Vegit
Legal

Privacy Policy

Last updated: 15 September 2026

This Privacy Policy explains how personal data is processed when you use the Vegit website and the Vegit Android application.

1. Controller

The controller responsible for processing personal data is:

Dominik Schwan E-Mail: contact@vegit.io

2. Data minimisation

Vegit is designed as a privacy-conscious application that operates primarily on the user's device. No Vegit user account is required. Nutrition and progress data entered in the app is stored locally on the device. Vegit does not operate its own backend to which this data is uploaded.

3. Data processing in the Vegit app

3.1 Locally stored data

To provide its functionality, Vegit processes and stores the following types of data locally on the device:

This data is not uploaded to a server operated by Vegit and is not accessible to us. Vegit does not provide its own cloud synchronisation or cloud backup service for this nutrition and progress data.

3.2 User accounts

Vegit does not use its own user-account system. Registration, an email address, username or password are not required to use the app.

3.3 Notifications

Vegit can use local notifications at your request, for example for daily or weekly reminders. This requires the notification permission provided by the operating system.

Vegit's reminders are scheduled locally on the device. Vegit does not operate its own push server and does not request an Expo or Firebase push token for this functionality. Notification permission can be withdrawn at any time in the Android system settings.

3.4 Purchases and subscriptions through Google Play

Paid products and subscriptions are processed through Google Play Billing. Payment itself is handled by Google. Vegit does not receive or process credit-card details, bank-account details or other complete payment information.

To recognise and restore purchases and provide Premium access, Vegit processes purchase information supplied by Google Play. This may include the product identifier, purchase status, purchase time, transaction identifier, purchase token and acknowledgement status.

Some of this purchase evidence is stored locally on the device. Purchase tokens and information required for transaction processing are transmitted to Google Play through the Google Play Billing functionality, for example to acknowledge a purchase or check existing ownership.

Vegit does not operate its own billing server and does not perform server-side receipt validation. Google independently processes additional account, payment, device, network and fraud-prevention information in connection with Google Play.

3.5 Analytics, advertising and tracking in the app

The Vegit app does not use application analytics, advertising networks or behavioural tracking. In particular, Google Analytics is not used inside the Vegit app.

Vegit also does not operate its own service for automatically uploading crash reports or diagnostic logs. Android and system libraries may create local technical logs. Vegit does not upload these local logs to a server operated by us.

3.6 Deleting local app data

Locally stored application data can be removed by clearing Vegit's application data in the Android system settings or by uninstalling the app. Google Play purchase records are not deleted by doing so because Google manages these records independently of the local Vegit installation.

4. Use of the website

4.1 Website delivery and server logs

When you access our website, technically necessary information is transmitted between your device and our web server. This may include:

This processing is necessary to deliver the website, ensure its stability and security, and identify technical faults or abusive access. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website.

Server log data is deleted once it is no longer required for operation and security, unless longer storage is necessary to investigate a specific security incident or comply with legal obligations.

4.2 Hosting by netcup

The website is hosted by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. As part of the hosting service, netcup may process data necessary to provide, secure and operate the servers.

Where netcup processes personal data on our behalf, this processing is carried out for the technical provision of our website.

5. Google Analytics 4

We use Google Analytics 4 on the website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics is activated only after you have consented to statistics or analytics technologies through our consent banner. Without this consent, the Google Analytics tag is not loaded and no data is transferred from this website to Google Analytics.

The legal basis for this processing is your consent under Article 6(1)(a) GDPR. Where information is stored on or accessed from your device, this also takes place only with your consent in accordance with Section 25(1) TDDDG.

After consent, Google Analytics may process information including:

According to Google, Google Analytics 4 does not log or store individual IP addresses of users in the European Union. IP addresses may technically be used for transmission and to derive approximate location information, but are not logged or stored in Analytics.

After consent, the cookies _ga and _ga_<ID> may in particular be set. They are used to distinguish users and sessions and can remain stored for up to two years under the standard configuration.

The retention period for user-level and event-level data in our Google Analytics property is set to 2 months. Aggregated statistical reports may remain available independently of this retention setting.

Your consent is voluntary and may be withdrawn at any time with future effect using the cookie or privacy settings provided on the website. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

5.1 International data transfers by Google

Google may also process data outside the European Economic Area. According to Google, recognised transfer mechanisms are used for such transfers, including adequacy mechanisms such as the EU-U.S. Data Privacy Framework and, where required, Standard Contractual Clauses.

6. Contacting us

If you contact us by email, we process the information you provide, in particular your email address and the contents of your message, for the purpose of handling your enquiry.

Depending on the subject of the enquiry, processing is based on Article 6(1)(b) GDPR for pre-contractual or contractual measures or Article 6(1)(f) GDPR based on our legitimate interest in responding to enquiries.

The data is deleted when it is no longer required to handle your enquiry unless statutory retention obligations require longer storage.

7. Recipients of personal data

Personal data is disclosed only where this is necessary to provide our services, where we are legally required to do so, or where another legal basis applies.

Relevant recipients may include:

8. Your rights

Where we process personal data relating to you, you may have the following rights subject to the applicable legal requirements:

Where data is stored exclusively locally within the Vegit app, we do not have access to that data and therefore cannot retrieve or delete it on our servers for you.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

9. Data security

We use appropriate technical and organisational measures to protect personal data. The website is transmitted using HTTPS encryption. Vegit additionally follows a local and data-minimising approach in which nutrition and progress information is processed directly on the user's device wherever possible.

10. Changes to this Privacy Policy

We may update this Privacy Policy if Vegit's functionality, the services we use or legal requirements change. The current version will be published on this website.

← Vegit