Easy Keto

Privacy policy

Privacy – the short version

Your privacy comes first. We process personal data when you use the Easy Keto app or easyketo.app – your name, your email address, how you use the app, or the weight and progress you log – and, together with the platform concerned, when you visit our profiles on TikTok, Instagram or YouTube (section 16 of the full policy). Your data from the app and the website is treated confidentially, transmitted encrypted, and kept only for the periods the full policy gives for each service.

You decide at any time what you share with us and what is visible on your profile. Your data is never sold and never used for purposes we can't explain. Ask us any time what we hold about you. You have the right to have it corrected, deleted or restricted, to receive it in a portable format, to object to processing, to withdraw your consent at any time with effect for the future and to lodge a complaint with a data protection supervisory authority.

Questions? Write to support@easyketo.app.

Controller & contact

The controller under data protection law, in particular the EU General Data Protection Regulation (GDPR), is:

Martin Stein – Easy Keto App
Building P-G-429
Leopoldstr. 2-8
32051 Herford, Germany
support@easyketo.app

The services that get to see data

Section 6 of the full policy names every single service, with its purpose, the data it receives, the legal basis, where it processes and for how long. In short:

  • Google Firebase – account, database, images, push notifications, server functions. The database and images are stored in the EU, the server functions run in Frankfurt (europe-west3), and sign-in runs at Google in the USA. Without these there would be no account.
  • Google Analytics – usage events to improve the app; from app version 3.6.8 only with your consent (asked at start-up, Settings › Privacy).
  • Crashlytics – crash reports.
  • Affiliate placements on the main menu – labelled as advertising. No data reaches the partner until you tap one.
  • Google AdMob and Meta Audience Network – advertising in the free version, only up to app version 3.6.7 (ads through AdMob on the iPhone and through Meta on Android; the AdMob SDK also starts on Android); from 3.6.8 neither of them starts any more.
  • AppsFlyer – ad measurement, from 3.6.8 only on the iPhone and only with your consent; the IDFA only with your additional consent in the App Tracking Transparency prompt; from 3.6.8 the Android app no longer uses AppsFlyer.
  • RevenueCat – checks whether your subscription is valid and restores purchases. During the trial it also receives the number of days after the first day of the trial on which you opened the app (0, 1, 2, 3+), to evaluate whether use during the trial is related to the subscription continuing as a paid subscription afterwards. The app also tells RevenueCat that you have seen the paywall. From 3.6.8 both only with your consent to usage analytics (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
  • Google Vertex AI (Gemini) – analyses the photos you take for an AI scan and translates published recipes and comments into the languages of the app. Both run in Frankfurt (europe-west3). Private entries are never translated.
  • fatsecret (through our own server, so it never sees your IP address) and Open Food Facts – food and barcode lookup.
  • Our own web analytics – currently switched off; no data is collected for it.
  • Apple Health / Health Connect – only if you allow it. The sync runs on your device; body values the app imports are saved in your weight diary, and so in your account, like the ones you enter yourself. If your app version has a step display, today’s steps are only shown there, never stored or sent anywhere. None of it is used for advertising or sold.

Our TikTok profile – We run the profile @easyketoapp on TikTok. TikTok gives us aggregated statistics about it; for collecting the underlying interaction data and compiling it into statistics, we and TikTok are joint controllers (Art. 26 GDPR). TikTok summarises our agreement at tiktok.com. Section 16 of the full policy sets out the purpose, the legal basis, your right to object and the essence of our agreement with TikTok.

Our Instagram and YouTube profiles – We also run @easyketo.app on Instagram and @EasyKetoApp on YouTube. Meta and Google give us aggregated statistics about them; for collecting the underlying data and compiling it into statistics, we consider ourselves joint controllers with Meta and Google as a precaution (Art. 26 GDPR). Section 16 of the full policy sets out the purpose, the legal basis and your right to object.

Notifications with offers

From version 3.6.8 of the app, Easy Keto only sends you notifications with offers and tips about Premium if you turn on the “Offers & Premium tips” switch in Settings under “Notifications” (consent, Art. 6(1)(a) GDPR). The switch is in the iPhone and Android app. The app chooses the tip on your device, based on how you use the app. You can withdraw your consent there at any time by turning the switch off again; this takes effect immediately. The details are in section 15 of the full policy.

Usage analytics and ad measurement

From version 3.6.8 the app asks at start-up whether it may use Google Analytics (usage analytics, Android and iPhone) and, on the iPhone, whether it may use AppsFlyer (ad measurement). Without your yes, the app sends nothing for these purposes. If you allow usage analytics, usage and device data are sent with your account ID to Google, including to the USA; the app also tells RevenueCat (USA) that you have seen the paywall and, during a free trial, the number of days you opened it. If you allow ad measurement, an identifier and device data are sent to AppsFlyer (stored in the EU and the USA, with support access also from Israel, the UK, Japan, India, China and Hong Kong); if you came through an ad, AppsFlyer reports the install and the later events to that ad’s network, such as TikTok, which uses them under its own responsibility. Retention: 2 months in Google Analytics, 14 months in the BigQuery export, at most 24 months at AppsFlyer, and at RevenueCat until the contract with RevenueCat ends; the app removes the trial-day count as soon as you turn usage analytics off. You can turn both off at any time under Settings › Privacy; this takes effect immediately. Data already sent is deleted after these periods, or without undue delay if you ask at support@easyketo.app. The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Older app versions do not ask yet and send this data without your consent; for them the legal basis is the legitimate interest in improving the app and its subscription offer based on how it is used and in evaluating advertising for the app (Art. 6(1)(f) GDPR), and for the IDFA your consent in the App Tracking Transparency prompt. You can object to this at any time by writing to support@easyketo.app (Art. 21 GDPR); with the update to 3.6.8, the app stops sending this data without asking. Transfers outside the EU are based on adequacy decisions of the European Commission (the EU-US Data Privacy Framework for Google; Israel, the UK and Japan for AppsFlyer) or on the EU Standard Contractual Clauses (AppsFlyer in the USA, India, China and Hong Kong; RevenueCat); you can get a copy of the clauses from support@easyketo.app. Details are in sections 6.2, 6.7 and 6.8 of the full policy (in German).

If you delete your account

Your personal and health data is deleted irreversibly; your record at RevenueCat is kept until you ask for its deletion at support@easyketo.app, ideally before you delete your account, or until the contract with RevenueCat ends (section 6.8). Content you have published – recipes and comments – stays in the app and is handed over, anonymised, to the app account “Avoketo”: your name disappears, the content remains for everyone else. If you do not want a published item to stay, delete it before you delete your account. Your own product photos and records of notifications you have opened are currently kept; we delete them if you ask at support@easyketo.app. The details are in section 10.

The full policy

Last updated: November 2026 (edition for app version 3.6.8).

The complete policy – every section on data processing, third parties, retention periods and your rights – is published in German, and the German version is the legally binding one: Datenschutzerklärung. The terms of use are a separate document. If you would like the full policy in English, write to support@easyketo.app and we will send it to you.