Privacy Policy

This Privacy Policy explains how De Groodt SRL (“we”, “us”), operating the MyTemple app and website at https://mytemple.fit, collects, uses, stores and shares personal data.

Controller: De Groodt SRL, VAT BE0533715774, Avenue Josephine Charlotte 34, 1330 Rixensart, Belgium.
Contact: info@mytemple.fit

MyTemple is a general wellness product for nutrition and fitness coaching. It is not a medical device and does not provide medical diagnosis or treatment.

1. Data we collect

Account & identity

• Email address and password (if you sign up with email)
• Name or display name (from signup or your Google / Apple account; Apple may provide a relay email via Hide My Email)
• Authentication identifiers and session tokens

Health & fitness data

• Profile details: birth date, sex, height, activity level, habits text
• Goals: target weight, weekly pace, calorie and macro targets, training programme
• Food and drink logs: meals, calories, macros, micronutrients, meal photos, water / coffee / alcohol counts
• Body metrics: weight, body fat %, muscle mass (manual or synced)
• Workouts, sets, effort, feedback; daily steps and activity calories
• Learned maintenance estimates and day-level progress summaries

Coach & AI content

• Coach chat messages and conversation titles
• Coach memory: dated symptom or life-limitation entries, durable preferences, and source records used to keep coaching relevant. Removing a memory erases memory-owned copies but does not delete the originating chat message or workout note. An opaque fingerprint may remain solely to prevent the same source from being re-imported.
• Proposed coach actions and programme recommendations

Device & product usage

• Your Apple device model, iOS version, and installed app version/build — linked to your account for app compatibility, diagnostics, and support, not advertising or tracking
• First-party product events (session start, page views, heartbeats) while you are signed in — used to improve the product, not for cross-app advertising
• On the iOS app only: short session recordings of the app UI after your first sign-in (onboarding), for up to about five minutes or until you leave the app, and optional support session recordings when our team starts a live support session. Support recordings show a small red indicator you can tap to stop. Recordings help us improve onboarding and fix bugs; they are not used for advertising
• Technical logs needed to operate and secure the service

2. How we use your data

• Provide nutrition logging, training plans, home screens and coaching
• Run AI features (meal photo analysis, coach answers, programme suggestions)
• Sync optional third-party health sources you connect
• Authenticate you, prevent abuse, and keep the service reliable
• Respond to support requests and meet legal obligations

Legal bases under the GDPR include performance of the contract (providing the service), your consent (e.g. camera / photo library / health connections), and our legitimate interests in securing and improving the product — balanced against your rights.

Health-related data is treated as a special category of personal data (GDPR Art. 9). We process it to provide the wellness features you request.

3. Processors & third parties

We use service providers who process data on our instructions:

• Supabase — authentication, database, and storage of meal photos
• OpenRouter — AI gateway. Meal photos are sent for vision analysis (currently via a Google model). Coach and programme features send structured text context (profile, goals, logs, chat) via text models (currently OpenAI). Images in audit logs are replaced with placeholders; prompts may be retained for quality and abuse prevention
• Google — optional Sign in with Google (name/email per Google’s account settings)
• Apple — optional Sign in with Apple (name/email, possibly Hide My Email)
• Withings — optional connection. With your consent we sync weight, body composition, steps, activity calories and workouts. OAuth tokens are stored securely on our servers. Disconnecting stops future sync; previously synced metrics remain until you delete them or your account
• Apple Health (HealthKit) — optional iOS connection. When enabled, MyTemple may read body mass, body fat, lean mass, steps, active and basal energy, workouts, sleep, heart-rate related recovery signals, blood pressure, daylight and audio exposure from Apple Health to personalise coaching. It may write back workouts and daily nutrition summaries when you enable write-back. Health permissions stay under your control in iOS Settings; synced copies are stored in your MyTemple account until you delete them or your account
• PostHog (EU cloud) — iOS session replay for product improvement and support. We send UI session recordings (with input masking defaults) linked to your account id: automatically for a short first-session window after first login, and when support starts a live recording session. Not used for advertising or cross-app tracking
• Lovable Cloud — hosting and OAuth broker used for social sign-in flows

We do not sell your personal data. We do not use your data for third-party advertising tracking.

4. Photos & camera

If you photograph a meal, the image is uploaded to our storage and may be sent to our AI provider for analysis. Photos are stored under your user ID and deleted when you delete the related entry or your account.

5. Retention

We keep your data while your account is active. When you delete your account we erase your profile, logs, coach history, photos and related records from our systems (subject to short technical backups and any data we must retain by law). Admin AI audit logs may retain de-identified or truncated technical traces for a limited period.

6. Your rights

Under Belgian and EU law you may request access, rectification, erasure, restriction, portability, and objection to certain processing. You can also lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit).

To delete your account in the app: Profile → Account → Delete account. Or follow delete-account. For other requests email info@mytemple.fit.

7. Children

MyTemple is not directed at children under 16 and is not intended for users who cannot consent to processing of health data under applicable law. Do not create an account if you are under that age.

8. International transfers

Our processors may process data in the EU and other countries (including the United States) under appropriate safeguards such as Standard Contractual Clauses where required.

9. Changes

We may update this policy. The “Last updated” date at the top will change. Material changes may also be notified in the app or by email where appropriate.

10. Contact

De Groodt SRL
Avenue Josephine Charlotte 34, 1330 Rixensart, Belgium
VAT BE0533715774
info@mytemple.fit