MyWeight – Privacy Policy

Effective from: July 3, 2026 · Last updated: July 3, 2026

1. Who is the data controller

The data controller is:

Name	Jiří Šmejkal
Business ID (IČO)	10470361
Tax ID (DIČ)	CZ6011241379
Registered address	Gebauerova 1421, 500 02 Hradec Králové, Czech Republic
Email	aaaposta@gmail.com

For any matters relating to the processing of your personal data, you can reach me at the email address above.

2. What data I process

2.1 Account data

Email address (used to deliver your access code and for communication)
Access code (unique identifier for your account)

2.2 Health data

      ⚕️ Weight, height, and BMI data are considered a special category of personal data under GDPR (Article 9 – health data). I process this data only on the basis of your explicit consent, which you give by entering this data into the app yourself.
    

Weight entries and their dates
Height, goal weight, calculated BMI
Optional notes in the "About me" section (e.g. medications, health conditions, dietary preferences)
Optional journal entries (subjective notes about how you feel, food, exercise)

Sharing your journal or notes with the AI for analysis purposes is always optional, and the app asks for your separate consent each time before doing so.

2.3 Location data

If you enter your city name in the app, it is geocoded (converted to coordinates) and stored so the app can display local weather.
If you grant browser geolocation permission, the app uses your current location once to display weather (coordinates are not stored in this case).

2.4 Payment data

Payments are processed exclusively by Stripe. The app never sees or stores your card details. My database only keeps a record of the payment type and date.

2.5 Technical and analytics data

ℹ️ When you visit the app, it automatically records your IP address and, based on it, an approximate location (country, region, city) using a third-party service, along with your browser type and referring page. This data is used solely for internal visitor statistics — not for marketing or cross-site tracking of individuals.

3. Why I process your data (legal basis)

Purpose	Legal basis
Providing the app, account management	Performance of a contract (Art. 6(1)(b) GDPR)
Processing health data, AI analysis	Your explicit consent (Art. 9(2)(a) GDPR)
Invoicing and accounting	Legal obligation (Art. 6(1)(c) GDPR)
Internal visitor statistics	Legitimate interest of the controller (Art. 6(1)(f) GDPR)

4. Who I share data with

To operate the app, I use the following processors and recipients of data:

Service	Purpose	Note
Stripe	Payment processing	Based outside the EU, complies with EU standard contractual clauses
Anthropic (Claude AI)	AI progress analysis and generating recommendations	Based outside the EU (USA); health/journal data is only shared with your consent
Brevo	Sending emails (access code, payment confirmations)	EU-based processor
ip-api.com	Approximate geolocation from IP address for statistics	Processes only the IP address
Open-Meteo	Displaying weather	Receives only coordinates, no personal identifiers

I never sell personal data or share it with third parties for marketing purposes.

5. Transfers of data outside the EU

Some of the processors listed above (Stripe, Anthropic) are based in the USA. Transfers of data to these countries are safeguarded by standard contractual clauses approved by the European Commission or another appropriate mechanism under GDPR.

6. How long I keep your data

Account and health data: for the duration of your licence, plus 12 months after it expires, unless you request earlier deletion.
Payment accounting records: 10 years, as required by Czech accounting law.
Analytics records (IP, location, referrer): up to 12 months.

7. Your rights

In relation to the processing of your personal data, you have the right to:

access your personal data,
rectify inaccurate data,
erasure ("the right to be forgotten"),
restrict processing,
data portability (export in a machine-readable format),
object to processing based on legitimate interest,
withdraw your consent to the processing of health data at any time, without affecting the lawfulness of processing before its withdrawal,
lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.cz, or with your local data protection authority.

To exercise any of these rights, contact me at aaaposta@gmail.com.

8. Cookies

The app uses only technical cookies necessary for its operation (login session, storing your access code for easier repeat log-in). The app does not use third-party marketing or advertising cookies.

9. Security

I take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or misuse. However, no method of data transmission or storage is completely secure.

10. Age restriction

The app is not intended for individuals under the age of 16.

11. Changes to this policy

I may update this policy from time to time, for example in connection with changes to the app or applicable law. I will notify you of significant changes by email or via a notice in the app.

← Back to homepage

⚖️ MyWeight