Privacy Policy

Saziao records what you eat and what you weigh. That is health data, and it deserves to be treated as such. This policy says exactly what we keep, where, for how long, and what we never collect.

Last updated: 2026-10-16 · Publisher: Anthony Ghizzo (Ghizzo Studio)

1. The principle: your data stays in Europe

Your account and everything you record — meals, weights, goals — are stored in the European Union, in Frankfurt (eu-central-1), and processed by our servers in Switzerland, a country the European Commission recognizes as offering an adequate level of protection. They never leave Europe. The two exceptions, described in section 6, carry none of your meals, weights or goals: usage statistics, which you can switch off, and purchase records if you subscribe.

We sell nothing, run no advertising, and do no tracking across other apps or websites.

2. What we collect

2.1 Your account

Saziao runs on an email address and nothing else: there is no password. You enter your address, we send a one-time code, and that code opens the session. So we keep your email address — it is the only way to recognize you from one device to the next.

2.2 Your profile

2.3 What you record — health data

The data below falls under Article 9 GDPR, which gives special protection to data concerning health. We process it solely on the basis of your explicit consent, given by ticking a dedicated box — never pre-ticked, and separate from accepting this policy — when you set up your account, before any of this data is sent to us. We record that consent with its date. You can withdraw it at any time by deleting your account, which destroys all of it.

• Your meals: the date, the time, a free-text label you write, and the amounts — protein, carbohydrates, fat, calories.
• Your saved meals: the name and description you give them, and their amounts, so you can reuse them without typing them again.
• Your weight: a value and a date, as many times as you record one.
• Your goals: daily calorie and macronutrient targets, and the period they run over.

This data is visible to you alone. It is not aggregated with anyone else's, not used to train anything, and not passed to anyone.

2.4 What usage produces

• Your subscription, if any: the plan, its start and end dates, and whether it renews. The payment itself is handled by Apple: we never see your card details.
• Technical logs: IP address, device type, timestamp and error code of requests. They exist to run and secure the service, and are kept for thirty days at most.

2.5 Usage statistics — you can refuse them

The app sends PostHog events describing that something happened: the app was opened, a meal was added, a goal was created. These are on by default, on the basis of our legitimate interest in knowing whether the product is used — and you can switch them off in one tap under Settings → Share usage data. Refusal is immediate and persistent.

These events carry this, and nothing else:

• your account's technical identifier;
• the app's language;
• the platform (iOS or Android), the app version and the device type.

They never carry: your email address, a meal label, an amount, a weight, a goal, or any health data. This is not a statement of intent: the permitted event vocabulary is closed in the app's code, and the compiler refuses any property that is not in it.

3. What we do not collect

• No password: there isn't one.
• No payment details. Purchases go entirely through Apple.
• No advertising identifier. The app carries no advertising.
• No location data, no access to contacts, camera, microphone or photos.
• No access to Apple Health or Google Fit. Saziao neither reads from nor writes to them: everything it knows, you typed.

4. Reminders are local

If you turn reminders on, they are scheduled by your phone and fired by it. No server sends you a notification, and we store neither a remote notification token nor your reminder times. Turning reminders off in the system settings stops everything.

5. Legal bases (GDPR)

• Performance of the contract (Art. 6(1)(b)) — your account (email address, sign-in provider), your settings and your subscription: without them the app does not exist. Everything that concerns your health — weight, measurements, goals, meals — rests on your explicit consent, below.
• Explicit consent (Art. 9(2)(a)) — the health data in section 2.3. It is the only valid basis for that category. You give it by ticking the dedicated box when you set up your account; we record it with its date, and it is withdrawn by deleting the account, which destroys that data.
• Legitimate interest (Art. 6(1)(f)) — the technical logs the service needs to stay secure, and the usage statistics, which you can refuse at any time.
• Legal obligation (Art. 6(1)(c)) — retention of billing records where a purchase took place.

6. Who else sees this data

Only the technical providers the service needs are involved:

Two transfers to the United States exist, both governed by the European Commission's Standard Contractual Clauses, and neither carries any health data: usage statistics sent to PostHog, which disappear entirely if you switch statistics off in the settings; and subscription records sent to RevenueCat, only if you subscribe — your account identifier and your purchases. Your meals, weights and goals never leave Europe.

7. How long we keep it

• Account, profile and health data: as long as the account exists, even if it is no longer used — we do not delete it on our own. You can delete it at any time with Settings → Delete my account: everything is then destroyed immediately.
• Technical logs: thirty days at most.
• Billing records: for the period accounting law requires.

Uninstalling the app deletes nothing server-side: for that, use Settings → Delete my account before uninstalling.

8. Your rights

You have rights of access, rectification, erasure, restriction, objection and portability. Two of them are directly in the app, with no need to write to us and no subscription required:

• Portability and access — Settings → Export my data produces a JSON document containing everything the server holds about you: profile, goals, meals, saved meals, weights, subscription. Nothing is truncated.
• Erasure — Settings → Delete my account immediately and permanently destroys the account and everything attached to it. No backup of it is kept.

For any other right, or for a complaint, write to contact@saziao.com from your account's address. We answer within one month. You may also complain to the CNIL (cnil.fr) or to the supervisory authority of your country of residence.

9. Minors

Saziao is not intended for people under sixteen and we do not knowingly collect their data. If you are the legal guardian of a minor who has created an account, write to us and we will delete it.

10. Security

Traffic to our servers is encrypted (TLS), and the database is encrypted at rest. Your session lives in the device's secure keychain, encrypted by the operating system. Direct database access from a client is refused: every read goes through our API, which checks on each request who the data belongs to.

11. Changes

Any substantial change will be announced in the app before it takes effect. The date at the top of this page governs.

12. Contact

Anthony Ghizzo (Ghizzo Studio), sole proprietor (French entrepreneur individuel) — SIREN 899 515 316 · 495 chemin du Magnanon, 83440 Montauroux, France
contact@saziao.com