Privacy Policy

Who this policy is from

Minimalar ("the app") is published by Marawan Yakout ("we", "us"), of street address, city, postal code, country. This policy explains what the app does with information about you, and applies to the Minimalar mobile app for iOS and Android and to this website.

If you want to talk to a person about anything here, write to privacy@minimalar.com.

The short version

The app has no accounts and no server of its own holding your logs. What you record is written to storage on your phone and stays there. We cannot read it, because it never reaches us.

A short list of services is contacted, each for a single narrow purpose, and only when a feature that needs them is used: a food database when you scan or search, a second food database as a fallback, and a subscription service when a purchase needs validating. None of them receives your diary.

What is stored on your device

Everything below is written to the app's own local storage on your phone. It is not uploaded, backed up to us, or synchronised between devices:

• Food and drink entries, including calories and macronutrients
• Water intake
• Workouts, their duration and their estimated energy cost
• Focus and study sessions, their category, and the experience they earned
• Meditation sessions and reflections
• Fasting windows
• Notes
• Body measurements and BMI, if you record them
• Your profile — name, age, height, weight, sex, activity level — and your daily goals
• App preferences, such as sounds, haptics and reminder times

Because it lives only on the device, deleting the app deletes this data permanently and irreversibly. Export anything you want to keep first — here is how.

Your device's own backup — iCloud Backup or Android Backup — may include app data as part of a whole-phone backup. That is a function of your operating system and your settings with Apple or Google, governed by their policies, and we have no access to it.

What is transmitted, to whom, and why

This is the complete list. Nothing else leaves the app.

Your food log, workouts, focus sessions, meditation history, notes, measurements and goals are not part of any of these requests.

Like any internet request, these carry your device's IP address and a standard user agent to the service receiving them. Each service handles that under its own privacy policy: Open Food Facts, the U.S. Department of Agriculture and Adapty.

What we do not do

• No accounts. There is no sign-up, so we never hold an email address or password for you.
• No analytics or tracking SDKs. The app does not measure how you use it, and there is no crash or usage telemetry.
• No advertising. No ad networks, no advertising identifier, no cross-app tracking, and nothing that would require an App Tracking Transparency prompt.
• No selling or sharing. We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in United States state privacy laws.
• No profiles. We do not build a profile of you, and no automated decision-making with legal or similarly significant effects takes place.

Device permissions

Camera. Requested the first time you open the barcode scanner, and used only to read barcodes. Frames are processed on the device to find a barcode; no photograph or video is stored, and none is transmitted. Only the resulting barcode number is looked up.

Notifications. Requested only if you turn on reminders. They are scheduled and delivered locally by your phone; no push service is used and no notification content leaves the device.

You can withdraw either permission at any time in your device settings. The rest of the app continues to work without them.

Subscriptions and payment

Minimalar Pro is sold through the App Store and Google Play. Your payment details go to Apple or Google and never to us — we never see a card number.

Adapty validates App Store and Google Play subscription receipts, and tells the app whether your subscription is active. To do that it processes the store receipt and an anonymous installation identifier. It does not receive your health or activity logs. See Adapty's privacy policy.

Legal bases, for readers in the UK and EU

Where the UK GDPR or EU GDPR applies, we rely on these bases for the limited processing described above:

• Performance of a contract — validating a subscription you bought, and delivering the features you paid for.
• Legitimate interests — looking up a barcode or a food name you asked us to look up.
• Consent — camera and notification permissions, each requested in context and withdrawable at any time.

Data kept only on your device is not processed by us at all, so no basis is needed for it.

Your rights

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal information, to object to it, and to complain to a regulator.

In practice most of these you exercise directly, without asking us, because the data is on your phone: the app exports everything in plain text, and deleting the app erases it. The steps are here.

For the narrow set of data handled by the services above, write to privacy@minimalar.com and we will respond within one month. We will not discriminate against you for exercising a right. If you are in the UK or EU you can also complain to your local supervisory authority; if you are in the EU and we are not established there, our representative is Article 27 representative, if one is required.

International transfers

The services listed above operate internationally, so a lookup you trigger may be handled outside your country, including in the United States. name the transfer mechanism you rely on, e.g. UK IDTA or EU standard contractual clauses

How long things are kept

Data on your device is kept until you delete it — by removing an entry, resetting the app, or uninstalling it. We do not expire it for you.

Subscription records are kept by Adapty and by the app stores for as long as your subscription and their own legal obligations require.

Children

Minimalar is not directed at children under 13, and we do not knowingly collect personal information from them. Because there are no accounts, we have no way to identify a user's age. If you believe a child has provided information to us, write to privacy@minimalar.com and we will act on it.

Security

Your logs are protected primarily by your device: keep a passcode or biometric lock on it, and keep your operating system up to date. Requests the app makes are sent over HTTPS. No system is perfectly secure, but keeping data on the device removes the largest risk in a health app — a central database of other people's diaries.

Changes to this policy

If this policy changes we will update the effective date at the top and, for a change that materially affects you, say so in the app before it takes effect. The current version is always at minimalar.com/privacy.

Contact

Privacy questions and rights requests: privacy@minimalar.com

Everything else: support@minimalar.com — or see Support.

Postal address: street address, city, postal code, country