Privacy Notice

Astryx is the data controller for the personal data collected through the Astryx web application. This notice explains what we collect, why, who we share it with, and the rights you have.

• Account data — your email address and sign-in credentials, used to create and secure your account (legal basis: performance of our contract with you).
• Profile and tracking data — birth year, gender, height, weight, goal weight, physique choices, activity level, equipment, schedule, meals, steps and weight check-ins, used to build and adjust your personal plan (legal basis: performance of our contract).
• Meal photos and fridge ingredients — when you choose to scan a meal or request fridge ideas, the photo or ingredient list is sent to our AI provider for analysis. Scan counts are stored to enforce the free allowance (legal basis: performance of our contract).
• Coach conversations — your messages with the Artex AI coach, stored so your chat history and plan adjustments persist (legal basis: performance of our contract).
• Usage and device data — basic technical data such as device type and IP address, used for security, fraud prevention and improving the service (legal basis: our legitimate interests).

Your birth-year age check is also saved on your device. Do not upload sensitive photos or information you do not want analyzed.

• Service providers — hosting, database and AI processing providers that operate the service on our behalf, bound by data-processing terms.
• Paddle (Merchant of Record) — when you make a purchase, Paddle.com processes the payment as Merchant of Record and receives the data needed for the sale, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where we are required to disclose data by law.

We do not sell your personal data.

We keep your data for as long as your account is active and as needed to provide the service. When data is no longer needed it is deleted or anonymised. You can delete your account and its saved tracking data at any time from the More screen in the app.

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent. You can exercise most of these directly in the app (editing your profile, deleting your account); for anything else, contact us at astryxsupport26@gmail.com. If you are in the UK or EEA, you also have the right to complain to your data protection authority, and we will respond to requests within one month.

Some of our service providers process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

We apply appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and row-level isolation so your tracking data is private to your account.

Astryx uses essential browser storage only — to keep you signed in and remember your on-device preferences (such as your age check and theme). We do not use advertising or marketing cookies.

For any privacy request that cannot be completed in the app, contact us at astryxsupport26@gmail.com. For payment-related data handled by Paddle, see Paddle's privacy policy at paddle.com/legal/privacy.