Data portability
- Object to processing
To exercise these rights, contact us at: contact@mydieter.com. You can also delete your account and data yourself in the app.
8. Advertising
In the free version of the app we show ads provided by Google AdMob. Users with an active subscription (Premium, Dietitian) do not see ads. AdMob may process device identifiers to serve ads. In the European Economic Area we ask for your consent to ads on first launch (Google consent mechanism); without consent to personalization, ads are non-personalized. On Apple devices we do not ask for tracking permission (App Tracking Transparency) at all, so ads shown there are never personalized. Apart from advertising, the app does not use third-party analytics or tracking tools. Google policy: policies.google.com/technologies/ads.
9. Changes to Privacy Policy
We reserve the right to update this privacy policy. We will inform users of significant changes via the application or email.
10. Contact
If you have questions about privacy or personal data, contact us:
E-mail: contact@mydieter.com