Legal Document

Privacy Policy

Purine Me · Low-Purine Diet Tracker · Last updated: June 2026

1 Who We Are

Bartłomiej Kęsicki
ul. Wiśniowa 5, Świercze, Poland
E-mail: bartek.develop33@gmail.com

We are the developer of Purine Me ("the App"), a mobile application for Android and iOS that helps users track a low-purine diet, estimate uric acid levels, calories, hydration, and meal plans for educational and lifestyle purposes. We are not a medical device manufacturer.

For purposes of the General Data Protection Regulation (GDPR) and other applicable privacy laws, we act as the data controller for any personal data processed in connection with the App.

2 Scope of This Policy

This Privacy Policy explains what personal data the App collects, where it is stored, how it may be shared with third-party service providers, and what rights you have regarding your data.

Please also review our Terms of Service, which govern the use of the App.

The App is available in English and Polish. This document is the authoritative English version. A Polish translation may be provided separately for convenience; in the event of conflict, the English version prevails.

Key point: Purine Me has no user accounts, no registration, and no cloud sync of your personal health data. The developer does not collect, store, or have access to any personal data entered by the user. All data is stored exclusively on your device. The App operates fully offline for all core features; internet connectivity is only used for third-party services (payments via Google Play / App Store, and ads for free-tier users — see Sections 7 and 8). You can permanently delete all your data at any time directly from within the App (see Section 9).

3 Data Stored Locally on Your Device

All of the following data is stored in a local SQLite database or in device SharedPreferences (Android) / UserDefaults (iOS) and never transmitted to our servers (we operate no backend of our own).

3.1 User Profile

3.2 Nutritional & Health Records

3.3 App Preferences & State

3.4 Technical / Operational Data

Data we do not collect: e-mail address, phone number, postal address, GPS location, camera / microphone data, contacts, social-account credentials, or any data via our own servers. We have no backend of our own and never receive or store any personal data you enter into the App.

4 Third-Party Services That Receive Data

While your health and profile data stays on-device, the App integrates four third-party SDKs that may receive limited technical or transactional data as described below.

Service Provider Purpose Data potentially received
Firebase Crashlytics Google LLC Crash & error diagnostics Crash reports, stack traces, error logs, device model, OS version, App version. We do not intentionally send health data to Crashlytics; however, debug log fragments may theoretically appear in stack traces.
Google AdMob Google LLC Displaying ads to Free-tier users Advertising identifier (GAID / IDFA), device info, IP address, ad-interaction events. Subject to your consent choice via the UMP consent form (EEA / UK users).
RevenueCat RevenueCat Inc. Premium subscription management Anonymous App User ID, transaction IDs, subscription status. Payment card data is handled exclusively by Google Play or the Apple App Store; we never see it.
Google Play In-App Update Google LLC Checking for app updates (Android) Standard Google Play API traffic; no additional personal data beyond device/account info already present in the Play Store context.

Each of these providers acts as an independent data controller or data processor for the data they collect. We encourage you to review their respective privacy policies:

Local Notifications — No Server Push

All push notifications are generated and scheduled entirely on your device using WorkManager (Android) and BackgroundFetch (iOS). No notification content is transmitted to or received from any server. We do not use Firebase Cloud Messaging (FCM).

5 Health Data & Medical Disclaimer

The App processes data that may constitute health-related personal data under GDPR Article 9, including date of birth (month and year), body weight, height, physical activity level, estimated uric acid levels, caloric intake, hydration, and BMI. This data is stored exclusively on your device and is not transmitted to our servers.

By accepting the in-app medical disclaimer during onboarding (and again before generating a dietary plan), you explicitly consent to the local processing of this health-related data for the sole purpose of operating the App's educational and lifestyle features. Your consent is the legal basis under GDPR Art. 6(1)(a) and Art. 9(2)(a).

Medical Disclaimer: All calculations and estimates provided by Purine Me — including estimated uric acid levels, BMI, BMR, and caloric values — are based on mathematical formulas and publicly available nutritional data. They are provided for informational and educational purposes only and do not constitute medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional before making changes to your diet or medical regimen.

6 Push Notifications

The App may request permission to send you local (on-device) notifications. You may grant or deny this permission at the system level. If permission is denied, all notification options are disabled in the App's UI.

The following notification types are available (each individually toggle-able in Settings):

A global 24-hour cooldown is enforced — at most one notification per day is sent. Quiet Hours (default 22:00–08:00, configurable) suppress all notifications during the defined window.

The App tracks lightweight engagement signals (last-open timestamp, log streak, display counters) in SharedPreferences to decide when a notification is relevant. This data never leaves your device.

You may revoke notification permission at any time in your device's system settings (Android: Settings → Apps → Purine Me → Notifications; iOS: Settings → Notifications → Purine Me).

7 Premium Subscription

Purine Me offers an optional Premium subscription that unlocks additional features (full dietary plan generator, shopping list, meal-plan logging, trial period).

Subscription purchases are processed entirely by Google Play (Android) or the Apple App Store (iOS). We receive only a subscription-status entitlement and an anonymous RevenueCat customer ID — never your payment details.

To manage or cancel your subscription, use the respective store's subscription management page:

Some Premium screens may enable a screenshot-protection flag to prevent accidental capture of your dietary plan content. This operates entirely on-device via the system's FLAG_SECURE (Android) or equivalent (iOS) mechanism.

8 Advertising & Consent (AdMob / UMP)

Free-tier users see ads served by Google AdMob. Ads are displayed as banners (dashboard and product screens) and interstitials (e.g., after adding a meal, within the demo plan).

EEA, UK & Switzerland users — UMP Consent

In accordance with EU/EEA data protection law and Google's EU User Consent Policy, users in the European Economic Area (EEA), United Kingdom, and Switzerland are shown a consent form (UMP — User Messaging Platform) before personalised ads are displayed.

You can review or change your ad-consent choice at any time via Settings → Privacy & Data in the App, or by revoking the advertising identifier in your device settings (Android: Settings → Privacy → Ads; iOS: Settings → Privacy → Tracking).

Premium subscribers do not see AdMob advertisements.

9 Data Storage, Security & Retention

Storage

Personal data is stored in a local SQLite database (purine_meORM.db) and in device-level key-value stores (SharedPreferences / UserDefaults). We do not operate cloud storage for your personal or health data.

Security

Access to your device's data is controlled by the operating system's app sandboxing. We rely on Android and iOS security models to protect your data from other apps. We do not guarantee encryption of the local database at rest; security is inherent to the device's own storage protections.

OS Backups

Your device's operating system (Android/Google Backup, iCloud) may automatically back up app data, including the App's database and preferences. This backup behaviour is controlled by your OS settings, not by us.

Retention & Deletion

Your data persists on your device until you delete it. The App provides a built-in Clear Data function (Settings → Privacy & Data → Clear All Data) that permanently deletes the entire local database and all preferences, then restarts the onboarding flow. This action is irreversible.

You may also uninstall the App at any time; on most devices, uninstallation removes all locally stored app data (subject to OS backup settings).

Data held by third-party services (Crashlytics, RevenueCat) is subject to their own retention policies. Contact those providers directly to exercise deletion rights regarding data they hold.

10 International Data Transfers

Your health and profile data does not leave your device and therefore is not subject to international transfer by us.

However, the third-party SDKs we use (Firebase Crashlytics, Google AdMob, RevenueCat) are operated by companies headquartered in the United States. When these services process data (crash reports, ad signals, subscription status), that data may be transferred to and processed in the USA or other countries outside the European Economic Area.

Google and RevenueCat rely on the EU Standard Contractual Clauses (SCCs) and/or the EU–U.S. Data Privacy Framework as a legal basis for international data transfers. Details can be found in their respective privacy policies linked in Section 4.

11 Your Rights (GDPR & Applicable Law)

Where GDPR or equivalent law applies, you have the following rights regarding your personal data. Because most data is stored locally, many rights are exercised directly on your device.

Right How to exercise it
Right of access — know what data is held All personal/health data is on your device. You can view it directly in the App.
Right to erasure ("right to be forgotten") Use Settings → Privacy & Data → Clear All Data to permanently delete all local data. For third-party data, contact the relevant provider.
Right to rectification Edit your profile and meal logs directly within the App.
Right to data portability The App does not currently offer a data-export function. Your data is stored in a standard SQLite file; technically proficient users may access it via device file management tools.
Right to withdraw consent Withdraw ad-personalisation consent in Settings → Privacy & Data. Withdraw notification permission in device system settings. Withdrawal does not affect lawfulness of prior processing.
Right to object / restrict processing Contact us at the address in Section 14. Note: because we hold no cloud copy of your health data, practical processing restrictions are achieved by using the Clear Data feature.
Right to lodge a complaint You may lodge a complaint with your national supervisory authority (e.g., UODO in Poland; ICO in the UK; your local Data Protection Authority in the EU).

Legal Bases for Processing

12 Children's Privacy

Purine Me is intended for users aged 16 and above. The App is not directed at children under 16 years of age, and we do not knowingly collect personal data from children under 16.

The App does not implement an automated age-verification mechanism. If you are a parent or guardian and believe your child under 16 has entered data into the App, please use the Clear Data function (Section 9) to remove all locally stored data, and contact us (Section 14) regarding any data held by third-party services.

13 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App's features, legal requirements, or third-party integrations. When we make material changes, we will update the "Last updated" date at the top of this page and, where feasible, display an in-app notice.

Continued use of the App after such changes constitutes your acknowledgement of the updated policy. If you do not agree with any changes, please discontinue use and remove your data using the Clear Data function before uninstalling.

The current version of this policy is always available at:
https://bartekkesicki.github.io/purineMePrivacyPolicy/private%20policy.html

14 Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:

BARTŁOMIEJ KĘSICKI
ul. Wiśniowa 5, Świercze, Poland
E-mail: bartek.develop33@gmail.com

We will endeavour to respond to all requests within 30 days in accordance with GDPR Art. 12(3).