Datenschutzerklärung

Yolkie is a protein and workout tracker for iPhone, Android and the web, at yolkie.fit. In this policy, “Yolkie”, “we” and “us” mean the people who run the app. We decide how your data is used, which makes us the controller under the EU’s General Data Protection Regulation (GDPR).

Write to us about anything here at social@yolkie.fit.

• We use your data to run your plan and the app. Nothing else.
• Food, weight, training and health answers are health data. We only process them with your explicit consent.
• We never sell your data and never share it with advertisers. There are no ads in Yolkie.
• Our database and servers are in the EU (the Netherlands).
• You can get a copy of your data or delete it at any time.

Your account. Your email address, your display name, how you sign in (email, Google or Apple), your language and the date you joined.

Your quiz answers. Date of birth, sex, height, weight, goal, activity, training days, lifting experience, build, target weight and pace, diet, allergies, food budget, whether you take protein powder or creatine, and how you heard about us. The health screen is stored only as one yes or no: we never store which condition you ticked.

What you log. Meals and foods, training, weigh-ins and check-ins, and the foods you save.

What the app works out. Your calorie, protein, fat and carb targets, the reasons behind them, your streak, XP and other game progress, and your chick’s name and items.

Subscriptions. Whether you have Yolkie Gold, and the purchase and renewal records Apple, Google or Stripe send us. We never see your card number.

Technical data. Your app version and platform, error reports, and a push token if you allow notifications. If you agree to usage analytics, the screens you open and the buttons you tap, never what you eat or weigh.

Messages. What you send us by email.

Before you make an account, your quiz answers stay on your phone. To show your plan, the app sends them to our server without your name, email or any account. The server works out the plan, sends it back, and stores and logs nothing.

• Running your account, the game and your subscription: to perform our contract with you (GDPR Art. 6(1)(b)).
• Your plan, logging, insights and safety checks, which use health data: your explicit consent (Art. 9(2)(a)).
• Reviews worded by AI: the same explicit consent.
• Usage analytics: your consent (Art. 6(1)(a)), asked separately. Saying no changes nothing in the app.
• Error reports and keeping Yolkie secure: our legitimate interest in an app that works and isn’t abused (Art. 6(1)(f)).
• Tax and accounting records for payments: our legal obligation (Art. 6(1)(c)).

Before the first question, the app asks for your consent to use your health data. Without it we can’t build a plan, so the app stops there. We store when you gave it and which version of the text you agreed to.

You can withdraw it at any time, as easily as you gave it: write to social@yolkie.fit or delete your account in the app. Withdrawing deletes your health data. It doesn’t affect what we did before you withdrew.

Your health data is never used for ads, never sold and never shown to other people.

Weekly reviews are worded by an AI model from OpenAI. It gets rounded weekly numbers only, such as average protein per day. It never gets your name, email, account id or anything you typed.

OpenAI processes this for us under a data processing agreement. It doesn’t use the data to train its models. The maths behind your targets is ours: the AI only puts the numbers into words, and its text is labelled as AI.

Your targets are worked out automatically from your answers, with standard formulas: your energy needs from your age, sex, height, weight and activity, protein per kilogram of body weight, and safety limits on top. For example, nobody gets a target below a calorie floor, people aged 16 or 17 never get a calorie deficit, and anyone who flags a health condition gets log-only mode with no targets at all.

These targets are suggestions for your own use and have no legal or similar effect on you. You can change your goal in the app, and you can ask us how a number was reached.

If you use the social features (friends, leagues or the feed), other people can see your display name, your chick and things like your streak or XP. Sharing to the feed is off until you turn it on. A nickname works best.

Your food, weight, body measurements, goals, targets and health answers are never shown to anyone else.

These companies process data for us, under contract, and only to provide their service:

• Railway: hosts our servers and database, in its EU region (the Netherlands). Everything the app stores.
• Google Firebase: sign-in (email, account id, sign-in method) and, only if you agree, usage analytics with no health data.
• OpenAI: words the weekly reviews from rounded numbers, with no identity.
• Sentry: error reports, with health data removed, stored in the EU.
• Expo: delivers push notifications through Apple and Google. Notification text never mentions food, weight or goals.
• Resend: sends our emails. No health data goes into an email.

Apple, Google and Stripe take payments for Yolkie Gold. They act as independent controllers for the payment under their own privacy policies. We never send them your health data.

To look up a barcode we don’t have yet, our server may ask Open Food Facts about that barcode number. Only the number is sent, from our server, never anything about you.

We may also disclose data when the law requires it, for example to a court or authority.

Some of these companies are based in the US, so data can reach the US. Each transfer is covered by the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses. Write to us for a copy of the safeguards.

• Your account and everything in it: until you delete your account or withdraw your health consent.
• Backups: our database backups expire on a schedule, so deleted data is gone from them within 89 days.
• Error reports: deleted automatically after at most 90 days.
• Payment and tax records: as long as tax law requires.
• Emails you send us: until your question is dealt with, and at most two years.

You can ask us to give you a copy of your data (also in a format you can take elsewhere), correct it, delete it, restrict or object to how we use it, and you can withdraw any consent. Write to social@yolkie.fit from the email address of your account. We answer within one month. You can also delete your account yourself in the app.

You can also complain to a data protection authority: in Romania, the ANSPDCP (dataprotection.ro), or the one where you live or work.

If you live in a US state with a consumer health data law, such as Washington, Nevada or Connecticut, our Consumer Health Data Privacy Policy also applies to you.

Data is encrypted in transit and at rest. The live and test databases are separate, each with its own access. Test data never comes from real accounts. If a breach puts your data at risk, we tell the authority within 72 hours and tell you without delay.

Yolkie is for people aged 16 and over. The app asks your date of birth and stops anyone younger. If we learn that someone under 16 has an account, we delete it. People aged 16 and 17 get extra safety limits: no calorie deficit and no target weight guess.

yolkie.fit sets no cookies and runs no trackers or analytics. Our host keeps standard server logs, such as IP addresses, for a short time to keep the site running and secure.

When we change this policy, we update the date at the top. If a change affects how we use your health data, we ask for your consent again in the app.

Questions, requests or complaints: social@yolkie.fit. We answer within one month, and within 45 days for US health-data requests.