Eunovya

Privacy Policy

Version: 1.0
Last updated: 28 August 2026

This Privacy Policy explains how Eunovya collects, uses, stores, shares and protects personal data when you use the Eunovya mobile application, eunovya.com and related services.

Eunovya pays particular attention to information relating to nutrition, weight, body profile, physical activity and, more generally, information that may constitute health-related personal data.

1. Data Controller

The controller is:

Eunovya
Micro-enterprise established in France
3 Rue du Moulin Renard
78280 Guyancourt
France

Data protection contact: contact@eunovya.com.

2. Eligible Users

Eunovya is intended for users aged 18 or over.

3. Personal Data We Process

3.1 Account and authentication data

  • name;
  • email address;
  • hashed password where password authentication is used;
  • technical identifiers associated with the account and sessions;
  • Google or Apple account identifiers when social sign-in is used.

3.2 Profile, goals and body tracking data

  • date of birth;
  • sex provided by the user;
  • height;
  • current weight and weight history;
  • target weight;
  • body fat percentage provided by the user;
  • physical activity level;
  • weight-loss, maintenance or weight-gain goal;
  • calculated indicators such as BMI or estimated energy requirements.

3.3 Nutrition data

  • meal photographs;
  • text descriptions of meals, including text produced through voice dictation;
  • foods identified or manually added;
  • estimated or entered quantities;
  • calories, macronutrients and other nutrition information;
  • scores, summaries, recommendations and confidence information;
  • meal and analysis history.

Voice dictation uses speech-recognition functions available on the device. Eunovya's backend receives the resulting text used for meal analysis; Eunovya does not store an audio recording of the dictation in the audited application flow. Voice processing by the operating system or its provider may depend on your device settings and speech-recognition services.

3.4 Health-related data

Some of the information above may constitute health-related data under the GDPR where it reveals or allows information about your physical condition or health tracking to be inferred.

Where such processing relies on consent, Eunovya obtains a separate explicit consent before processing the relevant data. This consent is separate from acceptance of the Terms of Use.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing performed before withdrawal, but features that require such data may no longer be available.

3.5 Health Connect activity data

If you choose to connect Health Connect on Android and grant the corresponding permissions, Eunovya may read and synchronize:

  • step count;
  • distance;
  • active calories burned.

Health Connect permissions are controlled by Android and can be withdrawn in your device settings. Eunovya only requests categories required for enabled features.

3.6 Technical data and notifications

  • application version, platform and technical device information;
  • technical identifiers and session tokens;
  • device tokens used to deliver push notifications;
  • notification delivery status and diagnostic information;
  • minimized error and technical logs;
  • technical subscription and purchase data.

3.7 Support data

When you contact support, Eunovya processes the subject and content of the request, related messages and technical information supplied by you or needed to handle the ticket.

4. Purposes

  • create, authenticate and manage your account;
  • personalize nutrition tracking and goals;
  • record and analyse meals;
  • estimate calories, nutrients and meal composition;
  • generate scores, summaries and recommendations;
  • track weight and physical activity;
  • display progress and summaries;
  • deliver enabled reminders and notifications;
  • manage Premium subscriptions;
  • respond to support requests;
  • secure the service, diagnose incidents and prevent misuse;
  • measure service operation and improve reliability.

5. Legal Bases

  • Performance of a contract: account management, requested features, subscriptions and support necessary to provide the service.
  • Explicit consent: processing of health-related data where Article 9 GDPR requires it.
  • Consent: optional notifications or other processing where consent is legally required.
  • Legitimate interests: security, fraud and misuse prevention, technical diagnostics and service stability.
  • Legal obligation: information that must be retained under applicable legal, tax or accounting requirements.

6. Meal Analysis and Artificial Intelligence

Eunovya uses the OpenAI API to provide automated meal analysis. Depending on the feature used, the meal photograph or meal text description is sent to OpenAI together with instructions required to perform the analysis.

Eunovya does not intentionally include your name, email address or login identifier in the meal-analysis request.

Data sent through the OpenAI API is not used by default to train OpenAI models unless Eunovya expressly opts in to data sharing. Under the standard Responses API configuration, OpenAI may retain certain content and abuse-monitoring information for up to 30 days, unless a different contractual configuration or legal requirement applies.

7. Hosting and Service Providers

Eunovya does not sell your personal data.

  • Amazon Web Services (AWS): cloud infrastructure used in particular for private meal-photo storage and certain data services.
  • OpenAI: automated analysis of meal photographs or meal descriptions.
  • Google: Google Sign-In, Google Play, Firebase Cloud Messaging and Health Connect depending on the features used.
  • Apple: Sign in with Apple and App Store services where the corresponding iOS features are used.
  • LWS: email services used by Eunovya.

8. Push Notifications

Eunovya uses Firebase Cloud Messaging to deliver push notifications. You can manage available notification categories in Eunovya and withdraw the device-level notification permission through your device settings.

9. Subscriptions and Payments

In-app payments are handled by Google Play on Android and, where the corresponding iOS version is offered, by Apple through the App Store.

Eunovya does not receive or store your complete payment card number. Eunovya only retains technical information required to validate and manage a subscription, including the offer, status, dates and certain transaction references or hashes.

10. Data Retention

  • Account, profile, weight, goals, activity, meals and useful analysis results: for the lifetime of the account unless deleted sooner or otherwise required by law.
  • Meal photographs: maximum 60 days, after which the file and its reference are automatically deleted.
  • Raw AI responses retained by Eunovya for diagnostics: 30 days.
  • AI technical usage logs: 90 days.
  • Notification delivery logs: 90 days.
  • Laravel application logs: daily rotation, retained for 14 days.
  • Inactive server sessions: 30 days.
  • Deactivated device tokens: 90 days of inactivity.
  • Processed raw Apple server-notification payloads: 90 days.
  • Resolved support tickets: 24 months after resolution.

Subscription, payment or dispute-related information may be retained longer where required by law or necessary as evidence.

11. Account Deletion

You may request deletion of your account directly from the application. Deletion removes the account and directly associated data, including profile, goals, weight entries, activity records, meals and meal-photo files still retained.

Support tickets may be detached from the account and retained under their own retention period to maintain an appropriate support record or establish, exercise or defend legal claims. Information subject to a legal retention requirement is not deleted before that requirement expires.

12. International Transfers

Some service providers are international groups and may process information outside the European Economic Area. Where required, transfers are protected by a mechanism recognized under applicable data protection law, such as an adequacy decision or standard contractual clauses.

13. Cookies and Website Tracking

eunovya.com may use cookies strictly necessary for its operation. Any non-essential tracking technology requiring consent must not be activated before such consent has been obtained.

14. Advertising and Marketing

Eunovya does not currently display third-party advertising within the application. Promotional notifications, where offered, are subject to applicable preferences and consent requirements.

15. Security

Eunovya implements technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration or disclosure. Measures include authentication, access controls, private meal-photo storage, temporary access URLs, minimized logging, automated retention controls and secure connections.

16. Your Rights

  • right of access;
  • right to rectification;
  • right to erasure;
  • right to restriction;
  • right to object where applicable;
  • right to data portability where applicable;
  • right to withdraw consent at any time for processing that depends on consent.

To exercise your rights, or to withdraw consent where the corresponding function is not directly available in the application, contact: contact@eunovya.com.

You may also lodge a complaint with the French data protection authority (CNIL) or another competent supervisory authority.

17. Medical Disclaimer

Eunovya is an informational, tracking and support service relating to nutrition, physical activity and personal goals. Estimates, scores, calculations, goals and recommendations may be inaccurate.

They do not constitute medical diagnosis, prescription, treatment or medical advice and are not intended to replace a qualified healthcare professional.

18. Automated Processing

Eunovya uses automated processing to analyse certain meals and generate estimates, scores and recommendations. These processes are informational and supportive and do not, by themselves, produce legal or similarly significant effects on you.

19. Changes to this Policy

Eunovya may update this Policy to reflect changes to the service, providers, infrastructure or applicable law. Material changes may be communicated through the application or another appropriate channel.

20. Contact

Eunovya
3 Rue du Moulin Renard
78280 Guyancourt
France
Email: contact@eunovya.com