Privacy Policy
Last updated: December 12, 2025
Applies to: “SpeeCal” mobile application and related services (collectively “the App”)
IMPORTANT: This Policy explains how we collect, use, disclose, and protect your personal data when you use the App, and what rights you have under the EU General Data Protection Regulation ("GDPR") and comparable laws. It complements—but does not replace—our general Disclaimer.
1. Who we are
Data Controller: alpha sparks GmbH
Registered address: Kantstr. 8, 35510 Butzbach, GERMANY
Contact for privacy matters: android@speecal.com
2. What data we collect
A. Account & Identification Data
- E-mail address, password (hashed) and/or third-party sign-in identifier (e.g., Apple ID, Google Sign-In).
- Internal user ID, authentication tokens, purchase receipts.
B. Profile & Usage Data
- Date of birth (optional), gender (optional), height, weight, goals and similar wellness-profile information you choose to provide.
- Logs of in-app actions (e.g., screen views, button taps) and crash diagnostics. These measurements are produced by our own code; no external analytics SDK is embedded.
C. Content You Actively Provide
- Food, ingredient, meal and recipe entries, including photos or voice recordings if you opt to use voice input.
- Text you type into free-form fields (e.g., notes).
D. Transaction & Support Data
- Information necessary to process purchases through the app stores (order ID, product, subscription status) and to respond to support requests.
- E-mails or other messages you send to us.
No special categories of data are intentionally processed beyond the health-related information you voluntarily enter (Article 9(2)(a) GDPR – explicit consent).
3. Why we process your data (Legal bases)
| Purpose | Legal basis |
|---|---|
| Create and maintain your account; deliver core calorie-tracking functionality | Performance of a contract (Art 6(1)(b)) |
| Optional voice transcription and food-label parsing | Consent (Art 6(1)(a)) |
| In-app purchase handling | Performance of a contract & legal obligation (Art 6(1)(b)&(c)) |
| Bug fixing, security, and service quality metrics | Legitimate interests (Art 6(1)(f)) |
| Sending service-related e-mails (e.g., password reset, renewal reminder) | Performance of a contract (Art 6(1)(b)) |
| Marketing e-mails (if any) | Consent (Art 6(1)(a)) |
You may withdraw consent at any time via the App settings or by contacting us.
4. Who receives your data (Categories of recipients)
- Cloud database & hosting provider where all primary data are stored in the EEA.
- AI processing service that receives limited, transient excerpts (voice recordings, ingredient or meal text) to convert speech to text or to analyze nutritional information.
- E-mail service provider for transactional and (only if you opt-in) marketing communication.
- Authentication and single-sign-on providers if you choose to log in with their credentials.
- Mobile app-store operators for billing and subscription management.
- Professional advisers (e.g., accountants, legal counsel) and public authorities where required by law.
All service providers act as “processors” under written agreements that meet Art 28 GDPR requirements. Providers may change over time; an up-to-date list can be requested at any time via android@speecal.com.
5. International transfers
Some processors operate outside the European Economic Area. Where this results in a data transfer, we rely on:
- An adequacy decision by the European Commission, or
- Standard Contractual Clauses combined with supplementary safeguards (encryption in transit and at rest, data minimization, strict access controls).
6. How long we keep your data
| Category | Retention rule |
|---|---|
| Account & profile data | Until you delete the account or 24 months after last activity, whichever is earlier. |
| Meal and nutrition logs | Same as account data, unless you delete individual items sooner. |
| Analytics & crash logs | 12 months, aggregated thereafter. |
| Legal/financial records (e.g., invoices) | 6–10 years as required by accounting law. |
After these periods data are either irreversibly anonymized or securely erased.
7. Your rights
You may exercise the following rights free of charge:
- Access – obtain a copy of your personal data we hold.
- Rectification – correct incomplete or inaccurate data.
- Erasure – “right to be forgotten”.
- Restriction – limit processing while a complaint is investigated.
- Portability – receive your data in a structured, commonly used format.
- Objection – to processing based on legitimate interests or direct marketing.
- Withdraw consent – without affecting processing already performed.
To exercise any right, email us at android@speecal.com. If you believe your rights are infringed, you may lodge a complaint with your local supervisory authority; for example, in the EU this is the Data Protection Authority of your country of residence.
8. Security measures
We implement appropriate technical and organizational measures, including end-to-end TLS encryption, at-rest encryption, role-based access control, regular penetration testing, and least-privilege principles. No method of transmission or storage is 100 % secure, but we continually improve our defenses.
9. Children
The App is not intended for anyone under 18 years of age. We do not knowingly collect personal data from children. If you learn that a minor has provided us with personal data, please contact us so we can delete it.
10. Automated decision-making
The App does not engage in automated decision-making that produces legal or similarly significant effects (Art 22 GDPR).
11. Changes to this Policy
We may update this Policy to reflect technical, legal, or business changes. We will notify you in-app or by e-mail and indicate the “Last updated” date. Continued use after the effective date constitutes acceptance.
12. Contact
Questions, comments, or requests regarding this Policy?
E-mail: android@speecal.com
Postal address: Kantstr. 8, 35510 Butzbach, GERMANY
At a glance – Key privacy points
- We collect only the data needed to create your account and deliver calorie-tracking features; most health data are entered voluntarily by you.
- Data are stored on our own EU-based servers; limited snippets (e.g., voice input, ingredient text) are sent to an AI service for processing, then immediately deleted.
- You can delete your account and all personal data at any time by contacting us at android@speecal.com.