fotoriePrivacy Policy
Last updated: September 11, 2026. Fotorie processes health data, and we clearly explain what we store, where, why, and how to delete it.
Controller
VITASANE CENTROS DE NUTRICION SLP (Professional Limited Company (SLP)), NIF B09986761, Calle Tajo, 61, 41702 Dos Hermanas (Seville), Spain, registered in the Mercantile Registry of Seville. Contact for data protection: info@fotorie.com.
What data we process
- Account: email verified by code (or Google session) and, if you create it with a password, a salted hash of that password.
- Profile: name (optional), sex, year of birth, height, weight, activity level, goal, and diet type.
- Daily log: meals (text and, if activated, photos), water, workouts with sets and weights, sleep, mood, and notes.
- Health (special category, Art. 9 GDPR): weight and measurements, blood pressure, medication and doses, summaries of lab results you upload, and pregnancy or lactation if indicated.
- Conversations with the coach (text, transcribed voice notes, and call transcriptions), to ensure continuity.
- Subscription: if you contract a plan, Stripe communicates the plan, its validity, and a customer identifier to us; never your card details.
- Technical usage: date, functionality used, app version, and AI tokens consumed, linked to your email or to "anon".
- Apple manages payments made through in-app purchases on iPhone. We receive the contracted product, transaction identifiers, validity, and renewal or refund status, linked to your account via an identifier derived from your random account identifier. We do not receive your card details from Apple.
For what purpose and with what legal basis
- To provide you with the service (your plan, menu, gym, and recommendations) and manage your account and subscription: performance of a contract (Art. 6.1.b GDPR).
- To process your health data to personalize the plan and advice: your explicit consent (Art. 9.2.a GDPR), which you give on a dedicated screen when registering and can withdraw at any time from Profile → Account.
- Encrypted backup to avoid losing your history: performance of a contract.
- To improve the product with aggregated statistics and without identifying you: legitimate interest (Art. 6.1.f GDPR).
- To comply with legal obligations (invoicing, attending to your rights): Art. 6.1.c GDPR.
Artificial intelligence
The coach, the message of the day, photo estimations, and lab result summaries are generated by artificial intelligence. We indicate this in the app itself (Regulation (EU) 2024/1689, Art. 50). Its advice is informative: it is not a diagnosis or treatment and does not replace your doctor, dietitian, or pharmacist. The coach does not recommend drugs, doses, or treatments, does not recommend alcohol, and, in case of alarm signals, refers to emergencies.
Fotorie is not a medical device: it does not diagnose or treat diseases.
Where your data is located and who processes it for us
- On your mobile, in a local database.
- Google Cloud (Belgium, europe-west1 region): encrypted backup with a random key that only your app receives after verifying your email, summaries for the report and the league if you activate it, and the app server.
- Google Cloud Vertex AI (configured with a global endpoint) processes photos, texts, and voice notes to generate estimations and coach responses, as a data processor; they are not used to train models.
- xAI (United States) processes the audio of the voice call with the coach, only for the duration of the call, with the European Commission's standard contractual clauses as a guarantee for the transfer. The use of the global Vertex AI endpoint does not guarantee that all processing takes place in the European Union. Consult us for details of providers and applicable guarantees.
- Stripe Payments Europe (Ireland) manages subscription payments; we do not see or store your card details.
- dinahosting (Spain) sends verification and account emails.
- No one else. We do not sell or transfer your data, and there is no advertising within the app. On the website, if you accept the cookie notice, Google Analytics measures website usage: see "Cookies and web analytics".
How long
As long as you have an account. If you delete it from Profile → Account → "Delete my account and data", the mobile database is deleted, and the deletion of the copy, summaries, league, permissions, and server account is requested. If a deletion fails, it remains pending retry. Google Cloud maintains recoverable deletion protection for seven days before the definitive deletion of affected objects. Technical server logs are kept for a maximum of 400 days. Invoices are kept for the time required by tax law.
Your rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. From the app, you can export everything (CSV), withdraw health consent, and delete the account. For any other request, write to info@fotorie.com; we will respond within a maximum of one month. You can also file a complaint with the Spanish Data Protection Agency (aepd.es).
Minors
Fotorie is only for individuals over 18 years of age. Registration does not allow indicating a younger date of birth. If we detect a minor's account, we will delete it.
Security
Encryption in transit (HTTPS) and of the backup (AES-256), identity with session after email verification, usage limits on the server, and deletion upon request. Nothing is infallible: if you believe there has been unauthorized access, please write to us.
Cookies and web analytics
Analytics and browsing recordings remain blocked until you accept each purpose. The notice allows you to accept, reject, or select them separately. We store your choice in the browser for a maximum of six months; the storage necessary for purchase and security does not depend on these permissions.
If you authorize Analytics, it measures website usage. If you authorize recordings, we record browsing with masked text and exclude forms, calculators, and account management areas. Recordings have an automatic deletion rule after 90 days. The provider's execution is not instantaneous; afterwards, a recoverable copy may be kept for seven days, outside the usual viewer. Google Ads measurement remains deactivated while the campaign is paused. We do not load its tag or request advertising consent. Analytics cookies (_ga and related) can last up to 24 months.
You can withdraw consent at any time from the "Cookies" link in the footer: by rejecting, the four Google permissions (analytics, advertising storage, user data, and personalization) are denied, recording stops, and cookies and data that Google may have left in your browser are deleted. We store your choice (with its date and the notice version) in your browser's local storage so as not to ask you again; if we change the purposes, we will ask you again.