Privacy policy
What changed in version 1.2?
The app gained a new premium feature: progress photos. These are the first images we store — tied to your account, inside the European Union, and visible only to you. You can delete any of them at any time, and deleting your account deletes them all — see section 2.5. Because a photo of your body may count as special category data, the app asks everyone to accept the notice again.
What changed in version 1.1? (1 September 2026)
The app gained AI features (assistant, weekly review, fasting messages and meal photo recognition). These send data to OpenAI — see sections 2.4 and 4. Meal photos are not stored. If you had already consented to health data processing, the app will ask again, because the change is material.
Daymons is a fasting companion app that processes health-related data (weight, height, age, fasting habits). We use this data solely to operate the service, we store it inside the European Union, and you can delete it from the app at any time.
This is the English edition of the Hungarian privacy notice. It describes the same service, operated by the same controller, under the same terms. This document is a translation of the Hungarian original at daymons.hu/adatvedelem; in the event of any discrepancy, the Hungarian version prevails.
1. The data controller
| Name | SOMA 3000 Kereskedelmi és Vendéglátó Korlátolt Felelősségű Társaság (SOMA 3000 Kft.) |
|---|---|
| Registered seat | Bocskai utca 2, 4274 Hosszúpályi, Hungary |
| Company reg. no. | 09-09-007476 |
| Tax number | 12513808-2-09 |
| soma3000kft@gmail.com |
You can reach us at the e-mail address above on any data protection matter.
2. What data we process
2.1. Account data
- Guest (anonymous) use: a random identifier. We do not ask for a name or an e-mail address.
- Registered account: your e-mail address, or — if you sign in with a Google or Apple account — the identifier and e-mail address we receive from them. We never see or store your password; that is handled by Google Firebase Authentication.
2.2. Profile and health data
- age, height, weight, biological sex, activity level (to estimate your daily energy requirement);
- weight entries and their timestamps;
- fasting data: start and end time, target and actual duration, whether it was completed;
- goals (e.g. target weight, daily calorie goal, number of meals);
- shopping lists and daily menu selections.
Under Article 9 of the GDPR, weight and fasting habits may qualify as health data, and we therefore ask for your separate, explicit consent in the app before processing them.
2.3. Technical data
- a push notification device identifier (FCM token), if you enable notifications;
- error logs and crash reports (Firebase Crashlytics) and usage statistics (Firebase Analytics);
- subscription status and transaction identifier (RevenueCat, App Store / Google Play).
We never see or store payment card details — payment is handled by Apple and by Google.
2.4. Data sent to the AI features
The premium AI features (assistant, daily coach, weekly review and weekly Autopilot, in-fast messages, meal, fridge and menu photo recognition, personal challenges, trend watch) pass the request through our server to the OpenAI language model. These may contain:
- Assistant: the question you type and a short numeric summary (current fast length and target, streak, today's health score);
- Daily coach: today's aggregate figures (fast, calories, protein, water, sleep, activity), your goals and the goal programme you chose;
- In-fast messages: your fast's target and the aggregate count and length of your previous completed fasts;
- Weekly review: that week's aggregate figures (fasts, water, calories, sleep, workouts, weight change);
- Weekly Autopilot: your week's aggregate figures;
- Personal challenges: a summary of your previous days;
- Trend watch: your trends over several days compared with your own average;
- Meal photo: the picture you take or choose;
- “What should I eat?”: the photo you take of your fridge, a menu or a buffet, solely for recognition, plus what is left of today's calorie and protein budget and your fasting window.
The request contains no name and no e-mail address — the model is not told who you are. The photos (meal, fridge, menu, buffet) are stored neither by us nor by the provider: they pass through in the request and are discarded once the answer comes back.
OpenAI operates in the United States; the transfer is based on the European Commission's standard contractual clauses (SCCs). Under the provider's own policy, data sent through the OpenAI API is not used to train models.
Using the AI features is voluntary: if you do not use them, no such transfer takes place. Before first use, the app asks for separate, explicit consent ("Accept & Enable AI Features"), and until you give it, no AI feature sends any data — not even automatically. You can withdraw consent at any time: Profile → AI features.
If you had already enabled the AI features, the app asks for separate, explicit consent again for the extended scope of the daily coach, “What should I eat?”, personal challenges, the weekly Autopilot and trend watch. Your earlier consent does not cover this scope: until you give the new one, no AI feature in the app sends any data.
2.5. Progress photos
With the premium Progress photos feature you can save photos you take or choose of yourself, to follow your change over time and compare it with an earlier picture. For this we store:
- the photo — before saving, the app scales it down to at most 1280 pixels and compresses it (JPEG);
- the date of the photo and, if you enter them, your weight and a short note (up to 200 characters);
- when it was saved and where the image is kept in storage.
Where we store it: the image in Google Firebase Storage, the related data in the Firestore database — both inside the European Union. To display photos faster, a temporary copy may be kept on your device; it is removed when you sign out and when you delete your account.
Who can see it: only you, with your signed-in account — this is enforced by server-side access rules. We do not publish the photos, do not send them to any AI provider, and do not use them for any other purpose. Only you can share them, by your own explicit choice; your weight is not on the shareable image by default.
Deletion: you can delete any photo individually in the app — the image is then deleted from storage as well. When you delete your account, all your photos and their data are permanently deleted.
Data portability: on request we provide your photos and their data (date, weight, note) in a machine-readable format — see section 7.
Under Article 9 of the GDPR, a photo of your body may qualify as special category (health) data, so we ask for your explicit consent to process it. Using the feature is voluntary.
3. Why we use it, and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Operating the fasting timer, journal and statistics | fasting data, account identifier | performance of a contract — GDPR Art. 6(1)(b) |
| Personalised energy requirement and recipe suggestions | profile, health data | explicit consent — GDPR Art. 6(1)(a) and Art. 9(2)(a) |
| Weight tracking | weight entries | explicit consent — GDPR Art. 9(2)(a) |
| Storing and displaying progress photos | photos, photo date, optional weight and note | explicit consent — GDPR Art. 6(1)(a) and Art. 9(2)(a) |
| Notifications (fasting stages, reminders) | FCM token | consent — GDPR Art. 6(1)(a) |
| AI features: assistant, daily coach, weekly review and Autopilot, in-fast messages, meal, fridge and menu photo recognition, personal challenges, trend watch | your question, daily and weekly aggregate log figures, your goals and goal programme, meal, fridge and menu photos | explicit consent — GDPR Art. 6(1)(a) and Art. 9(2)(a) |
| Managing subscriptions and billing | subscription status | performance of a contract — GDPR Art. 6(1)(b) |
| Debugging, security, service improvement | error logs, usage statistics | legitimate interest — GDPR Art. 6(1)(f) |
You may withdraw your consent at any time (see section 7). Withdrawal does not affect the lawfulness of processing carried out beforehand.
4. Who we share it with (processors)
We do not sell your data and we do not use it for advertising. We rely on the following processors to operate the service:
- Google Ireland Ltd. / Google LLC (Firebase) — authentication, database (Firestore), file storage for progress photos (Storage), notifications, error logging, statistics. The database and the file storage are kept in the European Union.
- OpenAI, L.L.C. (USA) — the language model behind the AI features. It receives only the data listed in section 2.4, with no name and no e-mail address, and does not store the photos.
- RevenueCat, Inc. — subscription management and receipt validation.
- Apple Inc. / Google LLC — processing payments in the app stores.
Some processors may operate infrastructure outside the EU; in those cases the transfer is based on the European Commission's standard contractual clauses (SCCs) or on an adequacy decision.
5. How long we keep it
- Account and fasting data: for as long as your account exists. When you delete your account we delete it permanently.
- Shopping lists: deleted automatically after 14 days.
- Progress photos: until you delete them individually, and at most for as long as your account exists. When you delete your account we delete them permanently.
- Meal, fridge and menu photos: not stored. The text of a weekly AI review and of the daily coach stays in your account for as long as the account exists.
- Error logs: for the period set by the provider (typically 90 days).
- Accounting records: for the period required by law (payments are handled by the app stores).
6. Deleting your account and your data
You can delete your account from the app at any time:
Profile tab → Delete account. This permanently deletes your account and all data belonging to it (fasts, weight entries, progress photos, profile, settings). The action cannot be undone.
If you cannot sign in, you can also request deletion at the e-mail address above.
7. Your rights
Under the GDPR you have the right to:
- be informed about the data we process about you (access);
- have inaccurate data corrected (you can also edit your profile directly in the app);
- have your data erased (the "right to be forgotten");
- request restriction of processing;
- object to processing based on legitimate interest;
- data portability (a machine-readable copy);
- withdraw your consent at any time.
Send your request to the e-mail address above; we will respond within 30 days at the latest.
Complaints
If you believe we have infringed your rights, you may lodge a complaint with the supervisory authority:
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Falk Miksa utca 9-11, 1055 Budapest, Hungary · naih.hu ·
ugyfelszolgalat@naih.hu
If you are resident in another EU member state, you may also lodge a complaint with your local supervisory authority.
8. Security
Data travels over an encrypted connection (HTTPS/TLS) and is stored encrypted. Only your signed-in account can access your own data — this is enforced by server-side access rules.
9. Children
The service is not recommended for anyone under 16, and we do not knowingly collect data from them. If we become aware of such data, we delete it.
10. Important health notice
The values shown by Daymons (daily energy requirement, fasting stages, recommendations) are informational estimates and do not constitute medical advice. They do not replace the opinion of a doctor or a dietitian. Before starting a fast or a diet — and especially in case of illness, pregnancy, breastfeeding or medication — seek professional advice.
11. Changes to this notice
We may update this notice from time to time. In case of a material change we will notify you in the app and, where necessary, ask for your consent again. The version in force is always available on this page.