This policy explains what personal data the Fimbl app for iPhone and iPad and the website fimbl.app handle, why, who can see it, and how long we keep it. We have written it to be read, not skimmed past, and the AI features get their own section because they deserve one. If anything is unclear, write to us.
The short version
- We collect what we need to run your diary: your account, your profile and goals, what you log, how you feel, and your weight.
- Health and wellbeing data is sensitive. We use it only to give you Fimbl, only with your consent, and never to sell it or to show you ads.
- No ads, no ad trackers, no analytics SDKs in the app, and no cookies or analytics on this website.
- AI features are part of Premium and entirely optional. When one is used, the data it needs goes from the app through our servers to Google's Gemini API. Everything else in Fimbl works without any AI.
- Apple Health data stays on your device, with two exceptions: the weight you log, and daily steps and active calories that may be included in AI requests if you turned Health sync on and use a Premium AI feature.
- You are in control. Delete your account any time in Settings, and ask for a copy of your data any time by email.
- When you delete your account, your personal data is deleted. AI-generated content and AI usage data that we keep are anonymised, so they are no longer linked to you (see section 4.7).
- 1 Who is responsible
- 2 What we collect and why
- 3 Apple Health
- 4 How AI works in Fimbl
- 5 Permissions and notifications
- 6 Who we share data with
- 7 Transfers outside the EU/EEA
- 8 How long we keep data
- 9 Deleting and exporting your data
- 10 Security
- 11 Age and children
- 12 Your rights
- 13 This website
- 14 Earlier versions of Fimbl
- 15 Changes to this policy
- 16 Contact
1 Who is responsible
The controller of your personal data under the General Data Protection Regulation (GDPR) is:
AppRise Ventures Oy (Business ID 3336104-8)
Sokerilinnantie 1 A
02600 Espoo
Finland
You can reach us by email with any question about your data, this policy, or your rights.
2 What we collect and why
We collect data you give us, data created when you use Fimbl, and a small amount of technical data. The table shows each category, the purpose, and the legal basis under the GDPR.
| Category | What it includes | Why we use it | Legal basis |
|---|---|---|---|
| Account | Email address (or your Apple private relay address); your sign-in method (Apple, Google or email); your first and last name if you sign in with Google; a password, stored in hashed form, if you sign up with email; the terms version you accepted. | To create and secure your account and let you sign in on any device. | Contract (Art. 6(1)(b)) |
| Profile and goals | Year of birth (we store your age as a year, not a full birth date), gender, height, activity level, plan, starting and goal weight, calorie, macro and step goals, units, and the answers you choose in onboarding (eating pattern, energy, food emotions, intentions, eating style, movement, an identity statement and weight history). | To work out your targets and personalise Fimbl. | Contract; and explicit consent for health-related details (Art. 9(2)(a)) |
| Diary | Foods, quick adds, saved meals and recipes you log, with amounts, times and nutrition. | To run your food diary, statistics, widgets and streaks. | Contract |
| Wellbeing | Hunger levels and feelings from meal check-ins, daily mood scores and the optional notes you write. | To show your patterns and, with Premium, to make reflections. | Explicit consent (Art. 9(2)(a)) |
| Weight | Weigh-ins and goal weight. | To show your progress and trends. | Explicit consent (Art. 9(2)(a)) |
| Goals and streaks | Streak history and the workout goals you define (the goal itself, not your workouts). | To track and celebrate consistency. | Contract |
| Purchases | Your subscription status and purchase history, managed through RevenueCat using your Fimbl user ID. Apple processes the payment, and we never see your card details. | To unlock Premium and handle restores and trials. | Contract |
| Technical and security | IP address, app version, device language, time zone and sign-in session details (such as user agent), plus AI usage logs described in section 4. | To keep Fimbl secure, stop abuse, apply fair-use limits and fix problems. | Legitimate interests (Art. 6(1)(f)) |
| Support | The messages you send us and your email address. | To answer you. | Legitimate interests; contract |
Health and wellbeing data
Your weight, hunger, feelings and mood can reveal things about your health, so the GDPR treats them as special category data. We process them only with your explicit consent, which you give when you choose to enter them and grant permissions. Without some of this data, such as your height and weight, Fimbl cannot calculate your targets. You can withdraw consent at any time by deleting entries, switching off a feature (for example mood check-ins or Health sync) or deleting your account. Withdrawing does not affect what we did before. We never sell this data and never use it for advertising.
Products you add
If you add a missing product (name, brand, barcode and nutrition), it is stored in the Fimbl food database, which is shared by all Fimbl users, so another person who scans the same barcode may see it. Please do not put personal information in product names.
What stays on your device
Some things never leave your iPhone or iPad: your sign-in tokens (kept in the iOS Keychain), thumbnails of meals you scanned, your healthier-swap history, saved foods and swap preferences, your First Week journey progress, and the small snapshot that powers your widgets. They are removed when you delete the app.
3 Apple Health
Connecting Apple Health is optional, and you choose what Fimbl can access in iOS.
- What Fimbl reads: steps, walking and running distance, active energy, resting energy and workouts (including cycling distance).
- What Fimbl writes: your weight only, and only when you turn on Health sync in Settings. Fimbl does not write food or nutrition to Apple Health.
- How we use it: to show your activity, statistics and widgets. The raw Health samples are not uploaded to our servers.
- Exception for AI: if Health sync is on and you use a Premium AI feature that personalises its answer (reflections, the coach, recipe chat, recipe import and Calm mode grades), daily step counts and active calories for the last 14 days can be included in the request. Reflections keep a few numbers derived from them, such as your average steps.
- What we never do: sell Health data, use it for advertising or marketing, or share it with data brokers or advertising platforms.
You can stop this at any time in Fimbl (Settings, Health sync) or in iOS (Settings, Health, Data Access & Devices, Fimbl).
4 How AI works in Fimbl
Some Premium features use AI. This section explains how we built them, what each one sees, where the data goes and what we keep. The short version: AI is optional, only used by Premium accounts, and never sees your name or email.
4.1 How we built it
We did not build our own AI model, and we do not train one on your data. Fimbl's features use a hosted model, Google's Gemini, through its developer API. When you use a feature, the app sends your request to our servers. Our servers add our instructions (written to be warm, non-judgemental, free of diet-culture language and free of medical claims), include only the context that feature needs, call Gemini, and turn the answer into a structured result such as a calorie estimate, a recipe or a reflection, which comes back to your app. The app itself never holds any AI provider key.
4.2 When AI is used
- Premium only. Premium access is checked on our servers for every AI request. Free accounts never send anything to an AI service.
- On request: photo and nutrition-label scans, describing a meal, recipe import, recipe chat, coach chat and healthier swaps run only when you use them.
- Automatically for Premium accounts: your weekly reflection is generated after each week ends (or when you tap Reflect), and Calm mode grades are generated as you log, if you have chosen Calm mode.
- Not an automated decision-maker. Fimbl does not use AI to make decisions that have legal or similarly significant effects on you. Grades, reflections and estimates are suggestions you can ignore or change.
There is no single AI switch in the app today. If you would rather not have any AI processing, don't subscribe to Premium, stay in Classic mode, or tell us and we will work with you to turn it off.
4.3 What each feature sees and what we keep
| Feature | What is sent to the AI | What we store |
|---|---|---|
| Photo calorie scan and nutrition-label scan | The photo, resized and stripped of location and camera metadata, and your language. The model may use Google Search to check nutrition facts. | The photo is used to produce the result and is not saved to your account. If you save the estimate, the numbers are saved as a quick-add entry, and a small thumbnail stays on your phone. |
| Describe a meal, or say it | The text, up to 500 characters. Voice is turned into text by Apple's speech recognition on your iPhone (Apple may process audio on its servers, depending on your device and language, under Apple's privacy terms). The audio itself never goes to us or to Gemini. | Nothing from the request. |
| Weekly reflections | Your diary for the week (foods, times, amounts, nutrition), meal check-ins, mood scores and notes, weigh-ins and goal weight, goals, profile details such as age, gender, activity level, plan and onboarding answers, and Health steps and active calories if Health sync is on. | The reflection text and a few summary numbers, in your account. |
| Reflection coach chat | Your message (up to 1,200 characters), the last 14 days of the context above, up to four recent reflections and the earlier messages in that conversation. | The conversation: your messages, replies, short reasoning summaries and usage figures. You can delete a conversation in the app. |
| Recipe chat | Your message, profile, goals, 7-day averages and top foods, and the recipe you are working on. | The conversation, as above. |
| Recipe import from a link or photo | The link or photo you share. Our server fetches the page or reads the caption itself. For a video it may download the video temporarily and pass it to Gemini. | The import and its result in your account. Temporary video copies are removed automatically after processing. The recipe result is cached by link, language and units for a limited time (currently up to 180 days) so the same link is not analysed twice. The cache holds the recipe, not your diary or profile. |
| Healthier swaps | The product photo (resized), your country, supermarkets, dietary preferences, health goals and personal goals from swap preferences, your language, and an internal user ID so we can confirm Premium access. We also use Google Custom Search to find product images and links, using the product name, country and shops. | Scan history and saved foods stay on your phone. Our usage logs record the internal user ID. |
| Calm mode grades | That day's meals and check-ins, your profile and goals, weight trend, recent moods and the previous six days. | The grade, a short explanation, the nutrition and check-in it was based on, and usage figures, in your account. |
What is never sent to the AI: your name, your email address, your height or your date of birth (we send an age instead).
What happens to the AI data we store when you delete your account is explained in section 4.7.
4.4 Who processes it
Google acts as our processor for the Gemini API and the Custom Search API. We use these services under Google's terms for developers, which describe how Google handles the data it receives. See Google's Gemini API terms. We do not use your data to train or fine-tune any AI model, and we do not allow anyone else to use it for their own purposes.
4.5 Limits and logs
To keep Fimbl fair and affordable we apply fair-use limits per person and per feature. For that we keep a usage log: who used which feature, when, which model, how large the request was, and how many tokens and what cost it used. The log does not contain your photos, text, transcripts or answers. We keep it for a limited period, currently up to 400 days (about 13 months), and then delete it. If you delete your account, the link between the log and you is removed (see section 4.7).
4.6 Accuracy and safety
AI makes mistakes. Calorie and nutrition estimates can be a little off, recipes can contain errors, and reflections can misread a week, so please adjust anything that doesn't look right. Fimbl's AI offers general guidance and is not medical advice, diagnosis or treatment, and the coach is not a therapist. If you are struggling with food, your body or your mood, please talk to a healthcare professional. If you are in crisis, contact your local emergency number or a crisis line.
4.7 AI data after you delete your account
We store AI-generated content and AI usage data with your account, and we keep it so we can run, check and improve Fimbl's AI features. This covers things like reflections, coach and recipe conversations, Calm mode grades, recipe import results and usage logs. It helps us measure quality and safety, fix problems in our instructions, understand costs and prevent abuse.
- While your account exists, this data belongs to your account, and you can delete a conversation in the app at any time.
- When you delete your account, we delete your personal data: your account, profile, diary, wellbeing entries, weight and goals. The AI data described above is not deleted. Instead we anonymise it: we remove the link to your account and the identifiers we hold, such as your user ID, so it is no longer attributed to you. We do not keep your name, email address or profile together with it.
- Anonymised data is no longer personal data. We may keep it for as long as it is useful, and we use it to evaluate and improve our features and safeguards. We do not sell it, and we do not use it to train or fine-tune AI models.
- Your choice. Conversations are free text, so please avoid writing names or other identifying details in them. If you would rather have this data deleted instead of anonymised, or you object to us keeping it, email us and we will handle your request as the law requires.
Our legal basis is our legitimate interest in running and improving a safe, reliable service (Art. 6(1)(f)), and, for health-related content, the explicit consent you give when you choose to use AI features (Art. 9(2)(a)). Anonymising the data is how we protect your privacy while doing so.
4.8 Fimbl without AI
Everything outside the Premium AI features works without any data going to an AI provider: your diary, food search, barcode scanning, adding products, calorie quick adds, saved meals, manual recipes, weight, mood and meal check-ins, activity, goals and streaks, statistics, the First Week journey and Siri shortcuts for quick adds and weigh-ins. If your Premium ends, AI features stop and nothing more is sent.
5 Permissions and notifications
- Camera: only when you scan a barcode or photograph a meal or product.
- Photos: only the pictures you choose to share with Fimbl.
- Microphone and speech recognition: only when you tap to dictate a meal.
- Apple Health: see section 3.
- Notifications: Fimbl's reminders (streak milestones, First Week nudges at the time you choose, and a reminder before a free trial ends) are scheduled on your device. We do not use remote push notifications and do not collect a push token.
You can change any permission in iOS Settings at any time.
6 Who we share data with
We do not sell your personal data, and we do not share it for advertising. We use a few service providers who process data on our behalf:
- Google: Sign in with Google, the Gemini API and Custom Search for AI features (section 4), and a favicon service that loads shop icons in healthier swaps.
- Apple: Sign in with Apple, App Store payments and subscriptions, and speech recognition for voice input.
- RevenueCat: subscription management. It receives your Fimbl user ID and your purchase information, and nothing else we hold about you.
- Hosting and infrastructure providers: the servers and database behind api.fimbl.app, operated by us with providers acting under our instructions.
Some screens show pictures loaded directly from other websites, such as product images in healthier swaps or recipe images. Those websites can see your IP address when your phone loads the image. We may also disclose data where the law requires it or to protect our rights, to the extent the law allows.
7 Transfers outside the EU/EEA
Some of our providers, including Google, Apple and RevenueCat, may process data outside the European Union and European Economic Area, for example in the United States. Where that happens we rely on an adequacy decision (such as the EU–US Data Privacy Framework) or the European Commission's Standard Contractual Clauses, together with additional safeguards where needed.
8 How long we keep data
| Data | How long |
|---|---|
| Account, profile, diary, wellbeing, weight, goals and streaks | While your account exists. Deleted when you delete your account. |
| Reflections, coach and recipe conversations, Calm mode grades, recipe imports | While your account exists, or until you delete them (you can delete conversations in the app). After you delete your account they are anonymised and may be kept (section 4.7). |
| AI usage logs (no content) | A limited period, currently up to 400 days. After you delete your account they are no longer linked to you. |
| Cached recipe results from links | A limited period, currently up to 180 days |
| Temporary video copies for recipe import | Removed automatically after processing |
| Anonymised AI data | As long as it is useful to us. It is no longer personal data. |
| Security and troubleshooting logs | Only as long as needed for those purposes |
| Data on your device | Until you delete the app or the data |
These periods are our current settings and may change. If a change affects how your data is handled, we will update this page. Where we keep backups, they are rotated on a regular schedule, so deleted data may remain in them for a limited time. Purchase records held by Apple and RevenueCat follow their own retention rules.
9 Deleting and exporting your data
- Delete your account: open Settings in Fimbl and choose Delete account. This deletes your account and your personal data. AI data we keep is anonymised, so it is no longer linked to you (section 4.7). If you signed in with Apple, we also revoke Fimbl's access to your Apple account.
- Your subscription is separate. Deleting your account does not cancel it. Cancel in the App Store (Settings, your name, Subscriptions).
- Deleting the app removes the data stored on your device, but not your account. Delete the account first if you want your personal data deleted.
- Get a copy: there is no export button yet, but you can email us any time and we will send you your data in a common, machine-readable format, within the time the law requires (normally one month).
10 Security
Everything that travels between the app and our servers is encrypted with TLS. Sign-in tokens are kept in the iOS Keychain, the app uses iOS file protection, passwords are stored hashed, and access to our servers is limited to people who need it. No system is perfectly secure. If you notice a problem, please tell us, and if a breach affects you we will notify you and the authorities as the law requires.
11 Age and children
Fimbl is for people aged 13 and over, which is the age of digital consent in Finland. We do not knowingly collect personal data from younger children. If you believe a child has given us data, contact us and we will delete it. Fimbl is not designed for treating eating disorders, so please talk to a professional if that is a concern for you or someone you care about.
12 Your rights
Under the GDPR you have the right to:
- Access the data we hold about you and get a copy (Art. 15).
- Correct inaccurate data (Art. 16). Most of it you can edit directly in the app.
- Erase your data (Art. 17), for example by deleting your account.
- Restrict how we process it (Art. 18).
- Receive your data in a portable format (Art. 20).
- Object to processing based on legitimate interests (Art. 21).
- Withdraw consent at any time, with effect for the future (Art. 7(3)).
- Complain to a supervisory authority (Art. 77). In Finland that is the Office of the Data Protection Ombudsman. You can also complain to the authority in your own country.
Anonymised data is no longer personal data, so these rights do not apply to it. See section 4.7 for your options.
To use any of these rights, email us. We may need to confirm it is really you, and we will reply within one month.
13 This website
The website fimbl.app sets no cookies and has no analytics, advertising trackers or social media widgets. Its fonts are hosted on the site itself. The site is served by GitHub Pages, and GitHub may process technical data such as your IP address when you visit, as described in GitHub's privacy statement. We do not see or keep that data.
14 Earlier versions of Fimbl
Earlier versions of Fimbl, including the previous Android app, used Google Firebase Analytics and Crashlytics, Google Health Connect and a Google Analytics script on the website. Fimbl 2.0 for iPhone and iPad does not use any of them. If you used an earlier version and want data from it removed, contact us.
15 Changes to this policy
If we change how we handle data, for example by adding a new AI feature or a new provider, we will update this page and the date above, and tell you in the app when the change is significant. Previous versions are available on request.
What changed on October 4, 2026: a full rewrite for Fimbl 2.0. It adds the AI features and how they work, how AI data is kept and anonymised when you delete your account, Apple Health details, retention periods, permissions, and our new address, and it removes analytics and cookie sections that no longer apply.
16 Contact
AppRise Ventures Oy
Sokerilinnantie 1 A
02600 Espoo
Finland
Email us