Privacy

The short version

Refuelled holds what you tell it and what your devices tell it, so it can plan your meals and your training. Your health data is encrypted where it is stored, kept out of our logs, never sold, never used for advertising, and never sent to an AI model. You can export it or delete it.

What we hold

• Your account: an email address, and a password stored only as a hash.
• Your household: the people in it, their names, and their dietary needs.
• Food and plans: recipes, what is in your cupboards, what you planned and what you logged.
• Health and body data: weight, body composition, sleep, steps, heart rate, blood pressure and sessions, whether typed in or brought by a connected device.
• Play: what you did. Not how you felt: there is no field for it.

Health and fitness data

Body figures are encrypted at the column level in our database, so they are unreadable without the key even to somebody holding a copy of the data. They are excluded from application logs and from any analytics.

Where you connect Google Health Connect, Refuelled reads only the kinds of data you approve, on your phone, and sends the daily figures to your own account. The raw store never leaves your device. Read access can be withdrawn at any time in Health Connect, and disconnecting stops any further reading. Health Connect data is never shared with anyone, never used for advertising, and is deleted when you delete your account.

Where you connect Withings or Strava, we hold an access token, encrypted, so we can fetch your own data. Disconnecting removes it.

Who can see it inside your household

Recipes, the cupboards, the plan and the shopping list belong to the household. What you ate, what you did and your body figures belong to you, and another adult sees them only if you share them. A child's records are visible to whoever manages them until that child claims their own account. Allergens are visible to everyone, because the person cooking needs to know.

AI

Refuelled uses an AI model to propose meal plans, to read a nutrition label you photograph, and to pull a recipe out of a web page. It is given targets and constraints, never your medical notes, your body figures or your play. It never states a nutrition figure; those are computed from reference data by our own code.

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct it, or ask us to delete it. Deleting your account removes your records; anything you contributed to the shared food library stays, because it is no longer personal to you.

Getting in touch

Placeholder: contact address and the registered data controller go here.