Privacy Policy

Last updated 27 August 2026

Gretl is a health-coaching app. To do its job it holds some genuinely personal information — what you eat, what you weigh — so this page says plainly what is stored, who else sees it, and how to erase it. There is no advertising in Gretl, no advertising identifier, no cross-app or cross-site tracking, and nothing about you is ever sold. The app contains no analytics SDK; the one third-party SDK it does contain handles subscription purchases, and is described below.

What we store

• Your account. Your email address, and a password that is stored only as a salted hash.
• Your body stats and goal. Age, sex, height, weight, your goal and target rate, and your preferred units. These are what the calorie formula runs on.
• What you log. Meals (your description plus the estimated calories and macros), activity, weigh-ins, water, and any meals you save as favorites.
• Your conversation with Gretl, so the thread is still there tomorrow.
• Food photos you attach, for 7 days. A photo you send with a meal is kept in a private store — readable only by your account — so the meal card can show it. After 7 days it's deleted automatically. It's also sent to the AI model for the estimate (see below).
• How many messages you've sent today. A single number per day, which is how the daily allowance is counted and how Gretl Pro's higher limit is applied.
• Whether your subscription is active. If you subscribe to Gretl Pro we keep a short record — active or not, and when it expires — so the app knows which limits apply. We do not receive or store your card number, billing address, or any payment details; those go to Apple or Google and never reach us.
• A push token, only if you opt into feature updates. If you turn on the "feature updates" notification in the app, we store the device token Apple or Google issues so we can deliver those notifications. It exists only while that setting is on: turn it off and every token for your account is deleted. Reminder notifications (food and water) are scheduled on your phone by the app itself — they involve no token and nothing stored on our servers beyond the times you chose.
• A pairing token, only if you use a watch. Pairing an Apple Watch or a Wear OS watch stores a token scoped to just the two things a watch needs — logging an entry and reading the day's totals. It is deleted when you unpair or delete your account.

What we don't store

• Location, contacts, or anything else from your device we didn't list above.
• Payment details. Card numbers and billing information go to Apple or Google. We never see them.
• Anything from Apple Health or Health Connect. If you allow it, Gretl reads today's active energy and workout minutes to show them beside your intake. That number is read on your phone and displayed on your phone — it is never uploaded, never stored on our servers, and never sent to the coach.
• Advertising identifiers, or any SDK that tracks you across other apps or websites. Gretl contains none, and never asks for tracking permission.

Who else sees your data

The AI model behind the coach. Gretl's coach runs on a model we host through OpenRouter — Mistral by default, and you can pick another from a short list in Settings → Coach. When you send a message, the model receives your message, any photo you attached, and the context Gretl assembles to coach you: your body stats, your targets, and your recent logs. It's used to generate the reply, not to train the model. If you'd rather the model didn't see something, don't put it in a message.

Supabase hosts the database and handles sign-in on our behalf. They process your data only to run the service.

RevenueCat manages subscriptions for us. When you open the subscription screen or buy Gretl Pro, RevenueCat receives your Gretl account identifier, the purchase receipt the store issues, and basic device and app information (platform, app version, and the country inferred from your connection). That is what lets the app know whether you're subscribed on whichever device you sign in from. RevenueCat receives none of your health data — no meals, no weight, no messages, no body stats — and no payment details. It acts as our processor and does not use your information for its own purposes.

Apple and Google sell the subscription. They are the sellers of record: they take the payment, hold the billing relationship, issue refunds, and handle your card details under their own privacy policies, which we have no part in and no access to.

Notification delivery, only if you opt in. If you turn on feature-update notifications, your push token and the notification content pass through Expo's push service and Apple's (APNs) or Google's (FCM) notification systems — that is how any app's push notifications are delivered. They process this only to deliver the notification.

We do not sell your data, and we do not share it with anyone else.

Where your data is processed. Gretl's providers — Supabase, OpenRouter, RevenueCat, and (if you opt into feature updates) Expo, Apple, and Google — may process and store data on servers outside the European Economic Area, including in the United States. Where that happens, the transfer is covered by the European Commission's Standard Contractual Clauses (or an equivalent safeguard) in our agreements with them.

Your rights

If you're in the EU or UK, the GDPR gives you rights over your personal data, and Gretl supports them directly:

• Access and portability. Open Settings → Export my data to download everything we hold about you as a ZIP of spreadsheets — your profile, logs, chat, and more — in a structured, machine-readable form you can take elsewhere.
• Rectification. Edit your profile, goal, and any meal or weigh-in in the app at any time.
• Erasure. Open Settings → Delete account to erase everything, immediately and permanently (see below).
• Restriction, objection, and withdrawing consent. You can stop processing at any time by deleting your account. For anything more specific, email us.
• Complaint. You have the right to lodge a complaint with your local data protection authority.

Why we're allowed to process this (legal basis)

The meals, weight, and body stats you log are health-related information — a "special category" under the GDPR. We process it on the basis of your explicit consent, which you give by checking the consent box when you create your account, and which you can withdraw at any time by deleting your account. We process your account details (email, password), your daily message count, and your subscription status to provide the service you asked for — the basis is performance of our agreement with you. Feature-update notifications are also based on your consent: they're off until you turn them on, and turning them off withdraws that consent and deletes your push token. We rely on no other basis, and we do not use your data for advertising or profiling.

How long we keep it

We keep your data for as long as you're using Gretl, so the app can coach you over time. Food photos are the exception — they're deleted after 7 days — and push tokens are deleted the moment you turn feature updates off, when you sign out on a device, or with your account. When you delete your account, everything goes at once, with no backup copy kept for you.

We also delete accounts nobody is using. Keeping someone's health history indefinitely after they've stopped using the app isn't careful, it's hoarding — so if an account goes quiet for 90 days we email you to say it's scheduled for deletion, and you get 30 more days to come back. Opening the app is enough; it cancels the whole thing, and you can export your data from Settings → Export my data at any point before the date. Accounts that never finished signing up and never logged anything are removed after 30 days without an email, because there's no data to lose and nothing to tell you about. If you've ever subscribed, none of this applies to your account.

One thing outlives it, and it isn't ours to erase: the record of a purchase. Apple, Google, and RevenueCat keep their own transaction records for their own accounting and tax obligations, under their own policies. Ask them directly if you want that record removed — deleting your Gretl account removes our copy of your subscription status, but it cannot reach theirs.

Deleting everything

Open Settings → Delete account in the app. That erases your account and everything attached to it — profile, meals, weigh-ins, water, favorites, chat history, food photos, your message counts, your subscription status, and any push tokens — immediately and permanently. There is no recovery, and we keep no backup copy for you. You can also delete individual meals and weigh-ins at any time without deleting the account.

Deleting your account does not cancel a paid subscription — that lives in your App Store or Google Play account, which we have no control over. Cancel it there first, or you will keep being billed for an app you no longer have. The Terms explain where to do it.

Security

Traffic is encrypted in transit. Your rows are readable only by your own account, enforced by the database itself.

Age

Gretl is for adults 18 and over. We don't knowingly collect information from anyone younger, and the app will not calculate a target for an age under 18 — both because the equation it uses was built for adult bodies and because a tool that puts a daily calorie limit in front of a teenager is not one we want to build. If you believe a minor has created an account, email support@gretl.ai and we will delete it.

About this website

This site — gretl.ai, including this page — is separate from the app and holds no account data. It sets no cookies and has no login. Two things do get measured, both anonymously and in aggregate: Vercel Web Analytics, which counts page views without cookies and without building any profile of you; and a count of how many people opened the app's download page and tapped through to TestFlight, which records the moment and the campaign a visit came from and nothing that identifies you. Neither can be tied back to a Gretl account.

Changes

If this policy changes in a way that matters, we'll update the date at the top and note the change in the app before it takes effect.

Who's responsible for your data

The data controller for Gretl is Andr3s LLC, 502 W 7th St, Ste 100, Erie, PA 16502, United States — the company that makes Gretl. For any question or a request about your data — access, correction, deletion, or a complaint — contact support@gretl.ai and we'll respond within 30 days. Business and legal correspondence: andres@andr3s.com.