Privacy Policy for the Keto App

Last updated: July 2026

1. Overview

This app was developed following the principle of data minimization. Your entries (food diary, weight, photos, fasting times) are stored exclusively locally on your device. There are no user accounts, no cloud synchronization, no advertising and no tracking. Personal data is only processed to the extent that this is technically necessary for the particular feature you are using.

2. Data stored locally

All data you enter (food and calorie entries, weight, progress photos, fasting logs, goals and settings) is stored exclusively on your device and is not transmitted to us or to third parties. When you delete the app, this data is removed. Using the backup feature you can export it yourself as a file; this file remains under your control.

3. AI nutrition scan and recipe import

When you use the AI features (scanning nutrition tables or importing recipes via screenshot), the captured or selected image is transmitted to our server (keto-api.marcel-bartecki.de, hosted at Hetzner Online GmbH, Germany) and from there forwarded for analysis to the AI service Anthropic (Claude). The image is processed exclusively for text or recipe recognition and is not used for advertising or training purposes.

• Purpose: automatic recognition of nutritional values or ingredients
• Legal basis: Art. 6 (1) lit. b GDPR (performance of the feature you requested)
• Recipient: Anthropic PBC, USA (transfer to a third country, see section 7)

Please do not upload images that contain personal data beyond the nutrition table or the recipe.

4. Purchases and subscriptions

Purchases (Keto Pro) are processed through the Apple App Store or Google Play. To manage subscriptions and purchase entitlements we use the service RevenueCat, Inc. (USA). In this process an anonymous, randomly generated app user ID as well as the purchase status are processed. We do not receive payment data (e.g. credit card); these are processed exclusively by Apple or Google.

• Purpose: provision and restoration of purchased features
• Legal basis: Art. 6 (1) lit. b GDPR
• Recipient: RevenueCat, Inc. (USA); Apple Inc.; Google Ireland Ltd.

5. Product search (Open Food Facts)

For product search and barcode scanning we query the open database Open Food Facts. In doing so, your search term or the scanned barcode is transmitted to their server. No account data is transmitted.

• Recipient: Open Food Facts (non-profit organization, France/EU)

6. Device permissions

• Camera: only for scanning nutrition tables/barcodes and for taking progress photos
• Photo library: only for selecting existing images
• Notifications: for optional reminders (e.g. end of fasting); these are scheduled locally on the device

Permissions are only requested when you use the respective feature and can be revoked at any time in your system settings.

7. Transfer to third countries

Some of the mentioned services (Anthropic, RevenueCat) are based in the USA. The transfer takes place on the basis of the EU Commission's standard contractual clauses (Art. 46 GDPR) or, where applicable, the EU-US Data Privacy Framework.

8. Storage period

Local data remains until you delete it or remove the app. Images transmitted to Anthropic are retained there only briefly for abuse detection in accordance with their policies and are not stored permanently. Purchase and subscription data is processed for the duration of the contractual relationship and statutory retention periods.

9. No tracking, no advertising

The app contains no analytics, tracking or advertising SDKs. There is no user tracking across app or website boundaries.

10. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), as well as the right to lodge a complaint with a supervisory authority. Since, apart from the processing described, we do not permanently store any personal data and do not maintain accounts, a direct attribution to your person is generally not possible. Please send requests to kontakt@marcel-bartecki.de.

11. Children

The app is not directed at children under 16 years of age.

12. Changes

We may adjust this privacy policy if features or legal requirements change. The version linked within the app at the relevant time applies.