CBCUTBULK

Privacy Policy

Last updated: 29 September 2026

TEMPLATE — this document is a draft pending review by the operator and is not yet legal advice.

Who we are

CutBulk is operated from Estonia (European Union). We are the data controller for the personal data described here. Contact: cutbulksupport@gmail.com.

What data we collect

Account data: your email address and sign-in details.

Body and plan data you enter: sex, age, height, body weight, optional body fat %, activity level, daily steps, training days, goal, pace, eating habits and food preferences.

Logs: daily bodyweight, calories and protein eaten, and optional body measurements.

Subscription data: plan, status and billing period. Card details are handled by Stripe and never reach our servers.

Anonymous usage events (for example "plan completed") without weight, calories, email or other personal details.

Why we process it

To calculate and adapt your calorie and macro plan and show your progress (performance of our contract with you).

Body and nutrition data is health-related data. We process it only with your explicit consent, given at signup (GDPR Art. 9(2)(a)). You can withdraw consent at any time by deleting your account.

To manage payments and subscriptions (contract and legal obligations).

To understand how the app is used and improve it (legitimate interest), using anonymous events only.

Where it is stored

Our database and authentication provider (Lovable Cloud, built on Supabase) stores your account, profile and logs.

Stripe processes payments and stores billing information.

PostHog (EU cloud) receives anonymous usage events. No cookies are set for analytics.

These providers act as processors under data processing agreements. Where data leaves the EU/EEA, standard contractual clauses or equivalent safeguards apply.

How long we keep it

Account, profile and logs: as long as your account exists. Deleting your account removes them immediately.

Billing records: kept by Stripe and us as required by accounting law (in Estonia, generally 7 years).

Anonymous analytics events: up to 12 months.

Your rights

Under the GDPR you have the right to access, correct, delete and export your data, to restrict or object to processing, and to withdraw consent.

Access and export: Settings → "Export my data". Correction: edit your answers in Settings. Deletion: Settings → "Delete my account".

For anything else, email cutbulksupport@gmail.com. You may also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).

Children

CutBulk is not intended for children under 16. Users under 18 should talk to a parent or doctor before changing their diet.