Privacy Notice

Who is responsible for your data

Undohs is run by Thomas Leeming, a sole trader trading as "Undohs". Thomas Leeming is the data controller for personal data collected through Undohs, meaning we decide how and why it's used. Contact us at rightaboutnothing@gmail.com.

What we collect and why

• Account details (email, name, sign-in details, or your Google account email if you use Google sign-in) — to create and secure your account. Legal basis: contract.
• Pet and habit data (your pet, check-ins, streaks, workouts, XP, friends and family links) — to run the app. Legal basis: contract.
• Body stats for adults (age, height, weight, if you choose to add them) — to tailor goals. Legal basis: your consent, which you can withdraw by deleting them.
• Meal photos — analysed to give feedback, calories and nutrients. Legal basis: contract. Photos are processed by our AI provider to produce feedback.
• Device and usage data (IP address, device type, time zone, error logs, notification subscriptions) — to send reminders, keep the service secure, prevent fraud and fix problems. Legal basis: legitimate interests.
• Support messages — to help you. Legal basis: legitimate interests.

We never show ads and never sell your data.

Children

Children's profiles are set up and managed by a parent or guardian, who gives consent on their behalf. We collect only what's needed to run the pet game. Kids never see calories or weight, cannot make purchases, and can only add friends that their parent approves. Parents can ask us to see or delete their child's data at any time.

Who we share data with

• Service providers who help us run Undohs: hosting and database, sign-in, AI meal analysis, the USDA nutrition database (food names only), and push notification services.
• Paddle, our Merchant of Record, for selling memberships and packs, managing subscriptions, payments, tax compliance and invoicing.
• Professional advisers such as accountants or lawyers, where needed.
• Authorities, where the law requires it.

International transfers

Some providers may process data outside your country, including outside the UK or EEA. Where that happens, we rely on safeguards such as adequacy decisions or Standard Contractual Clauses.

How long we keep data

We keep your data while your account is open. When you delete your account, we delete or anonymise your data within 30 days, except records we must keep by law (such as purchase records). Undohs does not save meal photos in its app database or photo library. Photos are sent to the AI service for analysis; provider processing, security logging and retention are separate, and we do not promise that all providers delete every copy immediately after analysis. Friends and family cannot view your meal photos through Undohs.

Your rights

Depending on where you live, you can ask to access, correct, delete, restrict or move your data, object to how we use it, and withdraw consent at any time. Email rightaboutnothing@gmail.com and we'll reply within one month. You can also complain to your local data protection authority.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls so each account can only see its own data, and limited access for staff.

Cookies

We use only essential storage in your browser to keep you signed in and remember your settings. We don't use advertising or tracking cookies.

Changes

We may update this notice and will tell you in the app about important changes.