Política de privacidad

This Privacy Policy explains how Mediacharge GmbH, Auenstr. 28, 80469 Munich, Germany, processes personal data when you use the Histamino website and mobile app. Mediacharge GmbH is the data controller. You can contact us at info@mediacharge.com.

1. Information We Collect & How We Use It

When you use Histamino, we collect basic information to provide, maintain, and improve our services.

• Account Data: Your email address and any profile information you choose to provide. We use it to create and secure your account and provide the service under our contract with you (Article 6(1)(b) GDPR).
• Diary and Health-Related Data: Entries you choose to record, including meals, supplements, medication, stimulants, activity, stress, cycle information, mood, symptoms, and avoided foods. We process this data to provide your requested tracking features, based on your explicit consent (Articles 6(1)(a) and 9(2)(a) GDPR). You may withdraw consent at any time by deleting the relevant entries or your account.
• Technical and Usage Data: Device, browser, diagnostic, and interaction information needed to operate, secure, and improve the service. We process essential data to perform our contract and protect our legitimate interests in a secure, reliable service (Articles 6(1)(b) and 6(1)(f) GDPR). Optional website analytics require your consent (Article 6(1)(a) GDPR).

2. No Advertising or Marketing Data Sharing

We strictly protect your data. We do not sell your personal data, and we do not share it with advertising or marketing providers of any kind. There are no advertising trackers in the Histamino app.

3. AI Features (OpenAI)

Some Histamino features rely on artificial intelligence provided by OpenAI. Depending on the feature, requests are sent either directly from the app to OpenAI or through a secure Supabase function:

• What is sent: When you use AI features such as voice logging, label scanning, dish recognition, or food and recipe research, the content you actively submit in that moment (photos, voice input, food names, or recipe text) is transmitted to OpenAI solely to process your request. For voice logging, this also includes entries already logged that day—such as meals, supplements, medication, stimulants, activity, stress level, and whether a cycle entry exists—along with your usual supplements, medication, stimulants, and avoided foods, so the entry can be created accurately.
• Your consent: None of this information is sent to OpenAI before you agree to the transfer in the app.
• What is not sent: Your name, email address, and symptom entries are never sent to OpenAI or any other AI provider.
• No model training: Content submitted to these AI features is not used to train AI models.
• Retention: Content sent to OpenAI is deleted within 30 days.
• Your responsibility: AI output can be inaccurate. Please verify automated entries before saving them, as described in our Terms of Service.

4. Service Providers (Data Processors)

To operate Histamino we work with the following carefully selected service providers, who process data only on our behalf and under data-processing agreements:

• Supabase: Hosting of our database and authentication (account and diary data).
• Lovable: Website infrastructure.
• Resend: Delivery of newsletter emails, sign-in codes, and support replies.
• Google Analytics (website only): Anonymous usage statistics on our website, activated only after your explicit cookie consent. You can withdraw this consent at any time in the cookie settings.

5. Retention and International Processing

We retain account and diary data while your account is active and delete or anonymize it when you use the account-deletion controls, except where limited retention is required by law or necessary to establish, exercise, or defend legal claims. Support communications and transaction records are retained only for the periods required for their purpose and applicable legal obligations. Some providers may process data outside the European Economic Area; where required, we use recognized safeguards such as an adequacy decision or the European Commission's Standard Contractual Clauses.

6. Cookies and Analytics

Essential storage is used for sign-in, security, and your privacy preferences. Google Analytics runs on the website only after you accept optional analytics cookies. You can withdraw that consent at any time through Cookie Settings.

7. Your Data Protection Rights

Under the GDPR, you have complete control over your personal information. Histamino provides built-in tools for you to exercise these rights easily.

• Right to Erasure: You can permanently delete your account and all associated personal data at any time.
• Right to Anonymization: You can choose to anonymize your account, which strips away personally identifiable information while allowing you to keep using the core app.
• Access & Portability: You can request a digital copy of the personal data we hold about you.
• Correction: You may update or correct any inaccurate personal data directly in your profile.
• Restriction and Objection: Where the GDPR applies, you may request restricted processing or object to processing based on legitimate interests.
• Complaint: You may lodge a complaint with the Bavarian State Office for Data Protection Supervision (BayLDA) or another competent supervisory authority.

8. Contact Us

If you have questions about this policy or want to exercise your privacy rights, contact Mediacharge GmbH.

Email: info@mediacharge.com