Privacy policy

At Digelia, respecting your privacy is a priority. This policy explains what data we process, why, and what your rights are.

Data we process

• Account: email address and profile information you provide, or that Google or Apple send us if you use their sign-in (see “Signing in with Google or Apple”).
• Tracking data: meals, symptoms, answers to “How is your tummy?” and to the evening recap, “My day” context (stress, sleep, transit, hydration), answers to the welcome questionnaire, dishes checked with “Check a dish”, restaurant menus read with “Scan a menu”, your FODMAP program progress (foods tested, amounts, how you felt) and favorite meals. This is health data: it belongs to you.
• Diet: the diet you tell us about (vegetarian, vegan…) and the food groups you don’t eat, used to tailor suggestions.
• Subscription: your subscription status and, if you choose to give it, the reason you cancelled.
• Technical data: information strictly necessary for the proper functioning and security of the service.

Purposes

Your data is used solely to provide the service: logging your meals, computing your trends, surfacing your suspects to confirm, guiding you through the FODMAP program, sorting the dishes on a menu based on what we know about you and syncing your devices. We never sell your data to third parties.

Your health data is processed only with your explicit consent (Article 9(2)(a) GDPR), collected in the app. Each permission (health data processing, AI photo analysis, automated analysis, history retention) is separate, unticked by default, and can be withdrawn at any time in the settings.

Retention

Your account is kept as long as it is active. Your tracking history (meals, symptoms, feelings, “My day”, “My triggers” analyses) is kept for 90 days, or longer if you allow history retention. Your FODMAP program and favorite meals are kept as long as your account exists. Scanned menus are deleted after 24 hours, checked dishes after 30 days, generated PDFs after 48 hours, and photos right after their analysis.

You can export your data or delete your account at any time from the app. Deleting your account erases all of your data.

The “for my doctor” PDF is created on our servers at your request. You choose whether to share it; it states that it does not replace medical advice.

Signing in with Google or Apple

You can create your account and sign in with your Google account or with Apple (“Sign in with Apple”), instead of a password. This sign-in method is optional: signing up with an email address and a password remains available.

When you use it, we receive from Google or Apple only what is needed to create your account: a technical identifier specific to Digelia, your email address and, where applicable, your name. We never receive your password and have no access to any other data in your Google or Apple account (contacts, calendar, photos, files…).

If you choose Apple’s “Hide My Email” option, we only receive a relay address (ending in @privaterelay.appleid.com): your real address is never disclosed to us.

For this processing only, Google (Google Ireland Limited) and Apple (Apple Distribution International Ltd.) act as independent controllers: they know that you are signing in to Digelia and process that information under their own policies (Google, Apple). On our side, the legal basis is the performance of our contract with you (Article 6(1)(b) GDPR): this data is used only to create your account and authenticate you, never for advertising.

You can revoke Digelia’s access at any time from your Google account or Apple ID settings. Doing so will prevent you from signing in this way, but it does not delete your Digelia account: for that, use account deletion in the app or write to us.

AI analysis of meal and menu photos

The app offers an optional feature that analyzes a photo of a meal, of a dish with “Check a dish” or of a restaurant menu with “Scan a menu”, to recognize the foods or dishes in it. It is enabled only with your explicit consent: without your agreement, no photo is sent and the feature stays off.

When you consent, the photo is sent through their application programming interface (API), for the sole purpose of recognizing the foods or dishes present, to our artificial intelligence providers: OpenAI first checks that it contains no inappropriate content, then reads it; Anthropic takes over as a fallback. In line with their business terms (OpenAI, Anthropic), this data is not used to train their models. The photo is deleted right after the analysis, whether it succeeds or not. A written description (“Check a dish” in a few words) is matched against our food database on our servers, without being sent to an AI service. You can withdraw your consent at any time in the app settings; the feature is then no longer used.

Audience measurement

To understand how the site is used and improve it, we use Matomo, an analytics solution that we host ourselves. Measurement is done without cookies, your IP address is anonymized, and no data is sold, shared with third parties, or used to track you across other sites. This audience measurement therefore does not require your consent, in line with the French data protection authority (CNIL) guidelines. If your browser sends the “Do Not Track” signal, no measurement is performed; you can also object at any time by writing to privacy@digelia.app.

In the app, we anonymously measure how it is used (screens opened, steps completed) to improve it, with PostHog, on its instance hosted in the European Union. This measurement contains no health data, no name and no email address; no IP address or location is kept. It relies on a random identifier, not linked to your account, renewed at least every 13 months and at each sign-out; statistics are kept for 25 months at most. In line with CNIL guidelines, it does not require your consent, but you can turn it off at any time in Settings › Privacy & data › Anonymous audience measurement, or by writing to us.

Crash reporting

To detect and fix app crashes, we use Sentry, on its infrastructure located in the European Union. Reports contain technical information (device, app version, error encountered), with no health data and no recording of your screen.

Advertising cookies (Google Ads and Meta)

To measure the effectiveness of our advertising campaigns, we use Google Ads (Google Ireland Limited) and the Meta pixel (Meta Platforms Ireland Limited), the latter loaded through Cloudflare Zaraz. These services may set cookies and send data to Google and Meta only if you consent through the banner shown on your first visit. By default this tracking is disabled and no advertising cookie is set.

If you accept, Google and Meta receive advertising measurement data: pages viewed on this site, clicks to the App Store or Google Play, where the visit came from (ad campaign) and technical browser information (IP address, device type). No health data and no data from your Digelia account is ever sent to them. Meta may use this data in accordance with its own privacy policy.

You can decline at any time and change your mind through the “Manage cookies” link at the bottom of every page.

Your rights

Under the GDPR, you have the right to access, rectify, erase, port and object. To exercise them, contact us at privacy@digelia.app.

Security

We implement reasonable technical and organizational measures to protect your data against unauthorized access.

Where your data is hosted

Your account and tracking data are hosted by OVH, a French provider, on servers located in the European Union. Only the processing operations described below may, where applicable, involve providers outside the EU (see “International transfers”).

International transfers

Some of our processors, including OpenAI and Anthropic (photo analysis), RevenueCat (subscriptions), Expo (notifications) and Cloudflare (spam protection) and Meta (advertising measurement, only with your consent), are located outside the European Union, in particular in the United States. Where your data is transferred there, the transfer is covered by appropriate safeguards under the GDPR, in particular the European Commission’s standard contractual clauses (and, where applicable, the EU–US Data Privacy Framework).

Spam protection

To protect our forms (waitlist) against bots and abusive sign-ups, we use Cloudflare Turnstile, a CAPTCHA alternative configured in invisible mode: you are never shown a checkbox or a puzzle. For this sole purpose, Cloudflare may process technical data (such as your IP address and browsing signals) to tell a human apart from a bot. This processing is governed by the Cloudflare Turnstile Privacy Addendum.

Push notifications

If you enable notifications, we use Expo’s push notification service to send them. For this purpose, a device token (a technical identifier specific to notifications) is processed and then relayed to Apple (APNs) or Google (FCM) depending on your device; this token does not identify you personally. Notification content stays neutral (for example “How is your tummy?”) and contains no health data. This processing is governed by Expo’s privacy policy.

Sending emails

To send you our emails, we use Brevo, a French provider acting as a data processor. For this sole purpose, your email address is sent to it, on servers located in the European Union. This processing is governed by Brevo’s privacy policy.

We send you service emails (account confirmation, password reset, a reminder before your trial ends, information about your subscription) and, unless you object, tips emails: guidance during your first week, a weekly recap, an invitation to come back after cancelling. The recap only contains numbers (meals logged, feelings shared, days tracked), never a food or a symptom. You can stop tips emails at any time through the unsubscribe link in each of them, or in Settings › Notifications › Tips by email; emails about your subscription are still sent.

Our emails contain no tracking pixel: we do not measure whether you open them.

Payments and subscriptions

Your subscriptions and in-app purchases are managed through RevenueCat, which acts as a data processor. The payment itself is processed by the App Store (Apple) or Google Play (Google): we never have access to your payment card details.

To link your subscription to your account, we send RevenueCat an account identifier, your subscription status and a purchase identifier, as well as your email address and name (“customer attributes”) and, for support, the platform, language and app version. This data is used only to manage and restore your subscription and to help you if needed. This processing is governed by RevenueCat’s privacy policy.

Contact

For any question about this policy: privacy@digelia.app.