Privacy Policy

1. What data do we process?

• Account data: email address, name, and password in encrypted form.
• Health and body data: age, sex, height, body weight, body fat, muscle percentage, body measurements, injuries.
• Training and meal log: completed workouts, calories, food entries.
• Uploaded images (scale display, food, nutrition labels) and voice entries.
• Technical data: login timestamps, error logs.

2. Why, and on what legal basis?

Providing the service and operating your account are necessary for the performance of the contract. Health and body data are processed based on your explicit consent, which you may withdraw at any time. We process error logs on the basis of legitimate interest, to ensure the proper operation of the service.

3. Who sees your data?

Your data is visible only to you and — for support and plan-assignment purposes — the application administrator. We do not sell or share your data with third parties for marketing purposes.

4. Data processors

Hosting and database provider (EU data center), as well as an AI service provider for generating plans, video descriptions, and photo-based nutrition estimates. Processors receive only the data necessary to perform their tasks and do not use it for model training.

5. How long do we retain data?

For as long as your account exists, or for 30 days after a deletion request. Billing data is retained for 8 years in accordance with statutory requirements.

6. Your rights

You may request access to your data, its correction or deletion, restriction of processing, object to processing, and request that your data be provided to you in a portable format. Write to hello@x-app.software; we will respond within 30 days. You may also lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH, Hungary's data protection authority).

7. Cookies

We only use cookies and browser storage that are necessary for login and basic operation. We do not use third-party tracking for advertising purposes.

8. Security

Data is transmitted over an encrypted connection, and row-level access rules govern permissions on stored records, so no other user can access your data. Uploaded files are kept in private storage and can only be accessed via temporary, signed links.

9. Data controller's contact details

X-APP Szoftverfejlesztő Korlátolt Felelősségű Társaság (X-APP Szoftverfejlesztő Kft., a Hungarian limited liability company)
Registered office: 1085 Budapest, József körút 2. 3. em. 4. ajtó
Company registration number: Cg.01-09-458429
Tax number: 33087128-2-42
Email: hello@x-app.software