Privacy Policy

1. Who we are

Replenia ("we", "us", or "our") is developed and operated by Trianvil Software d.o.o., a company registered in Croatia. For the purposes of the EU General Data Protection Regulation (GDPR), Trianvil Software d.o.o. is the data controller for the personal data described in this policy. You can reach us at developer@trianvil.com.

2. Information we collect

Account information: your email address and a sign-in identifier when you sign in with Apple or Google, or a pseudonymous account identifier when you continue as a guest.

Profile information you provide: age, height, weight, gender, activity level, dietary preferences, and allergies or intolerances.

Health and wellness information you log: the GLP-1 medication you tell us you are taking (brand, dose, schedule and injection details), symptoms and their intensity, food, water, supplement and exercise entries, and weight measurements. You provide this information voluntarily so the app can show your log against daily nutrient reference values; we treat it as sensitive health data and process it only because it is necessary to provide the service you have asked for. It is never used for advertising, and it is never sent to our analytics or crash-reporting providers.

Questions you ask Repi: if you use Repi, the in-app helper, the questions you type and the answers you receive (see section 7).

Technical information: device model and operating system version, app interaction events, a push notification token, your device's country/region setting (used to localise the food database), and diagnostic information about errors, and — for advertising measurement only — a Meta-generated install identifier.

3. Camera and photos

The camera is only accessed when you explicitly activate a scanning feature — photographing a meal, a supplement label, or a barcode. Photos you take or pick from your photo library are transmitted securely, processed temporarily to recognise the food or supplement, and are not permanently retained on our servers.

4. How we use your information

We use the information described above to provide and personalise the app — comparing your food log with daily nutrient reference values, timing your reminders, and keeping your journal in sync across your account — to authenticate you, to respond to your requests, to send you service communications and the notifications you enable, and to understand and improve how the app is used.

We do not sell your personal information. Replenia shows no advertising inside the app. To measure how the app is used and to find defects, the app includes Google Firebase Analytics and Firebase Crashlytics; they receive technical information and app-interaction events only — never the medication, symptom, food, supplement or body data you log.

Advertising measurement. We advertise Replenia on Meta platforms (Facebook and Instagram). So that we can tell whether those ads work, the app includes the Meta SDK, which receives only four things: that the app was opened, that onboarding was completed, that a subscription screen was shown, and that a subscription was started, together with the price paid and technical information about the device. The app does not ask for Apple's tracking permission and does not share the iOS advertising identifier; on iOS, Apple reports an ad-driven install to Meta only in aggregate, without identifying you. On Android you can reset or delete your advertising ID in your device's Google settings. Meta never receives your name, email address, or any of the medication, symptom, food, supplement or body data you log, and we never use that data to build advertising audiences.

The push notification token is registered when the app first launches so that the reminders you enable can be delivered. You can turn notifications off at any time in your device settings.

5. Apple Health and Health Connect

With your permission, Replenia can read weight, lean body mass, body fat percentage, workouts, sleep and resting heart rate from Apple Health on iPhone or from Health Connect on Android. Weight, body composition and workouts fill in your journal automatically and sync to your account; sleep and resting heart rate are kept on your phone only, as context on your Profile, and are never uploaded. Health data is used only to provide these features. It is never used for advertising or marketing, is never sold, and is never shared with third parties for their own purposes. You can withdraw access at any time in the Health app, in Health Connect, or in your device settings.

6. Third-party services

We rely on a small number of service providers to run Replenia:

Apple — Sign in with Apple, App Store purchases, Apple Health integration and push notification delivery.

Google — Google Play purchases, Health Connect integration on Android, and Google sign-in if you choose it.

Google Firebase — app analytics, crash reporting and push notification infrastructure.

Meta Platforms (Facebook) — measurement of our advertising campaigns, limited to the app-usage and purchase events described in section 4. Meta processes this data under its data-processing terms; we enable Meta's Limited Data Use setting so that data from California residents is processed under CCPA service-provider restrictions.

Crash and diagnostic data. When the app encounters an error or crashes, we collect a diagnostic report through Firebase Crashlytics (Google LLC). The report contains the error and stack trace, the app version and build flavour, and the device model and operating system version. It does not contain your name, email address, account identifier, or any of the health, nutrition or medication data you enter in the app, and it is not used to identify you or linked to your account. We use these reports solely to find and fix defects.

RevenueCat — management of subscription status. Payment itself is handled entirely by Apple or Google; we never see your card or banking details.

Google (Gemini API) — answering the questions you ask Repi, the in-app helper, as described in section 7. This data is not used for advertising.

OpenAI — real-time recognition of meal and supplement-label photos, nutrition analysis, and answering the questions you ask Repi when Google's service is unavailable. This data is not used for advertising.

Amazon Web Services (AWS) — hosting of our backend and database, in the United States and/or the European Union.

7. AI features and photo processing

Replenia's scanning and analysis features are powered by artificial-intelligence models. For users in the United States, uploaded food photos may be used in anonymised form to improve our proprietary recognition models; you can avoid this simply by not using the photo scanning features. Photos from users outside the United States are not used for model improvement.

Repi, the in-app helper. Repi answers questions about the app, your own log and everyday nutrition using artificial-intelligence models provided by Google (Gemini API) and, when that service is unavailable, OpenAI. Repi is optional. Before your first question the app asks for your permission, and until you give it nothing you type is sent. When you ask a question, we send these providers your question and the conversation so far and, only when a question needs it, the Replenia data required to answer it. That data can include your profile and goals, the medication, dose and schedule you entered, and entries from your log such as food, water, supplements, symptoms, weight and activity. Your name, email address and account identifier are not included. The providers process this data on our behalf to generate the answer and to sort questions by topic; it is not used for advertising. Each provider may keep a request for a limited period under its own terms. On our servers the working conversation is kept for up to two hours after its last message, and a record of each question and answer is kept for 30 days so that we can find and fix problems, then deleted; it is deleted at once if you delete your account. You can withdraw your permission at any time in Settings › Repi, where you can also turn Repi off. Repi provides general information only and is not medical advice.

8. Data retention and deletion

We retain your data for as long as your account is active. You can delete your account and the data associated with it at any time directly in the app (Settings › Account › Delete account), or by emailing developer@trianvil.com. You can export your journal as a PDF or CSV from the app at any time.

9. Your rights

Where the GDPR applies, you have the right to access, correct, export, restrict or object to the processing of your personal data, the right to erasure, and the right to withdraw consent at any time without affecting the lawfulness of processing before the withdrawal. You also have the right to lodge a complaint with a supervisory authority — in Croatia, the Personal Data Protection Agency (AZOP).

If you are a California resident, you have equivalent rights under the CCPA, including the right to know, delete and correct personal information, and the right not to be discriminated against for exercising them. We do not sell personal information. The advertising measurement described in section 4 sends Meta app-usage and purchase events only, processed under Meta's Limited Data Use terms for California residents; it does not involve your iOS advertising identifier, and the app does not ask for tracking permission. Replenia does not respond to browser "Do Not Track" signals.

To exercise any of these rights, contact developer@trianvil.com.

10. Consumer health data

This section applies to residents of Washington, Nevada and other U.S. states with consumer health data laws. Replenia collects the consumer health data described in section 2 — the medication, symptom, food, water, supplement, exercise and body measurements you enter, and any data you choose to import from Apple Health or Health Connect — for the sole purpose of providing the app's features to you. We do not sell consumer health data, and we do not share it with third parties other than the service providers listed in section 6, who process it on our behalf and under our instructions. Our analytics, crash-reporting and advertising-measurement providers do not receive it. The providers that answer Repi's questions receive it only after you give permission in the app, as described in section 7.

You may access or delete your consumer health data at any time in the app, or by emailing developer@trianvil.com; deletion requests are honoured within 30 days. If a breach of your unsecured health information ever occurs, we will notify you and the U.S. Federal Trade Commission as required by the Health Breach Notification Rule.

11. International data transfers

Your data is hosted on Amazon Web Services in the United States and/or the European Union. Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

12. Children's privacy

Replenia is not intended for anyone under the age of 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. Material changes will be announced in the app, and the effective date above will be revised. Your continued use of Replenia after a change takes effect indicates your acceptance of the updated policy.

14. Contact

For any question about privacy or this policy:

Trianvil Software d.o.o. Email: developer@trianvil.com Website: https://www.trianvil.com