Replify Fuel Privacy Notice

Effective date: October 18, 2026

1. Data Fuel keeps

• Account: your Replify account id, name, email and profile picture link from Replify, language, time zone, chosen accent and style.
• Home member profile: name, sex, date of birth, height, activity level, goal (gain, maintain, lose), dietary restrictions (free text), calorie and protein targets and their history.
• Health data (special category, GDPR Art. 9): weight, food diary (what, when and how much was eaten, calories, protein, fat, carbs, alcohol), dietary restrictions that may reveal allergies, conditions or beliefs, the estimated energy expenditure, and calories burned from Replify (if you turn on counting them).
• Family members: profiles, weight and diaries of the people you add to your home, including people without an account such as children.
• Home data: home name, menu, weekly template, recipes, pantry and its movements, shopping list, saved sets, own products and label photos, how the family names products, order and receipt texts you paste or photograph, and the action history used for undo.
• Telegram (if you connect it): chat id and title, messages and photos you send to the bot, reminder settings.
• Consent: when and which version of these documents was accepted.

2. Purposes and legal basis

• Explicit consent (GDPR Art. 9(2)(a)): processing weight, food diary and dietary restrictions, yours and your family members', to calculate targets, build the menu and shopping list, adjust portions and estimate energy expenditure. Consent is given with a separate checkbox on first use.
• Performance of contract (GDPR Art. 6(1)(b)): running the app: sign-in, home, menu, pantry, shopping list, recipes, Telegram bot, the link with Replify.
• Consent (GDPR Art. 6(1)(a) and ePrivacy Directive Art. 5(3)): Affise attribution on devices in EU/EEA and UK time zones, only after you tap «Allow».
• Legitimate interest (GDPR Art. 6(1)(f)): Affise attribution elsewhere (knowing which campaigns bring people to Fuel; you can turn it off in Settings), security, abuse prevention (request limits), fixing errors.

3. Who sees data inside a home

All members of a home see the menu, pantry, recipes, shopping list, and each other's diaries, weight and targets. Members can see the name and email of your Replify account. Only a member with their own account can change their diary, weight, targets, profile and Telegram link. Members without an account (for example, children) can be edited by anyone in the home. If you turn on "Count workouts from Replify", home members see your workout line (type and minutes) and the raised daily target, like other targets. The home data export contains the data of all members of that home.

When a member leaves the home or the home creator removes them, their diary, weight and targets stay in the home's archive as a "Former member": no longer linked to their account, not shown in the menu, pickers or stats and not sent to Replify. If that person deletes their account, their archived entries are deleted too.

4. Who Fuel shares data with

We do not sell data and do not use it to show you ads. Data goes only to services Fuel needs to work, and to Affise to measure where people come from:

• Supabase (database, AWS eu-central-1, Frankfurt): stores all Fuel data in the same database as Replify, with Row Level Security, accessible only to the server.
• Railway (hosting of the Fuel server).
• AI: Abacus AI (US), or Anthropic (US) when the server is configured that way. They receive what needs to be parsed or generated: text and photos of meals, receipts, orders, labels, recipe text or pages, and for menus and recipe ideas the members' names, calorie and protein targets, goal and dietary restrictions. Email and account ids are not sent.
• Food databases: Open Food Facts (France), USDA FoodData Central (US), and, only when the app language is Russian, the product database of a Russian grocery retailer. They receive search text and barcodes, and the retailer also products and quantities when you build a cart there. The Fuel server makes the request, none of your personal data is in it.
• Recipe websites: when you import by link, the Fuel server downloads the page, so the site only sees the server.
• Telegram (if you connect it): the messages and photos you send to the bot, and the bot's menu reminders and day summary with your calories. Telegram also stores these messages under its own terms.
• Replify (same operator): sign-in with your Replify account and syncing of language, accent, style and time zone. If you have an account, your daily totals (calories, protein, fat, carbs, alcohol, targets, weight, energy expenditure) go to Replify for the recovery calculation. Other family members' entries are never sent to Replify. If you turn on "Count workouts from Replify" in your targets, Fuel receives from Replify your calories burned per day (and for each workout its type, duration and calories, without titles or exercises) and uses them only for the day's targets. Fuel keeps them as a cache while the switch is on; turning it off deletes that cache.
• Affise (attribution): a random device identifier created by Fuel, the app id, the time of first launch and funnel events (sign-in, home created, first diary entry, purchase sheet opened, Replify Full purchased with its plan). No name, email, account id or food data. In EU/EEA and UK time zones only after your consent; elsewhere you can turn it off in Settings → Analytics, which also deletes the identifier from the device.

Transfers from the EEA to the US rely on Standard Contractual Clauses (GDPR Art. 46).

5. Cookies and device storage

Fuel sets only necessary cookies: the sign-in session (fuel_s, 90 days) and short-lived sign-in cookies (fuel_next, fuel_state, up to 15 minutes). localStorage on your device keeps the theme, accent, style, language and the selected member. Fonts are served by Fuel itself. With analytics allowed, localStorage also keeps the Affise identifier (affise_sdk_storage) and your choice (fuel.analytics); there are no other third-party trackers.

6. Retention

• Account, profile, diary, weight, targets, home data: while the account is active. Deleted with the account.
• Action history for undo: 180 days.
• "Former member" archive: while the home exists or until that person deletes their account.
• Consent record: while the account exists.
• Technical server logs: a limited period at the hosting provider, without diary contents.
• Data already sent to Replify: under Replify's privacy policy, deleted with the Replify account.

7. Deletion

In Fuel: Settings → Delete account. Your profile, weight, targets, diary, Telegram chats and your invites are deleted. A home where you are the only member with an account is deleted entirely, together with its members without an account. In a home with other account holders, the shared menu, pantry and recipes remain and your entries are deleted. Deleting your Replify account deletes all Fuel data by the same rules.

8. Your rights (GDPR)

• Access and portability (Art. 15, 20): Settings → Export data, a JSON file with the home's data.
• Rectification (Art. 16): profile, targets, weight and entries can be edited in the app.
• Erasure (Art. 17): the "Delete account" button or deleting your Replify account.
• Withdraw consent (Art. 7(3)): at any time: analytics in Settings → Analytics; everything else by deleting your account or writing to support@replify.space. Withdrawal does not affect processing before it.
• Restriction and objection (Art. 18, 21): by email to support@replify.space.
• Complaint: to the data protection authority of your country.

9. Children

You must be 16 or older to have a Fuel account. Children and other family members without an account are added to a home by an adult. By adding someone you confirm that you are entitled to enter their data (for a child, as a parent or legal guardian). If you believe we hold a child's data without such entitlement, contact us and we will delete it.

10. Not a medical service

Fuel is not a medical device and does not give medical advice. Targets and expenditure are calculated with general formulas, and AI and food database estimates can be inaccurate. See the Terms of use.

11. Changes

If this notice changes materially, the app shows the new version and asks you to confirm it the next time you open it.

12. Contact

Data controller: E CHARM LTD (Cyprus, EU). Email: support@replify.space.