Privacy Notice
This notice explains what personal data is processed when you use foodbuddy.tech and the FoodBuddy app — and what never leaves your device in the first place. The German version of record is at /datenschutz/.
1. Controller
insight 42 UG (haftungsbeschränkt)
Barellistraße 6, 85049 Ingolstadt, Germany
Email: privacy@insight42.com
No data protection officer is appointed, as there is no legal requirement to do so.
2. What stays on your device
FoodBuddy’s core features run locally. Your profile (selected interest areas and sensitivity levels), scanned ingredient lists, scan history, and the ingredient database are stored and matched on your device. Ingredient matching works fully offline; scans and photos are not transmitted to us.
3. Website
Hosting and server logs. foodbuddy.tech is hosted with Hostinger. The server automatically processes technical access data (IP address, timestamp, requested page, referrer, browser type) to deliver and secure the site (Art. 6(1)(f) GDPR); logs are deleted after a short period. A data processing agreement is in place with the host.
No analytics or ad trackers. The website currently uses no third-party analytics, marketing, or advertising trackers and loads no external fonts or scripts. If we introduce analytics later, this notice will be updated first and consent obtained where required.
Newsletter. If you subscribe, we process your email address to send you the content you signed up for (Art. 6(1)(a) GDPR). You can withdraw consent at any time via the unsubscribe link or by emailing privacy@insight42.com.
Contact and support. If you email us, we process the details you provide to handle your request (Art. 6(1)(b)/(f) GDPR) and delete the correspondence when it is no longer needed, unless statutory retention applies.
4. App
Account and sign-in. Where the app offers sign-in and you use it, we process the data you provide (e.g. email address) to operate your account and link your purchases (Art. 6(1)(b) GDPR).
Purchases via Google Play. The app and in-app purchases are distributed through Google Play (Google Ireland Limited). Google processes payment and order data under its own responsibility; Google’s privacy policy applies. We only receive the information required to provide your purchase.
Future web purchases via Paddle. Web purchases will be handled by Paddle as Merchant of Record (Paddle.com Market Ltd., London, UK). Paddle operates the checkout under its own responsibility, processing payment, billing, and tax data. We receive what is needed to deliver your license (e.g. email address, order status). The UK is covered by an EU adequacy decision.
5. Recipients, retention, your rights
Recipients are limited to the service providers named above and, where legally required, authorities. Data is never sold. We keep personal data only as long as needed for the stated purposes or required by law (e.g. tax retention periods); local app data can be removed at any time by clearing the app’s data or uninstalling.
Subject to the legal conditions, you have the rights of access, rectification, erasure, restriction, data portability, and objection (Art. 15-21 GDPR), and you may withdraw consent at any time with future effect — contact privacy@insight42.com. You may also lodge a complaint with a supervisory authority; for us that is the Bavarian Data Protection Authority (BayLDA), Ansbach.
6. Automated decision-making, children, changes
We make no automated decisions within the meaning of Art. 22 GDPR. Ingredient highlighting is a local match against topics you selected — it is not an assessment of you and not a health evaluation. Our offering is not directed at children under 16; purchases require adulthood. We will update this notice when processing or the law changes; the version published here applies.