Privacy Policy
Summary
- We collect what the app needs to work: your account, and the plans, tasks, recipes, pantry and workouts you add.
- We don't sell your data, show ads, track you across other apps or websites, or use third-party analytics.
- Some features send your inputs to AI providers to generate suggestions. They get the content of the request, never your name or email, and may not use it to train their models.
- Workout and diet information can be health-related. We only process it with your explicit consent, and you can withdraw it at any time.
- You can export your data or delete your account at any time in Settings.
- Questions or requests: privacy@five2nine.cc.
This policy explains how Ricardo Pedrotti Vespero Fernandes ("we", "us") handles personal data when you use the Five to Nine iPhone app and the five2nine.cc website. We are the data controller. If you live in Washington, Nevada or another US state with a consumer health data law, also read our Consumer Health Data Privacy Notice.
1. What we collect, feature by feature
For each feature: what data is involved, why we use it, our legal basis under UK and EU data protection law (GDPR), how long we keep it, and who else receives it. Retention periods are summarised in section 5 and recipients in section 4.
Account and sign-in
- What
- Your name and email address (if you use Sign in with Apple and hide your email, we receive Apple's relay address instead), your profile picture link if you sign in with Google, the sign-in method you used, and the sign-in tokens Apple or Google give us. If you sign in with an email code, we store the code until it expires. If you set a password, we store only a secure hash of it, never the password itself. For each signed-in device we keep a session record with its IP address and device/browser type.
- Why
- To create your account, sign you in, keep your data in sync across your devices, and protect your account from misuse.
- Legal basis
- Performing our contract with you (Art. 6(1)(b) GDPR). Session IP and device data: our legitimate interest in keeping accounts secure (Art. 6(1)(f)).
Onboarding and preferences
- What
- Answers you give when you first set up the app, such as cooking styles, dietary preferences (for example vegetarian or gluten-free), fitness goals, experience level, available equipment and session length.
- Why
- To suggest starter recipes and workout routines. These answers are used on your phone and are not stored on our servers; only the recipes and routines you choose to add are saved to your account.
- Legal basis
- Performing our contract with you. Where an answer could reveal something about your health (for example a dietary restriction or a fitness goal), your explicit consent (Art. 9(2)(a)), see section 2.
Tasks, habits and day history
- What
- Tasks and habits you create (titles, notes, due dates, repeat rules, reminders, priority), when you complete or skip them, and a record of what was planned and done on each day.
- Why
- To show your plans, streaks and progress, and to sync them across your devices.
- Legal basis
- Performing our contract with you.
AI day plans
- What
- When you ask for a day plan: the date, your energy level, the time you have available, the focus you choose, and relevant items from your library (task titles and due dates, recipes, pantry items, routines).
- Why
- To generate a suggested plan. The request is sent to our AI providers (section 3). The plan you accept is saved to your account.
- Legal basis
- Performing our contract with you. Health-related inputs such as energy level: your explicit consent.
Recipes, pantry and groceries
- What
- Recipes you save, create or import (including any recipe text you paste in), photos you add to your recipes, your pantry items and grocery lists. When you ask for recipe ideas, your ingredients and food preferences are sent to our AI providers.
- Why
- To store your recipe library, suggest recipes, and keep your pantry and shopping lists in sync.
- Legal basis
- Performing our contract with you. Dietary preferences that could reveal health information: your explicit consent.
- Good to know
- Recipe photos are stored with a long random link that isn't listed or searchable anywhere, but anyone who has the exact link could open the image. Don't put anything private in recipe photos.
Receipt and grocery scanning
- What
- A photo you take or choose of a shop receipt or your groceries, and the items read from it (store name, date, item names, quantities, prices and totals).
- Why
- To add groceries to your pantry without typing them. The photo is compressed on your phone and sent to Google's Gemini AI to be read (section 3). We don't store the photo. We keep only the food and drink items and the receipt totals; we instruct the AI to leave out non-food items such as medicines or personal-care products, so those aren't saved.
- Legal basis
- Performing our contract with you.
- Good to know
- Receipts can show payment card digits, loyalty numbers or a shop's location. Crop or cover them before scanning if you prefer.
Workouts and routines
- What
- Routines and exercises you create or adopt, workout sessions (start and end times, duration, notes), and the sets you log (reps, weight, effort rating, duration, distance). When you ask for a generated routine, your goals, equipment, focus, body-area emphasis, available time and any custom goal you type are sent to our AI providers.
- Why
- To generate routines, run and record your workouts, and show your progress.
- Legal basis
- This information can be health data, so we process it only with your explicit consent (Art. 9(2)(a) GDPR), see section 2.
Reminders
- What
- Reminder times for your tasks and habits.
- Why
- Reminders are scheduled as notifications on your phone. We don't use a push notification service and don't send you marketing notifications.
- Legal basis
- Performing our contract with you. Notifications only appear if you allow them in iOS.
Emails we send
- What
- Your email address and the content of the email: sign-in codes, and your data export when you ask for one (sent as a file attached to the email).
- Why
- To sign you in and to give you a copy of your data. We don't send marketing emails.
- Legal basis
- Performing our contract with you; for exports, complying with your data access request (Art. 6(1)(c)).
Data on your phone
- What
- The app keeps a copy of your data on your phone so it works offline, and stores your sign-in session in the iOS secure keychain.
- Why
- Speed and offline use. This copy is deleted when you sign out or delete your account.
Logs and security
- What
- Technical records our servers create when the app talks to them: IP address, time, the request made, and error details. We don't log the content of your AI requests.
- Why
- To run the service, investigate errors, and detect and prevent abuse.
- Legal basis
- Our legitimate interest in operating a secure, working service (Art. 6(1)(f)).
We don't collect your precise location, contacts, calendar, Apple Health data, microphone audio, or advertising identifiers. If we add a feature that needs new data, we will update this policy first and, where required, ask for your consent.
2. Health-related data and your consent
Some information in Five to Nine can reveal something about your health: logged workouts (weights, reps, effort), fitness goals, dietary restrictions, energy levels, and free-text goals you type. Under UK and EU law this can be "special category" data, and under some US state laws it is "consumer health data".
- We process it only after you give explicit consent in the app. Consent to collect it and consent to share it with the providers listed in section 4 are asked for separately.
- We use it only to provide the features you use. We never sell it, use it for advertising, or share it with data brokers.
- You can withdraw consent at any time in Settings. When you do, we stop processing and delete your health-related data; features that depend on it (such as workout logging and personalised plans) will no longer be available. Withdrawing doesn't affect processing that happened before.
3. AI providers
Some features use AI models from third-party providers. Here is how that works:
- Requests contain only what the feature needs (described in section 1). We never send your name, email address or account ID.
- We only use providers whose terms do not allow them to use our requests to train their AI models. They may keep requests for a limited time to detect abuse and keep their services secure, under their own terms.
- The specific AI model we use can change at any time, for example to improve quality or reduce cost, without us updating this policy. We will only ever use the providers listed below. Before adding a new provider, we will update this list.
| Provider | Role | Used for | Location |
|---|---|---|---|
| Perplexity AI, Inc. | AI gateway: receives text requests and routes them to the model we select | Day plans, recipe ideas and imports, workout routines | United States |
| OpenAI (via Perplexity) | Model provider (current text model) | Same as above | United States |
| Anthropic (via Perplexity or directly) | Approved model provider (not currently in use) | Same as above | United States |
| Google LLC (Gemini API, paid service) | Model provider | Reading receipt and grocery photos; approved for text features | United States and other countries where Google operates |
AI-generated suggestions are labelled in the app. They are not reviewed by a person and can be wrong; see our Health & AI Disclaimer. AI suggestions are not used to make decisions about you that have legal or similarly significant effects.
4. Who receives your data
We don't sell your personal data or share it for targeted advertising. We share it only with the service providers below, who process it on our behalf under written data processing terms, and only to provide Five to Nine.
| Provider | What they do for us | Data involved | Location |
|---|---|---|---|
| Railway Corporation | Hosts our servers and database; keeps server logs | All account and app data stored on our servers | United States |
| Cloudflare, Inc. | Stores recipe photos; hosts this website | Recipe photos | Western Europe (photos), global network |
| Apple Inc. (iCloud Mail) | Hosts our support and privacy mailboxes | Emails you send us and our replies | United States and other countries where Apple operates |
| Resend (Plus Five Five, Inc.) | Sends our emails | Email address, sign-in codes, data exports | United States |
| AI providers | Generate suggestions and read photos | See section 3 | See section 3 |
Sign-in providers. If you use Sign in with Apple or Google, Apple or Google handles your sign-in under its own privacy policy and tells us who you are. They don't receive your Five to Nine data from us.
Exercise media. Exercise animations come from ExerciseDB through our servers. We only request an exercise by its ID, so no personal data is sent.
Other disclosures. We may disclose data if the law requires it, to protect the rights, safety or property of our users or others, or as part of a sale or reorganisation of the business (in which case this policy continues to apply and we will tell you before your data falls under a different policy).
5. How long we keep data
| Data | How long |
|---|---|
| Your account and everything in it | As long as you have an account. Deleted when you delete your account. |
| Sign-in sessions | 30 days from your last sign-in, or until you sign out |
| Email sign-in codes | 15 minutes |
| Receipt and grocery photos | Not stored by us; processed only while being read |
| Recent AI answers (to avoid repeating identical requests) | Up to 15 minutes, in server memory only |
| Server logs | 7 days |
| Database backups | Up to 30 days, then overwritten |
| Emails we've sent (at our email provider) | 30 days |
| Data at AI providers | Limited periods for abuse monitoring, under each provider's terms |
We don't currently delete inactive accounts automatically. If we start, we will warn you first.
6. International transfers
Our main service providers are based in the United States, so your data is transferred outside the UK and the European Economic Area. We protect these transfers with the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, or rely on the EU-US Data Privacy Framework (and its UK extension) where the provider is certified. You can ask us for a copy of the relevant safeguards.
7. Your rights
Wherever you live, you can:
- Access and portability: get a copy of your data in Settings > Export my data (emailed to you as a JSON file).
- Deletion: delete your account and its data in Settings > Delete account. This also removes the copy on your phone. Deleting your account does not cancel an App Store subscription; manage that in your iPhone's Settings > Apple ID > Subscriptions.
- Correction: edit your data in the app, or ask us.
- Withdraw consent for health-related data in Settings, at any time.
- Object to or restrict processing based on our legitimate interests.
- Opt out of the sale or sharing of personal data and targeted advertising. We don't do either, so there is nothing to opt out of, but you can still ask.
For anything you can't do in the app, email privacy@five2nine.cc from the address linked to your account (so we can confirm it's you). We reply within one month (45 days for US state law requests), and will tell you if we need longer. We won't treat you differently for using your rights.
Complaints. If you're not happy with our answer you can complain to a data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, the authority where you live or work. In the US, if we decline a request you can appeal by replying to our decision; if you're still unhappy, you can contact your state Attorney General.
8. Age requirement
Five to Nine is only for people aged 18 or over. We don't knowingly collect data from anyone under 18. If you believe a child has created an account, contact us and we will delete it.
9. Security
We use encryption in transit (HTTPS), store sign-in sessions in the iOS keychain, keep only hashes of passwords, limit who can access production systems, and work with providers that maintain recognised security standards. No system is perfectly secure; if a data breach affects you, we will tell you and the relevant authorities as the law requires.
10. This website
five2nine.cc sets no cookies and uses no analytics or tracking. Our hosting provider processes your IP address to deliver the pages and protect the site from attacks.
11. Changes to this policy
When we make a significant change, we will tell you in the app before it takes effect and, where the law requires, ask for your consent again. Earlier versions are available on request.
12. Contact
Data controller: Ricardo Pedrotti Vespero Fernandes, an individual developer based in England
Email: privacy@five2nine.cc
EU representative (GDPR Art. 27): {{EU_REPRESENTATIVE}}