The short version
- Your health diary stays on your phone. Symptoms, sleep, stress, wellbeing and the meals you type in are stored on your device, not on our servers.
- Food scans are the exception. When you scan a meal or barcode, that scan and its score are stored on our servers in the EU.
- We ask for your explicit consent before any health question, and record it. You can withdraw it by deleting your account, in one tap, in the app.
- We never sell your data and never share it for advertising. Chronly contains no advertising SDK and does not track you across other apps.
- Usage analytics are optional and collect nothing about your health.
- Chronly is not a medical device and does not give medical advice.
1. Who we are
Chronly is run by Maxime PARISY, a sole trader (entrepreneur individuel) registered in France, Paris, SIRET 833 046 279 00026. We are the data controller for the data described below.
Questions, requests or complaints: contact@chronly.app.
2. What we collect
On your phone, and nowhere else
Your conditions and tracked symptoms, the severities you log, sleep, stress, wellbeing, the meals you type in, your goals and your reminder time. This stays in the app on your device. We do not receive it and cannot access it. Any insight Chronly shows you is calculated on your device from that data.
On our servers, in the EU
- Your account: the email address from Sign in with Apple (Apple's private relay address, if you chose to hide yours), your name if Apple provided it, an account identifier, and a record of when you gave consent and to which version of the wording.
- Your food scans: when you scanned, what was identified, the score you were shown, which condition it was scored for, and a small thumbnail of the photo so your history has something to show. The full-size photo is not stored; it is sent for recognition and discarded. Scanning a barcode captures no image at all.
- Your subscription: whether it is active, which plan, and when the trial and current period end. Apple takes the payment; we never see your card details.
Only if you opt in: usage analytics
Which screens you open and which features you use, tied to your account identifier, plus standard technical information the analytics tool collects (device model, OS and app version, locale, approximate location from your IP address). No symptom, condition, meal, score or scan ever reaches our analytics provider. We do not use session replay or screen recording. You can turn analytics on or off at any time in Profile ▸ Your data.
What we never collect
We do not read Apple Health, your photo library, your contacts, your calendar or your location. We do not use advertising identifiers, and there is no advertising SDK in Chronly.
All of this comes from you or from your use of the app. We do not buy personal data or obtain it from data brokers.
3. Why, and our legal basis
| What | Why | Legal basis (GDPR) |
|---|---|---|
| Account and consent record | To give you an account and to show consent was given | Art. 6(1)(b) contract; Art. 6(1)(c) legal obligation |
| Food scans and meal thumbnails | To identify the food, score it and show your history | Art. 9(2)(a) explicit consent, and Art. 6(1)(b) |
| Subscription | To take payment and unlock the app | Art. 6(1)(b) contract |
| Scan limits and abuse prevention | To keep the service viable | Art. 6(1)(f) legitimate interests |
| Usage analytics | To improve the app | Art. 6(1)(a) consent |
| Support email | To answer you | Art. 6(1)(b) and 6(1)(f) |
Your scan is scored automatically, by a deterministic calculation over published nutritional and scientific reference data. AI is used only to recognise what food is in a photo. It does not decide the score. This produces information for you to read and has no legal or similarly significant effect, so it is not automated decision-making under Article 22. Your data is not used to train AI models, by us or by our providers.
4. Consent, and how to withdraw it
Health data needs your explicit consent. Before Chronly asks any health question, it explains what will be stored and where, and asks you to confirm. We record when you agreed and which version of the wording you saw, so that if the wording changes in substance we can ask you again rather than assume.
Analytics consent is a separate, optional choice, recorded separately. Declining it changes nothing else about the app.
To withdraw analytics consent, turn it off in Profile ▸ Your data. To withdraw consent for health data, delete your account. The data we hold exists only to provide the feature you consented to, so the two are the same act. Withdrawal does not affect processing carried out beforehand.
5. Getting your data out, and deleting it
Both are in the app, in Profile ▸ Your data, without contacting us.
Export gives you your whole history: profile, check-ins, meals, scans and stored photos, as a file you keep. Note that the exported file is not encrypted once it leaves Chronly, so send it somewhere you trust.
Delete my profile removes your account, your scans, your stored photos, your subscription record and your analytics record, and then wipes the copy on your phone. It cannot be undone, so export first if you want a copy. You can also delete a single meal photo from that scan's screen without deleting anything else.
7. Where your data is
Your account, scans, photos and analytics events are stored in the European Union, in Frankfurt, Germany.
Two providers are in the United States (OpenAI, RevenueCat), and our EU-hosted providers are US-incorporated companies whose staff may access their systems for support. Those transfers are covered by the European Commission's Standard Contractual Clauses, and for UK users by the UK International Data Transfer Addendum. Ask us at contact@chronly.app for a copy.
8. How long we keep it
| Data | Kept |
|---|---|
| Account, scans, photos | Until you delete your account, or after 24 months of inactivity |
| Your on-device diary | Until you delete it or remove the app. It is on your phone |
| Consent record | Life of the account, plus 3 years |
| Analytics events | 12 months, or until you withdraw consent or delete your account |
| Payment and subscription records | As long as French tax and accounting law requires |
| Support emails | 2 years |
Before deleting an inactive account we email the address on it. Deleted data leaves our live systems immediately and our encrypted backups within 30 days.
9. Security
We use appropriate technical and organisational measures to protect your data: encryption in transit and at rest, access controls that limit each account to its own records, and private storage for meal photos. Our systems are designed so that health data does not appear in logs or error reports.
Your health diary being on your phone is itself a protection. Data that is never transmitted cannot be intercepted from our side.
No system is completely secure and we cannot guarantee absolute security. If a breach is likely to result in a high risk to you, we will notify you and the CNIL as the law requires.
10. Your rights
If you are in the EEA, the UK or Switzerland you have the right to access, correct, delete, port, restrict and object to our processing of your data, and to withdraw consent at any time.
Access, portability and erasure are built into the app (§5). For anything else, email contact@chronly.app and we will reply within one month. There is no charge, and asking changes nothing about how Chronly works for you.
You can complain to a supervisory authority. Ours is the CNIL (Paris, cnil.fr); in the UK it is the ICO ico.org.uk). We would rather you told us first.
11. If you are in the United States
We do not sell your personal information or share it for cross-context behavioural advertising, and have not done so in the past twelve months.
Your food scans and the conditions you record are sensitive personal information. We use them only to provide the feature you asked for, never to infer characteristics about you.
Depending on your state you may have the right to know what we collect, to delete it, to correct it, to opt out of sale, sharing, targeted advertising and profiling, none of which we do, and to limit the use of sensitive personal information, which we already limit. You will not be treated differently for exercising any of them. You may use an authorised agent, and you may appeal a decision by replying to our response.
The categories we collect are: identifiers (account identifier, email), name, commercial information (subscription records), internet activity (in-app usage events, if you opted in), and sensitive personal information (health data, in the form of food scans and the condition they were scored for). We collect all of it from you and keep it for the periods in §8.
Consumer health data (Washington, Nevada)
This section is also our consumer health data privacy policy. The consumer health data we collect is described in §2; we collect it only to provide Chronly to you, we get it only from you, we share it only with the providers in §6, and we do not sell it. You may ask what we hold, withdraw your consent and have it deleted, in the app, or by emailing contact@chronly.app. Access is limited to what is needed to run the service.
12. Children
Chronly is not intended for anyone under 16 and we do not knowingly collect their data. If you believe we have, email us and we will delete it.
13. Chronly is not a medical device
Chronly records what you tell it and shows you what your own records contain. It does not diagnose, treat or prevent any condition and is not a substitute for professional medical advice. Never start, stop or change treatment based on what Chronly shows you, and seek medical care if a symptom worries you.
14. Changes
We will update this policy when what we do changes, and post the new version at chronly.app/privacy with a new effective date. For significant changes we will tell you in the app first, and if a change affects health data we will ask for your consent again rather than assume the old one still covers it.