Replify Fuel Privacy Notice

Effective date: September 28, 2026

1. Data Fuel keeps

• Account: your Replify account id, name, email and profile picture link from Replify, language, time zone, chosen accent and style.
• Home member profile: name, sex, date of birth, height, activity level, goal (gain, maintain, lose), dietary restrictions (free text), calorie and protein targets and their history.
• Health data (special category, GDPR Art. 9): weight, food diary (what, when and how much was eaten, calories, protein, fat, carbs, alcohol), dietary restrictions that may reveal allergies, conditions or beliefs, and the estimated energy expenditure.
• Family members: profiles, weight and diaries of the people you add to your home, including people without an account such as children.
• Home data: home name, menu, weekly template, recipes, pantry and its movements, shopping list, saved sets, own products and label photos, how the family names products, order and receipt texts you paste or photograph, and the action history used for undo.
• Telegram (if you connect it): chat id and title, messages and photos you send to the bot, reminder settings.
• Consent: when and which version of these documents was accepted.

2. Purposes and legal basis

• Explicit consent (GDPR Art. 9(2)(a)): processing weight, food diary and dietary restrictions, yours and your family members', to calculate targets, build the menu and shopping list, adjust portions and estimate energy expenditure. Consent is given with a separate checkbox on first use.
• Performance of contract (GDPR Art. 6(1)(b)): running the app: sign-in, home, menu, pantry, shopping list, recipes, Telegram bot, the link with Replify.
• Legitimate interest (GDPR Art. 6(1)(f)): security, abuse prevention (request limits), fixing errors.

3. Who sees data inside a home

All members of a home see the menu, pantry, recipes, shopping list, and each other's diaries, weight and targets. Members can see the name and email of your Replify account. Only a member with their own account can change their diary, weight, targets, profile and Telegram link. Members without an account (for example, children) can be edited by anyone in the home. The home data export contains the data of all members of that home.

When a member leaves the home or the home creator removes them, their diary, weight and targets stay in the home's archive as a "Former member": no longer linked to their account, not shown in the menu, pickers or stats and not sent to Replify. If that person deletes their account, their archived entries are deleted too.

4. Who Fuel shares data with

We do not sell data and do not use it for advertising. Data goes only to services Fuel needs to work:

• Supabase (database, AWS eu-central-1, Frankfurt): stores all Fuel data in the same database as Replify, with Row Level Security, accessible only to the server.
• Railway (hosting of the Fuel server).
• AI: Abacus AI (US), or Anthropic (US) when the server is configured that way. They receive what needs to be parsed or generated: text and photos of meals, receipts, orders, labels, recipe text or pages, and for menus and recipe ideas the members' names, calorie and protein targets, goal and dietary restrictions. Email and account ids are not sent.
• Food databases: Open Food Facts (France), USDA FoodData Central (US), VkusVill (Russia). They receive search text and barcodes, and VkusVill also products and quantities when you build a cart. The Fuel server makes the request, none of your personal data is in it.
• Recipe websites: when you import by link, the Fuel server downloads the page, so the site only sees the server.
• Telegram (if you connect it): the messages and photos you send to the bot, and the bot's menu reminders and day summary with your calories. Telegram also stores these messages under its own terms.
• Replify (same operator): sign-in with your Replify account and syncing of language, accent, style and time zone. If you have an account, your daily totals (calories, protein, fat, carbs, alcohol, targets, weight, energy expenditure) go to Replify for the recovery calculation. Other family members' entries are never sent to Replify.

Transfers from the EEA to the US rely on Standard Contractual Clauses (GDPR Art. 46).

5. Cookies and device storage

Fuel sets only necessary cookies: the sign-in session (fuel_s, 90 days) and short-lived sign-in cookies (fuel_next, fuel_state, up to 15 minutes). localStorage on your device keeps the theme, accent, style, language and the selected member. Fonts are served by Fuel itself; there are no third-party trackers or analytics.

6. Retention

• Account, profile, diary, weight, targets, home data: while the account is active. Deleted with the account.
• Action history for undo: 180 days.
• "Former member" archive: while the home exists or until that person deletes their account.
• Consent record: while the account exists.
• Technical server logs: a limited period at the hosting provider, without diary contents.
• Data already sent to Replify: under Replify's privacy policy, deleted with the Replify account.

7. Deletion

In Fuel: Settings → Delete account. Your profile, weight, targets, diary, Telegram chats and your invites are deleted. A home where you are the only member with an account is deleted entirely, together with its members without an account. In a home with other account holders, the shared menu, pantry and recipes remain and your entries are deleted. Deleting your Replify account deletes all Fuel data by the same rules.

8. Your rights (GDPR)

• Access and portability (Art. 15, 20): Settings → Export data, a JSON file with the home's data.
• Rectification (Art. 16): profile, targets, weight and entries can be edited in the app.
• Erasure (Art. 17): the "Delete account" button or deleting your Replify account.
• Withdraw consent (Art. 7(3)): at any time, by deleting your account or writing to support@replify.space. Withdrawal does not affect processing before it.
• Restriction and objection (Art. 18, 21): by email to support@replify.space.
• Complaint: to the data protection authority of your country.

9. Children

You must be 16 or older to have a Fuel account. Children and other family members without an account are added to a home by an adult. By adding someone you confirm that you are entitled to enter their data (for a child, as a parent or legal guardian). If you believe we hold a child's data without such entitlement, contact us and we will delete it.

10. Not a medical service

Fuel is not a medical device and does not give medical advice. Targets and expenditure are calculated with general formulas, and AI and food database estimates can be inaccurate. See the Terms of use.

11. Changes

If this notice changes materially, the app shows the new version and asks you to confirm it the next time you open it.

12. Contact

Data controller: E CHARM LTD (Cyprus, EU). Email: support@replify.space.