Privacy Notice

Last updated: 7/29/2026

Who we are

Syndova Health ("we", "us") is the data controller for the personal data described in this notice.

Personal data we collect

• Account data: email address, hashed password, sign-in timestamps.
• Health tracking data: food photos, meal descriptions, calorie/macro entries, weight, water intake, activity, goals.
• Support and communications: messages you send us.
• Usage and device data: IP address, browser, session identifiers, feature usage for security and product improvement.

Why we use it and legal basis

• Providing the Service — contract performance.
• Security, fraud prevention, service reliability — legitimate interests.
• Product improvement and analytics — legitimate interests.
• Marketing emails — only where you have opted in (consent).
• Legal compliance — legal obligation.

Who we share data with

• Hosting and infrastructure providers (Supabase, Cloudflare).
• AI providers used to analyze food photos and generate meal plans.
• Email delivery providers (Resend) for transactional emails.
• Paddle, our Merchant of Record, for subscription management, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) and authorities where required by law.

Data retention

We keep your account and health data for as long as your account is active. If you delete your account, we delete or anonymize the data within 30 days, except where retention is required by law.

Your rights

You may request access, correction, deletion, restriction, portability, or object to processing. For users in the UK/EEA, GDPR rights apply and we respond within one month; you also have the right to lodge a complaint with a supervisory authority. Contact support@syndovahealth.com to exercise your rights.

International transfers

Some processors are outside the UK/EEA. We rely on standard contractual clauses or adequacy decisions to safeguard those transfers.

Security

We use encryption in transit, access controls, and row-level security to protect your data. No system is perfectly secure — please use a strong password and enable OS-level device security.

Cookies

We use essential cookies and local storage to keep you signed in and remember preferences. We do not use advertising cookies.