‹ Back HONED

Privacy Policy

Last updated: 17 June 2026

This policy explains what personal data HONED collects, why, who processes it, and the rights you have over it. Read it together with our Terms & Conditions.

1. Who is responsible (controller)

The data controller for HONED is the operator of HONED, contactable at HONED-DASHBOARD@outlook.com. HONED is operated from the Netherlands and applies the EU General Data Protection Regulation (GDPR).

2. The data we process

Account data: your email address, a password (stored only in hashed form by our auth provider), and an optional username.
Information you enter into the app: training and workouts, body metrics (e.g. weight, body composition), meals and calories, hydration, supplements, goals and habits, and personal-finance entries (e.g. balances, holdings, subscriptions). Some of this is sensitive information about your health and finances — you choose to enter it for your own tracking.
Meal photos & descriptions: if you use AI scanning, the photo or text you submit is processed to estimate the meal.
Usage data: a per-day count of AI scans (to apply free-tier limits) and basic technical data needed to run the service.
Payment data: if you subscribe, PayPal processes your payment. We do not receive or store your card details; we receive a subscription identifier linked to your account.

3. Where your data is stored

Your data is stored on your device (in your browser’s local storage) and, when you are signed in, in your private account in our cloud database so it can sync across your devices. The cloud database is hosted in the European Union.

4. Why we process it, and our legal basis

Purpose	Legal basis (GDPR Art. 6)
Provide your account and sync your data	Performance of a contract
AI meal estimation, when you use it	Your request / consent
Process and activate Premium subscriptions	Performance of a contract
Keep the service secure and prevent abuse	Legitimate interests
Comply with legal/accounting obligations	Legal obligation

Where you enter sensitive information (such as health or body data), you do so on your own initiative and with your consent, for the purpose of tracking it for yourself. You can withdraw consent and delete this data at any time.

5. Who processes data on our behalf (third parties)

We use a small number of trusted providers. We do not sell your personal data to anyone.

Provider	What they do	What is shared
Supabase	Database, authentication, and sync (EU-hosted)	Your account and app data
Vercel	Hosting of the app and its serverless functions	Technical request data
Anthropic (Claude)	AI meal photo/description estimation	The photo or text you submit for a scan. Sent via the API, which is not used to train their models.
PayPal	Payments and subscription billing	Payment details you give PayPal; we receive a subscription identifier
Twelve Data	Live stock/ETF prices on the finance page	Only the ticker symbols you track — no personal data
USDA FoodData Central & Open Food Facts	Nutrition lookups for meals	Only a generic food search term — no personal data
Discord (operator notification)	Notifies the operator when someone subscribes to Premium, so it can be activated	Your user id, email, username, and chosen plan — sent only when you subscribe

Some providers (e.g. Anthropic, PayPal) may process data outside the EU. Where that happens, transfers are covered by appropriate safeguards such as the providers’ standard contractual clauses.

6. How long we keep it

We keep your data for as long as your account exists. When you delete your account (or ask us to delete your data), we remove it from the cloud database. Data stored locally on your device is cleared when you sign out and clear the app’s storage on that device. Payment records may be retained by PayPal and for accounting purposes as required by law.

7. Your rights

Under the GDPR you have the right to: access your data; correct it; delete it (“right to be forgotten”); restrict or object to processing; receive a copy in a portable format; and withdraw consent at any time. To exercise any of these, email HONED-DASHBOARD@outlook.com.

8. Deleting your account and data

You can request full deletion of your account and associated cloud data at any time by emailing HONED-DASHBOARD@outlook.com from your account email. We will action it without undue delay.

9. Security

Access to your cloud data is protected by your login and database access rules so that you can only read and write your own records. Passwords are stored hashed by our auth provider. No system is perfectly secure, so we cannot guarantee absolute security, but we take reasonable measures to protect your data.

10. Children

HONED is not intended for anyone under 16. If you believe a child under 16 has provided us data, contact us and we will delete it.

11. Cookies and local storage

HONED does not use advertising or third-party tracking cookies. We use your browser’s local storage to keep your app data on your device and to remember that you accepted these policies. This is essential to how the app works.

12. Changes to this policy

We may update this policy. If changes are material we will ask you to accept the updated version. The “Last updated” date above reflects the current version.

13. Complaints

If you have a concern we could not resolve, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

14. Contact

For any privacy question, email HONED-DASHBOARD@outlook.com.

This document is a good-faith plain-language template, not legal advice. Before charging real money at scale, have it reviewed by a qualified privacy professional for your jurisdiction.