Last updated: 2026-10-06
Healti (“we”, “us”) is a nutrition, training and wellness app. This policy explains what we collect, why, who processes it for us, and how to delete it.
Controller: Naser Kakadost, 215 68 Malmö, Sweden. Contact: naser.kakadost@hotmail.com
Account. When you first open the app, we create an anonymous account identified by a random ID. If you sign up, we also store your email address, and your name if you sign in with Google.
Profile. This is what you enter during setup: age, sex, height, weight, activity level and goal. We use it to calculate your daily targets.
What you log. Meals (names, calories, macros), workouts (exercises, sets, weights), and daily check-ins and water.
Barcodes and food searches. When you scan a barcode or search for a food, the barcode or search text is sent straight from your phone to Open Food Facts to look up the product. It is not linked to your account.
Health data (optional, with your permission). If you connect Health Connect (Android), Healti reads steps, active calories, exercise sessions, weight, resting heart rate and blood pressure.
Technical logs. Our server logs each request’s route, status and timing. These logs contain your anonymous account ID but not what you logged.
We don’t collect your location, contacts, advertising ID or device identifiers.
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Running the app: storing and showing your log, calculating targets | Account, profile, logs | Contract |
| Reading Health Connect, on your device only | Health data | Explicit consent, given in the system permission screen |
| Security and abuse prevention | Technical logs | Legitimate interest |
Health data is special-category data under GDPR. We process it only with your explicit consent, which you can withdraw at any time by revoking the permission.
We share data only with the providers that run the service, only for the purposes above, and under their data processing terms:
| Provider | What for | Data |
|---|---|---|
| Google Firebase (Google LLC) | Sign-in | Account ID, email, name |
| Railway (Railway Corp.) | Server hosting and database | Everything stored in your account |
| Open Food Facts | Barcode and food search lookups, sent straight from your phone | The barcode or search text only, never your account |
| Apple / Google | App distribution | As described in their own policies |
Our server and database are hosted by Railway in the United States (US West). Firebase may also process data in the United States. Where data leaves the EEA or UK, it is protected by the providers’ Standard Contractual Clauses.
We don’t sell or rent your personal data, and we don’t share it for advertising.
Healti’s use of information received from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements. In particular:
We keep your data until you delete it or delete your account. Deleting your account removes it from our database immediately, and from our providers’ backups within 30 days.
Anonymous accounts that are never signed up for are kept like any other account. You can delete one from Profile → Data → Delete my data.
Depending on where you live (for example under the GDPR or UK GDPR), you can:
You can delete your data in the app. For anything else, email naser.kakadost@hotmail.com. We answer within 30 days.
You can also complain to your data protection authority. In Sweden, that is Integritetsskyddsmyndigheten (IMY), www.imy.se.
Healti has no minimum age. If you are under 13, ask a parent or guardian before you use Healti, because in Sweden and the rest of the EU a child under 13 needs their consent for us to process their data. If you are a parent or guardian and believe your child has used Healti without your consent, contact us and we will delete the account and its data.
Data is encrypted in transit (HTTPS). Every request is authenticated with a Firebase ID token and can only reach the account it belongs to. Access to our database is limited to the people who run Healti.
If we make material changes to this policy, we will say so in the app before they take effect.
Naser Kakadost · naser.kakadost@hotmail.com · 215 68 Malmö, Sweden