PKU Zdrowie App Privacy Policy

← Back to the PKU Zdrowie app

Privacy Policy — PKU Zdrowie

1. Data controller

The controller of personal data of PKU Zdrowie app users is PRZEDSIĘBIORSTWO HANDLOWO-USŁUGOWE Artur Łasocha, based in Poland.

Contact: app@pkuzdrowie.pl

2. What data do we collect?

Data from your Google account:

  • Google account email address
  • Name from your Google profile (if shared)
  • Unique Google account identifier (UID)
  • Profile picture from your Google account (if shared)

Data from your email account:

  • Email address
  • Password — stored only in encrypted form by Firebase Authentication

Data you enter (local):

  • Name and profile data (Phe limit, PKU type, age, weight)
  • Meal, meal-set and recipe data
  • Custom products
  • Phe blood-test results
  • Notes on diary days
  • Phe calculator history
  • Photos of recipes, meal sets, meals, and avatars

Data in the Google cloud (always):

  • Email, name, UID
  • Registration date and last login date
  • Number of published recipes
  • Activity logs (audit logs): user identifier, event type, date, time, app version — retained for 12 months

Data in the Google cloud (optional):

  • Community recipes — name, ingredients, description, tips, nutritional values, author data
  • Recipe photos
  • Cross-device sync data

Google analytics data:

  • In-app events (launch, navigation)
  • Device information (model, Android version)
  • Session duration
  • Country/region (based on IP)

Analytics data does not include health or dietary data.

Data on Google Drive (Backup feature):

  • Backup file in the "PKU Zdrowie" folder
  • JSON format with photos
  • The app can only access files it created itself (scope: drive.file)

3. Purpose and legal basis for processing

Performance of a contract (Art. 6(1)(b) GDPR) — authenticating the user, enabling use of the app's features

Legitimate interest of the controller (Art. 6(1)(f) GDPR) — technical analysis of app performance, security

User consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR) — processing health data (Phe limit, PKU type, weight, test results) and using optional features that require cloud data processing

4. App permissions

  • Internet — required for Google sign-in, cloud sync, and the Drive backup feature
  • Camera (CAMERA) — optional, for taking photos and scanning barcodes
  • Notifications (POST_NOTIFICATIONS) — for optional meal reminders (Android 13+)
  • Exact alarms (SCHEDULE_EXACT_ALARM) — for scheduling notifications

5. External services

Google LLC — the app uses Google cloud services for user authentication, storing account and recipe data, technical analytics, and optional backups to Google Drive. Data is processed in accordance with Google's Privacy Policy.

5a. Purchases in the online store through the App

The App allows you to place an order in the PKUZdrowie.pl online store (sklep.pkuzdrowie.pl) without leaving the App. The data you provide when placing an order (including name, delivery address, phone number and order history) is processed by the Seller under the terms set out in the Online Store Privacy Policy and the Online Store Terms and Conditions — not under this App privacy policy. The controller of this data is the same entity: PRZEDSIĘBIORSTWO HANDLOWO-USŁUGOWE Artur Łasocha.

6. Data transfer outside the EEA

We use Google LLC's (USA) cloud services. Data transfer is based on Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data sharing

We do not sell or share user data with third parties for commercial purposes. Data is shared only with:

  • Google LLC — for authentication, storing account and recipe data, synchronization, and technical analytics
  • Google Drive — only when the user activates the Backup feature

The Data Export feature generates a JSON file on the user's device — it is up to the user to decide who to share it with.

Recipes published in the Community are visible publicly to all users.

8. How to delete your account and data

  1. Open the app and go to the side menu (avatar icon in the top left corner)
  2. Select Settings
  3. Find the Google Account section and tap Log out
  4. Choose "Delete data and log out"
  5. Type DELETE in the confirmation field and confirm

What will be deleted: all profiles, meal diary, meal sets, recipes, custom products, and account data from Google's servers.

Recipes published in the Community — will be automatically anonymized: authorship data (name, identifier) will be removed, and recipe photos permanently deleted. The recipe content will remain visible as published by a "Deleted user". If you want to remove your recipes entirely, do so manually before deleting your account.

If you cannot access the app, contact us at app@pkuzdrowie.pl — we will delete your data manually within 30 days.

9. Your rights (GDPR)

Right of access (Art. 15) — all data is visible directly in the app

Right to erasure (Art. 17) — use the option described in section 8. Recipes published in the Community are automatically anonymized. Activity logs are automatically deleted after 12 months.

Right to data portability (Art. 20) — use the Data Export feature or Google Drive Backup in Settings

Right to rectification (Art. 16) — you can edit all your data directly in the app

Right to object (Art. 21) — you can object to processing based on legitimate interest by contacting app@pkuzdrowie.pl

Right to restrict processing (Art. 18) — contact app@pkuzdrowie.pl

Right to lodge a complaint — you have the right to file a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland

10. Data security

Local data is stored in a database on the device, protected by standard Android security mechanisms. Only the PKU Zdrowie app's processes have access to it.

Cloud data is stored on Google's servers with encryption at rest and in transit (TLS). Each user can only access their own data.

11. Data retention period

Data is stored for as long as you use the app. After account deletion, data is promptly removed from the device and from Google's servers. Analytics data is retained by Google for up to 14 months.

Activity logs (audit logs) — retained for 12 months from the date of the event, after which they are automatically and permanently deleted.

12. Children

The PKU Zdrowie app is intended for people with phenylketonuria and their caregivers, including children. Signing in with Google requires a Google account — for children under 13, the account should be managed by a parent or legal guardian, who consents to the processing of the child's health data.

13. Limitation of liability

The PKU Zdrowie app is provided "as is", without any warranties — express or implied — regarding its availability, continuity of operation, accuracy, or fitness for a particular purpose.

The controller is not liable for:

  • data loss resulting from device failure, operating system issues, Google service outages, or other factors beyond the controller's control
  • damages arising from the use of the app or the inability to use it
  • dietary or medical decisions made based on information displayed by the app
  • acts or omissions of third parties, including Google LLC

The controller reserves the right to modify, limit, or discontinue any app features at any time, without prior notice and without liability to users.

14. Changes to this privacy policy

The controller reserves the right to change this privacy policy at any time. We will inform you of significant changes by updating the app on Google Play and changing the date at the top of this document. Continued use of the app after changes are published constitutes acceptance of the new policy.

15. Medical disclaimer

The PKU Zdrowie app is a diet-management support tool and does not constitute medical advice.

Data on phenylalanine, calorie, and nutrient content is for informational purposes and comes from publicly available nutrition tables. It may differ from the actual composition of specific products due to differences between batches, manufacturers, or preparation methods.

Your daily Phe limit and any dietary decisions should be determined and supervised by a physician or qualified dietitian specializing in the treatment of phenylketonuria. The app does not replace medical consultations, laboratory tests, or an individual treatment plan.

If you have any doubts about your diet or health, always consult your treating physician.

16. Contact

For questions about privacy or exercising your GDPR rights: