Fuelya Privacy Policy

1. Who we are

Fuelya is developed and operated by DMCK Digital Ltd (“DMCK Digital”, “we”, “us” or “our”). DMCK Digital is the data controller for personal information it receives and controls through Fuelya and its associated online services.

This policy explains how we handle information when you use Fuelya, contact us, or use supported online features. It does not replace the privacy information of independent third-party websites or app-store platforms.

2. Information Fuelya may process

The information involved depends on the features you use. Not every category below is collected from every person.

3. Nutrition, weight and health-related information

Nutrition and weight information can be sensitive. Fuelya intentionally keeps core personal nutrition information primarily on-device under its current architecture, and DMCK Digital ordinarily cannot inspect information that remains exclusively in local Fuelya storage.

We do not treat every nutrition entry as automatically being special-category personal data. If future functionality involves server-side backup, synchronisation or other processing of health-related personal information, we will carry out the appropriate privacy assessment and identify any required lawful basis and additional condition before launch.

4. Accounts, camera and catalogue lookups

Accounts

Account information is used for authentication, account security, verification, password recovery, account-specific online services and preventing unauthorised access. Passwords are not intended to be stored as readable plain text. Creating an account does not itself upload your existing local diary history, meal-plan history or shopping information.

Camera and barcode scanning

Fuelya may ask for camera permission to detect barcodes. Ordinary camera preview is not uploaded merely because the scanner is open. A detected barcode value may be sent to the backend when you request a catalogue lookup. The camera may also be used when you deliberately create evidence photographs for a product submission.

Catalogue lookups

An online lookup may send a barcode or search term, authentication/account context where required, and technical or security information needed to perform and protect the service. A network, authentication or server failure is different from a genuine product-not-found result.

5. Product submissions and evidence

When you submit a missing product, we may process the barcode, product name, brand, package and nutrition information, relevant label information, submission timestamp, account identifier and moderation information. You may also deliberately submit product/package photographs as evidence.

Evidence is used for verification and moderation. It is not intended to appear through ordinary catalogue lookup, and authorised moderation or catalogue staff may view it where necessary. Images may be safely transformed or resized and unnecessary metadata may be removed where this is implemented. Approved factual product information may become part of the shared catalogue, but a contributor’s private account identity is not intended to form part of the normal catalogue presentation.

6. Local device data

Information stored exclusively on your device may not exist on DMCK Digital’s servers. As a result, we may be unable to recover it if your device is lost, replaced, reset, its application data is erased, or local storage becomes unavailable. You should not assume that signing in creates a backup of local diary, meal-plan or shopping information.

7. Support communications

When you contact us, we may process the information you provide to answer and manage the request, including your email address, name if supplied, message, account identifier if needed, and voluntary screenshots or attachments. Please do not send passwords, payment card details or unnecessary sensitive information.

8. Why we process information and our lawful bases

Depending on the activity, we process information to operate Fuelya; create and secure accounts; provide authentication, catalogue lookup, product contribution and moderation; send essential account communications; investigate faults; protect service reliability; provide support; prevent abuse; comply with law; and establish, exercise or defend legal claims.

Under UK data-protection law, our lawful basis may be performance of a contract, legitimate interests, compliance with a legal obligation, or consent where required. Legitimate interests can include security, fraud and abuse prevention, service reliability, catalogue integrity, moderation and defending legal claims. If special-category data is processed in future, an appropriate additional condition would also be required.

9. Automated calculations

Fuelya can perform deterministic calculations such as nutrition targets, food quantities, calorie and nutrient totals, meal-planning information and progress information. These are app functions, not automated decisions producing legal or similarly significant effects. Fuelya is not a medical diagnosis system.

10. Sharing, international transfers and retention

Sharing and processors

We do not sell personal information or use third-party behavioural advertising. Limited information may be processed by service providers needed to operate the service, such as infrastructure, hosting, backup/storage, transactional email, security and support providers, and by professional advisers, regulators or law-enforcement bodies where lawfully required. The DMCK Digital website contact form is processed by FormSubmit when it is used.

Some service providers may process information outside the UK. Where applicable, we will use an appropriate UK transfer mechanism.

Retention

We do not publish fixed retention periods where they have not been established. We generally retain account information while an account is active and then only for a limited period where needed for lawful, security or operational reasons. Authentication and verification information is kept only as needed for those processes; technical/security records for an appropriate troubleshooting, security or abuse-prevention period; submissions, moderation records and evidence only as reasonably needed for review, catalogue integrity, duplicate prevention, abuse handling or audit; and support communications only as long as reasonably needed to resolve the matter and keep appropriate records.

Approved non-personal product facts may remain in the shared catalogue. Protected backup copies may temporarily contain deleted active-system information until the applicable backup lifecycle expires.

11. Public catalogue information

We distinguish between a contributor’s personal information and factual food-product information. Approved non-personal product facts may remain in the catalogue after an account is deleted, including where they are needed to maintain or correct the catalogue. This does not mean that contributor personal information is kept indefinitely.

12. Account deletion

You may request deletion of your Fuelya account and associated personal account information. We will delete or anonymise applicable personal information, subject to lawful exceptions such as security, fraud prevention or legal obligations. Deleting a server-side account does not automatically remove information that exists only in local storage on your device.

Request account deletion

13. Security

We use proportionate technical and organisational measures intended to protect information, including encrypted network connections, access controls, authentication and authorisation measures, credential protections, protected evidence storage, logging, rate limiting, abuse controls, restricted administrative access and ongoing maintenance. No system can be guaranteed completely secure.

14. Your rights

Depending on the circumstances, UK data-protection law may give you rights to be informed, request access, correction, erasure, restriction, objection or portability; withdraw consent where applicable; and raise certain concerns about automated decision-making. These rights are not absolute and depend on the information and processing involved. We may need to verify your identity before responding.

We can only respond in relation to information that we control or possess. If information exists only on your phone and was never transmitted to us, we may not be able to export or delete it from our systems.

Fuelya is not directed at children. We have not published a separate minimum-age decision; account eligibility remains subject to the applicable Fuelya and app-store requirements.

15. Changes to this policy

We may update this policy as Fuelya evolves, including if we introduce new features, storage arrangements, synchronisation, processors or legal requirements. Where required, we will provide additional notice of material changes.

16. Related Fuelya information

Read the Terms of Service

Get Fuelya support

Learn how to request deletion of your Fuelya account

17. Contact and complaints

You may also have the right to complain to the UK Information Commissioner’s Office. We encourage you to contact us first so that we can try to address your concern.