Privacy Policy
Plain English summary: We collect only what we need to run the app. We never sell your data. You can delete everything at any time from within the app.
1. Data Controller Identity
The data controller responsible for your personal data under the GDPR is:
Full name: Jiří Sládek
Business ID (IČO): 29656508
Registered in: Czech Trade Licensing Register (ares.gov.cz)
Place of business: Benešov, Czech Republic
Email: support@getflawless.app
Role: Independent developer (sole trader / natural person)
Your account and everything you log is stored in Supabase infrastructure located in the EU (Frankfurt, Germany — eu-central-1). The processors listed in Section 6 receive only the data described there; where one of them processes data outside the EU, the transfer is covered by Standard Contractual Clauses.
Note for users: As required by GDPR Article 13, you have the right to know who processes your data. The data controller named above is the single point of contact for all data-related requests.
2. Legal Basis for Processing
We process your personal data under the following legal bases as defined in GDPR Article 6:
| Legal basis | What we process | Why |
|---|---|---|
| Contract performance Art. 6(1)(b) | Account credentials, food log, workout data, daily tracking | Required to provide the core app functionality you signed up for |
| Legitimate interest Art. 6(1)(f) | Error logs, security monitoring, app stability data, pseudonymous product analytics, and e-mails about your account and the app (Section 5d) | Keeping the app secure and working, learning which features help, and helping you get started. You can object at any time, and every non-essential e-mail has a one-click unsubscribe link. |
| Explicit consent Art. 9(2)(a) | Health data: weight, body measurements, fitness goals, body fat; and, only if you connect them, data from Health Connect, Apple Health and the Flawless watch apps (Section 3a) | These are special category data under Art. 9 — processing requires your active opt-in at registration, and the connection in Section 3a has its own separate opt-in |
3. Special Category Data — Health Information (GDPR Art. 9)
Under GDPR, the following data you enter into Flawless qualifies as special category data (health-related):
- Body weight and weight history
- Body measurements (waist, chest, arms, etc.)
- Fitness goals and activity level
- Caloric targets and nutritional goals
- Health details you choose to add, such as medical conditions, medication (for example GLP-1 medication), injuries, and whether you are pregnant or breastfeeding
- Menstrual cycle dates, if you enter them
- Photos of your body and details about your diet or health that you choose to post in the community, in particular in a feedback request (Section 5c)
We process this data exclusively on the basis of your explicit consent, which you give with a dedicated opt-in checkbox when you register or, if you sign in with Google or Apple, on a confirmation screen you see once before you start using the app. We store the date and time of your consent. You may withdraw this consent at any time by deleting your account or contacting us at support@getflawless.app. Posting a feedback request in the community needs a separate consent, which the app asks for before your first request; see Section 5c.
3a. Health Connect, Apple Health and watches
If you turn it on in Settings → Integrations, Flawless reads the following from Health Connect on Android or from the Health app on iPhone, on that device only:
- Steps and distance
- Active calories burned
- Heart rate (daily average, lowest and highest) and resting heart rate
- Sleep duration
Read only on the phone. The phone app never writes to Health Connect or Apple Health. We store only daily totals (for example "8,650 steps, resting heart rate 57 bpm on September 21") and, for a workout you finish in Flawless, a heart-rate summary of that workout (average, maximum, minutes in five intensity zones and a calorie estimate). Individual measurements are not stored. Both live in our database hosted in the EU, so that they show next to your food and training in the app and in the Flawless web app. Weekly reports, patterns and the "why the scale is stuck" analysis are calculated from this data on your device and are not sent anywhere.
Watch apps (Wear OS and Apple Watch). While a workout or an activity timer that you start in the Flawless watch app is running, the watch measures your heart rate and the calories you burn with its own sensors (on Apple Watch through HealthKit). It measures nothing when no workout is running. The watch sends these measurements to Flawless on your phone, which stores them the same way as above: the heart-rate summary of that workout and, for an activity such as a run or a ride, its duration, calories and heart-rate summary. On Apple Watch, the workout you start is also saved to Apple Health as a strength-training workout, which is what lets the watch keep measuring your heart rate while its screen is off; the watch app asks for this permission separately. That workout is the only thing Flawless ever writes to Apple Health, and nothing is ever written to Health Connect.
What we never do with this data: we do not use it for advertising, we do not sell it or share it with third parties (with the single exception below, which you switch on yourself), we do not send it to our analytics (PostHog) or crash reporting (Sentry), we do not use it to train AI models, and we do not store it in iCloud.
AI coach (separate, off by default). Only if you also turn on Share with AI coach in Settings → Integrations, and only with Flawless PRO, the daily totals from the last 4 weeks (steps, distance, active calories, heart rate, resting heart rate, sleep) and the heart rate and calories your watch measured during activities are included when the AI coach prepares an answer or your daily tip. They are sent to Google Gemini (our processor, see Sections 6 and 8) solely to generate that answer and are not used to train AI models. Connecting Health Connect or Apple Health does not switch this on. Turning the switch off, or disconnecting, stops it immediately.
The use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements. Data received from Apple HealthKit is used only to provide the features described above, in line with Apple's App Store Review Guidelines (5.1.3).
Legal basis: your explicit consent (GDPR Art. 9(2)(a)), which you give by turning the connection on, and a second, separate consent for the AI coach, which you give with its own switch. Withdrawing it: in Settings → Integrations tap Disconnect and delete — Flawless stops reading and immediately deletes the daily totals it saved from that device (in the web app: from all your devices) and every workout heart-rate summary, including those your watch measured. Activities you logged stay in your log, with the heart rate the watch measured during them, until you delete the activity or your account. You can also revoke access at any time in Health Connect, in the Health app, or in your watch's settings. Deleting your account deletes all of this data too.
4. What Data We Collect
| Category | Specific data | Purpose |
|---|---|---|
| Account | Email address and hashed password, or, if you sign in with Google or Apple, the name, e-mail address (or Apple relay address) and profile photo that provider shares with us | Authentication and account security |
| Profile | Display name, date of birth (age), sex, height, weight, goals, activity level, allergies and food dislikes, sleep, work and training times, the habits and routines you set up, optional notes you write for the AI, where you first heard about Flawless (your answer to one question), language preference | Personalised recommendations and calculations |
| Nutrition | Food log entries (name, kcal, macros), meal timestamps, dates | Calorie and nutrient tracking |
| Fitness | Workout sessions, exercises, sets, reps, weights, workout dates | Progress tracking and training analytics |
| Health (Art. 9) | Body weight history, body measurements, muscle fatigue levels; if you enter them: medical conditions, medication (for example GLP-1), injuries, pregnancy or breastfeeding status and menstrual cycle dates | Physical progress monitoring — requires explicit consent |
| Habits | Daily checklist status, streaks, completed goals | Consistency tracking and motivation |
| Food images | Photos uploaded for AI nutritional analysis | Automatic macro estimation via Gemini AI |
| Community contributions | Name, brand, barcode and nutritional values (per 100 g, including vitamins and minerals when they are on the label) of a food you add, and your confirmations or reports of other entries. A photo of the product only if you agree when you save the food. | Added to a shared community food database so other users can find and reuse the entry — see Section 5a. You choose for each food whether to share it, and separately whether its photo may be shared. |
| Public recipes, ratings and comments | A recipe you make public (name, ingredients, steps, nutrition and up to five photos), the star ratings you give to other people’s recipes, and your comments | Shown to other users in Recipes with your community name — see Section 5c. Optional: a recipe stays private until you make it public. |
| Feedback requests and verification | A feedback request you post in the community (text, up to five photos, the topic you pick), the “Helpful” marks you give and receive, the date and version of your consent to feedback requests, and, if you apply for a verified badge, the link to your public profile or website, your note and the code we give you | Showing your request to other users and deciding who gets a verified badge — see Section 5c. Optional: none of it exists until you post a request or apply. |
| AI chat | Messages in the AI assistant, together with the data the coach needs to answer: your profile and targets, today’s food and water, your training plan, and your food log and workouts from the last 14 days (since 1.3.9, so that it can answer questions about your recent days) | Generating personalised responses via Google Gemini API. The coach can also log a food, start a workout or open a screen when you ask it to; each action is shown to you and can be undone. |
| Subscription | Purchase status, plan, renewal/expiry date and an anonymous purchase identifier received from Google Play or the Apple App Store via RevenueCat | Unlocking and maintaining PRO access. We never receive or store your card details — the payment is handled entirely by the store you bought through. |
| Push notifications | Device push token (Firebase Cloud Messaging on Android, Apple Push Notification service on iPhone and iPad) | Sending the reminders you opted into. Optional — the app works without them. |
| Voice input | What you dictate when you log food or a workout by voice | Converted to text by your phone's built-in speech recognition (Google on Android, Apple on iPhone and iPad) under their terms. Flawless receives only the resulting text and never stores audio. |
| Imported history | Workouts and food from a Hevy, Strong or MyFitnessPal export file you choose to import | The file is read on your device; only the entries it contains are saved to your account. |
| E-mail log | Which of our e-mails were sent to you and when, and whether you unsubscribed | So nobody receives the same e-mail twice and an unsubscribe is always respected. |
| Diagnostics | Crash reports and error traces, which may include your user ID and the screen you were on | Fixing crashes. No health data, food entries or measurements are attached. |
5. How We Use Your Data
- Providing and personalising app features
- Calculating calories, macros, and NutriScore
- Displaying your personal progress and history
- Generating AI recommendations and food photo analysis
- Synchronising data across your devices
- Maintaining app security and preventing abuse
We never: sell your data, share it for advertising purposes, or use it for profiling outside the app.
5a. Community Food Database
To improve our limited food database, Flawless includes a shared, crowdsourced food database. When you add a food that is not in the database — by scanning its label or copying it from the package — and choose to share it, its name, brand, barcode and nutritional values (per 100 g, including vitamins and minerals when they are on the label) are contributed to this shared database, where they become visible to and reusable by other Flawless users. Before an entry is saved it is checked automatically for implausible values, a valid barcode and inappropriate words.
Photos are shared only if you agree. When you save a food that you are sharing and it has a photo, the app asks whether the photo may be shared too. You answer for each food separately, and the food is shared either way. If you decline, the photo stays in your own account and is not shown to anyone else.
If you agree, the photo is checked automatically (Google Gemini, see Section 6) before anyone sees it. It has to show the product or the food; photos showing a recognisable face, documents, nudity, violence, hate symbols or drugs are rejected, and the app tells you that the photo was not used. If the check cannot complete, the photo is not published. An accepted photo is stored without your name and without your user ID in its address, and is shown next to the food to other users. We share it on the basis of your consent (Art. 6(1)(a)). You can withdraw that consent at any time by writing to support@getflawless.app — we then remove the photo, and the values of the food stay. A photo you shared is also deleted when you delete your account.
You control this. In current versions of the app you decide for each food, with a checkbox shown when you save it; it is ticked by default. In older versions the choice is under Settings → Share with community. A food you do not share stays only in your account. Choosing not to share later does not withdraw entries you contributed earlier.
Confirmations and reports. Other users can confirm that an entry matches the package, or report a mistake. We store who confirmed or reported an entry so that each person counts once; an entry confirmed by two people other than its contributor is marked “Verified”. Your confirmations and reports are deleted with your account.
Community contributions are not published with your name or any public profile, and the app never displays who contributed an entry. The internal authorship link is removed when you delete your account, but the contributed food entry remains in the shared database so the database stays useful for the community. Because these entries are anonymised and form part of a collective dataset, an individual contribution cannot be withdrawn afterwards.
You can report an incorrect or inappropriate community entry in the app or at support@getflawless.app and we will remove it.
Products from Open Food Facts. Part of the food database — including 24,984 products from Czech, Slovak and Polish stores added in September 2026 and 118,889 products from stores in 18 further countries added in October 2026 — comes from Open Food Facts, an open database available under the Open Database License (ODbL); its product photos are available under the Creative Commons Attribution-ShareAlike licence.
Basic foods from NutriDatabaze.cz. 1,136 basic Czech foods added in September 2026 come from the Czech food composition database: Na základě dat z NutriDatabaze.cz, verze 11.26, ÚZEI, Praha.
5b. Automated Processing and AI-Generated Recommendations
As required by GDPR Article 13(2)(f), we tell you where Flawless processes your data automatically to produce scores, targets and recommendations. All of the following are calculated by software without a human reviewing the result:
- Daily and weekly scores (Life Score, streaks, muscle recovery) — derived from the training, nutrition, hydration and habit data you log.
- Calorie and macronutrient targets, including the adaptive TDEE, which adjusts your targets over time based on your logged weight trend and intake.
- Progress and Nutrition Reports, which compare your recent data against your own earlier data and your stated goal.
- AI assistant, meal plans, training plans and photo/label recognition, generated via the Google Gemini API from the data described in Sections 4 and 6.
These are informational outputs, not decisions about you. They do not restrict your access to the service, do not affect pricing, and produce no legal or similarly significant effects within the meaning of GDPR Article 22. You are never subject to a solely automated decision with such effects, and we do not use your data for automated credit, insurance, employment or eligibility assessments of any kind.
The underlying logic is a combination of published nutrition and training formulas (for example Mifflin–St Jeor for energy expenditure) applied to the values you enter, and, for the AI features, a large language model prompted with those same values. Outputs can be wrong or imprecise — see the Health & Fitness Disclaimer below. You can always override any target manually in your profile, ignore any recommendation, and use the app with the AI features left unused.
You retain the right to object to processing and to request human review of anything the app has generated about you by writing to support@getflawless.app.
5c. The Community — What Other Users Can See
Flawless includes an optional social community: a feed, public profiles, comments, kudos, challenges and shared workout templates. It is off until you join it yourself. If you never join, nothing in this section applies to you and no community data about you exists.
What becomes visible to other users once you join:
- your display name, handle (@name), profile photo, avatar frame and bio
- anything you post — text, photos, and the cards you attach to a post
- your comments, the kudos you give, and who you follow
- workout templates you choose to publish, and the challenges you join
- only the profile sections you switch on yourself: workout numbers, achievements, exercise ranks, muscle ranks, streaks, hydration, daily food, personal records, muscle map and weight trend. Exercise and muscle ranks you switch on are also shown to the people who follow you in the rank ladders of the app, with your name and profile photo
Nothing is shared automatically. Body weight, food, calories, measurements and mood never leave your account on their own. They become visible only when you post a card to the feed yourself, or when you switch that section on in your community profile.
You can be present but invisible. Turning visibility off in your community profile lets you read everything while nobody can find you, follow you, or see your posts.
Everything is screened before it is published. Every caption, comment and photo is checked by an automated moderation service (Google Gemini, see Section 6) before it becomes visible to anyone. Text with profanity is masked; content promoting steroids, dangerous diets or spam is rejected; photos containing nudity, sexual content, violence, hate symbols or drugs are rejected. If the check cannot complete, the photo is not published at all. We process content this way in our legitimate interest in keeping the service safe (Art. 6(1)(f)).
Public recipes. A recipe is private until you make it public. A public recipe appears in Recipes for all users with your community name, and other users can rate it with stars and comment on it; you cannot rate your own recipe. Before it appears, its text and photos pass the same automated check as posts. You can make it private again or delete it at any time, and its ratings and comments are removed with it. Rating and commenting need a public community profile.
Feedback requests. In the community you can ask other users for feedback on your form, your physique or your diet. A feedback request is an ordinary post with a topic: it appears in the feed and in the Feedback room, it passes the same automated check as any other post, and you choose whether everyone in the community or only your followers can see it. A photo of your body and details about your diet are special category data (Section 3). We process them here only on the basis of your explicit consent (Art. 9(2)(a)), which the app asks for before your first request; we store when you gave it and which version of the text you agreed to. You withdraw it by deleting the request, which you can do at any time. Other signed-in users see the request, and anyone who sees a photo can save it or pass it on, so post only what you are willing to show.
Verified badges. A badge next to a name (Coach, Athlete, Trusted) tells other users whose advice they may want to weigh more. Nobody can buy it or switch it on. Coach, and Athlete for competitors, is granted by a person: you apply in the app with a link to a public profile or website where you are visible as a coach or competitor, and you prove the profile is yours by placing a code we give you in its bio or sending it to us from that profile. We do not ask for certificates or identity documents and do not store any. Athlete is otherwise granted automatically from your own workout records (how many workouts of sufficient length you logged on the day you trained, across how many weeks), and Trusted from the “Helpful” marks other users gave to your advice under feedback requests; a recent moderation point pauses Trusted. The app shows you the current rules and your own progress. These automated badges have no legal or similarly significant effect; if you think one is wrong, write to support@getflawless.app and a person will look at it. We process this in our legitimate interest in making advice in the community more trustworthy (Art. 6(1)(f)), and your application on the basis of your request. A rejected application shows you the reason in the app.
Points and an automatic ban. Each time the automated check rejects something you tried to publish, points are recorded against your account: 5 for a rejected photo, 3 for rejected text or a rejected name, and 1 when profanity had to be masked. At 15 points within 24 hours, or 30 points within 30 days, your access to posting in the community is suspended and your community profile is hidden automatically. The point total is not shown in the app. This is an automated decision (Art. 22 GDPR); if you think it is a mistake, write to support@getflawless.app and a person will review it. The rules are shown to you once when you create a community profile.
Moderation records. When you report someone, or block someone, we store that action so the decision can be reviewed. Reports are also used to hide content automatically once three different people report the same thing.
What happens when you delete your account. Your community profile and everything attached to it — posts, public recipes, photos, comments, ratings, kudos, follows, published templates, challenge participation, blocks and bans — is deleted with it. Two things survive, both without your identity: food-database entries you contributed (anonymised, see Section 5a) and reports you filed about other users, which are kept without your name so moderation decisions remain auditable.
5d. E-mails We Send
We send e-mails through Resend (see Section 6) to the address on your account:
- About your account and purchases — password reset, a free trial that is about to end, a payment the store could not collect. These are part of the service.
- About using the app — a few getting-started tips in your first week, a note if you stop logging for a while, and an occasional request to rate Flawless in Google Play or the App Store. We never pay or reward you for a rating.
We send the second kind in our legitimate interest in helping you get value from the app (Art. 6(1)(f)). Every such e-mail has a one-click unsubscribe link; after you use it, you receive only the account and purchase e-mails. We do not send third-party advertising and we do not share your address with anyone for marketing.
6. Third-Party Data Processors
These are all the third parties that receive data when you use Flawless. Where a provider processes data outside the EU, the transfer is covered by the Standard Contractual Clauses (SCC) in that provider's data processing agreement.
| Provider | Purpose | Data location | Privacy policy |
|---|---|---|---|
| Supabase | Database, authentication, file storage | EU (Frankfurt, Germany) | supabase.com/privacy |
| Google Gemini AI | Food photo analysis, AI assistant responses | Google infrastructure (global) — SCC | Google Privacy Policy |
| Google Play | Processing your subscription payment on Android. Google is the merchant of record — it takes the payment, issues the receipt and remits VAT. We never see your payment details. | Google infrastructure (global) — SCC | Google Privacy Policy |
| Apple App Store | Processing your subscription payment on iOS. Apple is the merchant of record — it takes the payment, issues the receipt and remits VAT. We never see your payment details. | Apple infrastructure (global) — SCC | Apple Privacy Policy |
| Sign in with Apple | Optional sign-in on iOS and the web. Apple verifies your identity and passes us your name and e-mail address — or, if you choose Hide My Email, a private relay address instead of your real one. | Apple infrastructure (global) — SCC | Apple Privacy Policy |
| Sign in with Google | Optional sign-in. Google verifies your identity and passes us your name, e-mail address and profile photo. | Google infrastructure (global) — SCC | Google Privacy Policy |
| RevenueCat | Subscription management — links your purchase to your account so PRO unlocks. Receives your user ID and purchase history, not payment details. | USA — SCC | revenuecat.com/privacy |
| Firebase Cloud Messaging (Google) | Delivering push notifications to Android devices. Receives your device token and the notification text. | Google infrastructure (global) — SCC | Firebase Privacy |
| Apple Push Notification service | Delivering push notifications to iPhone and iPad. Receives your device token and the notification text. | Apple infrastructure (global) — SCC | Apple Privacy Policy |
| Resend | Sending the e-mails described in Section 5d. Receives your e-mail address and the content of the e-mail. | EU/USA — SCC | resend.com/privacy |
| Sentry | Crash and error reporting. May include your user ID in an error trace. Session replay is disabled. | EU (Frankfurt, Germany) | sentry.io/privacy |
| PostHog | Product analytics (which features are used, retention). Events are linked to a random user ID from your account, never to your name or e-mail. Also a fully masked session replay (screen layout and taps only — every text and input value is hidden before the recording leaves your device) — no advertising, no cookies, no health data | EU (Frankfurt, Germany) | posthog.com/privacy |
| Netlify | Web app hosting and delivery | EU/USA (CDN) — SCC | Netlify Privacy |
| Open Food Facts | Nutritional data for barcode lookup | No personal data transmitted | OFFs Privacy |
| FatSecret Platform API | Food database search. Only the search term is sent. | No personal data transmitted | FatSecret Privacy |
| USDA FoodData Central | Food database search. Only the search term is sent, from our server. | No personal data transmitted | USDA Privacy |
| Pexels | Stock photos of meals in AI meal plans and recipes. Only the meal name is sent, from our server. | No personal data transmitted | Pexels Privacy |
| Unsplash | Example photos in the food-scan tutorial are loaded from Unsplash's image server, which sees your device's IP address like any website you visit. | No account data transmitted | Unsplash Privacy |
We do not use advertising networks, data brokers, or any form of ad tracking, and we never sell your data to anyone.
The open-source software, fonts, data and photos Flawless is built with, and the licences they come under, are listed on our Licenses and credits page.
7. Google API Services — Limited Use Disclosure
Flawless uses Google API services, including Google Gemini AI for food photo analysis and AI assistance. Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- Data obtained via Google APIs is used only to provide or improve user-facing features that are prominently disclosed in this Privacy Policy
- We do not use Google API data for serving advertisements
- We do not allow humans to read user data obtained from Google APIs except as necessary for security, compliance, or when required by law
Health Connect & Apple Health: the optional connection, the watch apps and exactly what they read, store and write are described in Section 3a. Flawless does not use the Google Fit APIs.
8. Google Gemini AI — Data Training Disclosure
When you use the AI assistant, an AI meal or training plan, or food photo analysis, your messages and the profile details needed for the answer are sent to the Google Gemini API. Depending on the feature, this can include your name, age, sex, height, weight, goals and allergies and, if you entered them, medical conditions, medication (for example GLP-1), injuries and pregnancy or breastfeeding status. When you chat with the AI coach, the request also carries what you logged today, your training plan and your food log and workouts from the last 14 days, so that the coach can answer questions about your recent days; Apple Health or Health Connect data only with the separate consent described in Section 5.
Model training: Based on Google's standard API Terms of Service, data submitted through the Gemini API is not used to train Google's AI models without your explicit consent. We use the standard production API (not the free-tier playground), which falls under Google's enterprise data processing terms. For full details, see Google Gemini API Terms.
Conversations are stored temporarily on Google's servers to generate a response and are not retained for model training purposes.
9. Your Rights Under GDPR
How to delete all your data
In the app go to Settings → Account → Delete Account (this opens the deletion tool on this page), or use the Privacy Options tab directly. This permanently and irreversibly deletes your profile, food log, workouts, habits, measurements, AI chat history, push subscriptions and all uploaded photos. Alternatively, e-mail support@getflawless.app — we'll delete your data manually within 30 days.
Two exceptions, both required by law or stated above: community food entries you contributed stay in the shared database with the link to you removed (Section 5a; a product photo you shared is not one of them and is deleted), and purchase records are kept for the statutory tax retention period (Section 9a).
9a. How Long We Keep Your Data
As required by GDPR Article 13(2)(a):
| Data | Retention period |
|---|---|
| Account, profile and all training, nutrition, habit and health data | Until you delete your account. We do not auto-expire your history — it is your long-term record. Deletion is immediate and irreversible. |
| Uploaded photos (avatar, meal photos) | Deleted together with your account |
| AI chat history | Until you clear the conversation in the app, or until account deletion |
| Community food contributions | Kept indefinitely, but the link to you is removed on account deletion — see Section 5a |
| Product photo you agreed to share in the food database | Until you ask us to remove it, or until you delete your account |
| Community profile, posts, photos, comments, kudos, follows, published templates | Deleted together with your account |
| Feedback requests, the record of your consent to them, your badge and your verification application (link, note, code and our decision) | Until you delete the request or withdraw the application, leave the community, or delete your account |
| Reports you filed about other users | Kept for moderation accountability, but your identity is removed on account deletion |
| Crash reports (Sentry) | 90 days, then automatically deleted |
| Product analytics events (PostHog) | 12 months. Linked to your pseudonymous user ID, never to your name or e-mail |
| E-mail log | Until account deletion |
| Masked session replays (PostHog) | 30 days, then automatically deleted. Contains no text or entered values. |
| Bug reports you send from the app | Your name, e-mail address and screenshot are removed when you delete your account. The description of the problem is kept, without your identity, to fix bugs. |
| Record of your consent (date and time) | Deleted together with your account |
| Subscription and purchase records | Retained as long as legally required for tax and accounting purposes (up to 10 years under Czech law), even after account deletion. This is a legal obligation under Art. 6(1)(c) and cannot be waived. |
| Push notification token | Until you disable notifications, sign out, or delete your account |
10. Cookies and Local Storage (Cookie Policy)
Flawless does not use third-party tracking cookies or advertising cookies. We use browser localStorage to store your selected theme (light/dark) and language preference and a Supabase session token to keep you signed in. Product analytics (PostHog) stores nothing on your device, in the app or on the website: the analytics identifier exists only in memory while the app is open. Once you sign in, analytics events are linked to your account's user ID, a random string that is not your name or e-mail. The only analytics-related items kept on your device are your choice to switch usage statistics off (Settings → Usage statistics) and a marker so that a registration is counted once. Older versions of the app also kept your answer to the question where you first heard about Flawless on the device; current versions save it in your profile instead.
Device sensors. On Android, Flawless reads your phone’s ambient light sensor while the app is open, so it can offer light mode and raise screen brightness when you are in direct sunlight. This reading requires no permission, is used only to decide whether it is bright around you, and never leaves your device — we do not store it, log it or send it anywhere.
The session token refreshes automatically while you keep using Flawless, so you stay signed in until you sign out or delete the app's data. Before you sign in, analytics events carry a random identifier that is never written to your device, is never linked to your name or e-mail, and disappears when you close the app.
10a. This Website (getflawless.app)
You can read this website without an account. When you open a page, our hosting provider Netlify processes your IP address and basic browser details to deliver the page and to keep the service secure. We do this in our legitimate interest in running a working and safe website (Art. 6(1)(f)).
We count page views and taps on the store buttons with PostHog, hosted in the EU, in a mode that stores nothing on your device — no cookies and no local storage. Every visit is therefore counted as a new one and we cannot recognise you when you come back. The website has no advertising and no social-media tracking pixels, and its fonts and scripts are served from our own server.
The only things this website keeps in your browser are your language choice and, if you use the account tool on this page, your sign-in. The calculators on the website work in your browser: what you type into them is not sent to us.
11. Data Security
- All data is transmitted via HTTPS (TLS 1.3)
- Database access is protected by Row Level Security (RLS) — each user can only access their own rows
- Passwords are hashed using bcrypt (managed by Supabase Auth)
- Food photos are stored in a private Supabase Storage bucket. A product photo you agree to share (Section 5a) is copied to public storage so that other users can see it
- Photos you post in the community, including feedback requests, are stored in public storage under an address that cannot be guessed. The app shows them only to signed-in users, but anyone who has the address of a photo can open it without signing in. Deleting the post deletes the photo
12. Age Restriction
Flawless is intended for users aged 18 and over. You confirm that you are at least 18 when you register (or, if you sign in with Google or Apple, on a confirmation screen you see once before you start), and the app asks for your date of birth and does not let you continue if it shows you are under 18. If we become aware that personal data of a child under 18 has been provided, we will delete it promptly.
13. Changes to This Policy
We announce material changes in the app and on our social media channels. The "last updated" date at the top of this document is always current. This policy tells you how we handle your data; it is not something you have to agree to. Where a change needs your consent, we ask for it in the app.
14. Contact
Data protection enquiries: support@getflawless.app
We respond to all requests within 30 days as required by GDPR.
Terms & Conditions
Plain English summary: Flawless is free to use, with an optional paid PRO subscription sold through Google Play or the Apple App Store. AI content is informational only. You own your data. We are not liable for health outcomes.
1. Acceptance of Terms
By accessing or using the Flawless application ("the App"), you agree to be bound by these Terms and Conditions. If you do not agree, please discontinue use immediately.
2. Description of Service and Who Provides It
Flawless is an application for tracking fitness activities, nutrition, habits, and health progress. It is distributed as an Android app via Google Play (with a companion app for Wear OS watches), an iPhone and iPad app via the Apple App Store (with a companion app for Apple Watch), and as a web app at app.getflawless.app.
The App is provided by:
Jiří Sládek
Business ID (IČO): 29656508
Registered in the Czech Trade Licensing Register (ares.gov.cz)
Place of business: Benešov, Czech Republic
E-mail: support@getflawless.app
Availability. The App is provided without any guarantee of uninterrupted availability.
2a. Free Tier and the PRO Subscription
The core of Flawless is free to use. Some features are reserved for the paid Flawless PRO subscription.
| Plan | Price | Billing |
|---|---|---|
| Free | €0 | No payment, no card required |
| PRO — monthly | from €7.49 / month | Auto-renews monthly until cancelled |
| PRO — annual | from €54.99 / year | Auto-renews yearly until cancelled |
Why "from". Google Play and the Apple App Store add your country's VAT on top of our price and convert it into your local currency, so the amount you actually pay depends on where you are. The exact final price is always shown in the app and by the store before you confirm the purchase — that displayed price is the one that applies.
Who you are buying from. Subscriptions are sold and processed by the store you buy through — Google Play on Android, Apple on iOS — acting as the merchant of record. The store takes the payment, issues your receipt and remits VAT. We never receive or store your payment details.
Auto-renewal. A subscription renews automatically at the end of each billing period unless you cancel at least 24 hours before it ends. Cancellation is done in the store you bought from — on Android Play Store → Profile → Payments & subscriptions → Subscriptions, on iOS Settings → your name → Subscriptions — we cannot cancel it for you from our side.
Free trial. Where a free trial is offered, it converts into a paid subscription automatically unless you cancel before it ends. Eligibility for a trial is decided by the store — by Google based on your Play account history, by Apple based on your Apple Account history.
Fair use of AI features. PRO removes the daily limits that apply to the free tier. To prevent automated abuse, AI features are still subject to a generous fair-use ceiling (currently 200 AI coach messages and 60 food photo scans per day, and 20 AI meal plans, 20 AI training plans and 20 AI recipes per week). Normal use will never reach it. We may adjust these ceilings and will not reduce them in a way that meaningfully affects ordinary use without notice.
Price changes. We may change subscription prices. Any change applies only to future billing periods, and the store you bought from (Google Play or the App Store) will notify you and ask for your consent where required before it takes effect. You can always cancel instead.
Changes to PRO features. We may add, change or retire individual PRO features as the product develops. We will not remove a material part of what you paid for without offering you a refund or a comparable replacement.
3. User Accounts and Minimum Age
- Flawless is intended for users aged 18 and over. By creating an account you confirm you are at least 18; if you sign in with Google or Apple, you confirm it on a screen shown once before you start using the app. The app also asks for your date of birth and does not let you continue if it shows you are under 18. Flawless is a general fitness and nutrition tool, not a service directed at minors, and we do not knowingly create accounts for them. This matches the age limit in Section 12 of our Privacy Policy.
- Registration requires a valid email address and password
- You are responsible for maintaining the confidentiality of your login credentials
- Each person may hold only one account
- Accounts showing abusive behaviour (automated access, scraping, spam) will be terminated without notice
4. User-Generated Content
By entering data into the App (food logs, workouts, photos), you grant us a non-exclusive licence to process that data solely for the purpose of providing the service. This licence terminates upon account deletion.
By submitting a food photo for AI analysis, you consent to that image being temporarily processed by Google Gemini API as described in our Privacy Policy.
Community contributions. When you add a food and choose to share it, its name, brand, barcode and nutritional values are contributed to our shared community food database. A photo of the product is contributed only if you agree when the app asks. You decide for each food whether to share it (in older versions of the app, under Settings → Share with community). You confirm that you have the right to share this content, and you grant Flawless and other users a perpetual, worldwide, royalty-free, non-exclusive licence to store, display, and reuse this contributed food entry within the service. Because contributions become part of an anonymised collective database, this licence survives the deletion of your account. For a photo the licence is narrower: it covers storing the photo and showing it next to the food within the service, and it ends when you ask us to remove the photo or when you delete your account. A photo you share must be one you took yourself or have the right to share, must show the product, and must not show a recognisable person or anyone’s personal data. You must not contribute content that is unlawful, infringing, or that contains personal or sensitive information about yourself or others. We may remove or correct any community entry, including its photo, at our discretion.
4a. The Community
The community is optional. You join it deliberately, and before you can post you must accept the Community Guidelines shown in the app. Those Guidelines form part of these Terms.
You keep ownership of what you post. By posting, you grant Flawless a non-exclusive, worldwide, royalty-free licence to store, reproduce and display that content inside the service for as long as it is posted, and to show it to other users. Deleting a post ends that licence; deleting your account removes your community content entirely (see Section 5c of the Privacy Policy).
Public recipes are community content. The same licence and rules apply: while a recipe is public, Flawless may display it to other users, who may rate it and comment on it. Making it private or deleting it ends that licence. Repeated attempts to publish content that breaks these rules lead to an automatic community ban, as described in Section 5c of the Privacy Policy.
Feedback requests and verified badges. If you ask for feedback, other users may comment on what you posted, bluntly but within the Guidelines; mocking a person's body or looks is not allowed. You must not save, repost or share another user's photo outside the service. A badge (Coach, Athlete, Trusted) is granted by us under the rules shown in the app and described in Section 5c of the Privacy Policy. It is not a professional licence or a medical qualification, we do not verify certificates, and advice from a user with a badge remains that user's own opinion, for which we are not responsible. When you apply for a badge you must give a profile or website that is really yours; an application made in someone else's name is impersonation. We may refuse or withdraw a badge at any time, in particular after a breach of these Terms.
You confirm that you have the right to post what you post, that it does not infringe anyone else's rights, and that any person recognisable in a photo has agreed to appear in it.
You must not post:
- nudity or sexual content
- violence, gore, hate speech or hateful symbols
- harassment, bullying, threats, or content targeting a specific person
- illegal drugs, anabolic steroids or other performance-enhancing substances, or encouragement to use them
- extreme or dangerous diets, starvation, purging, or anything promoting disordered eating
- medical advice presented as professional or clinical guidance
- spam, advertising, paid promotion, or links to commercial offers
- impersonation of another person, brand or organisation
- personal data about other people
- anything unlawful
How we moderate. Every caption, comment and photo is screened automatically before publication. Beyond that, every post, comment, profile and template can be reported from inside the app, and content reported by three different users is hidden automatically and immediately. You can block another user from their profile; a blocked user disappears from your feed and can no longer interact with you.
We review reports daily and act within 24 hours. We may remove content, hide a profile, or suspend an account that breaks these rules, with or without prior notice depending on severity. We are not obliged to monitor all content, but we may act at our discretion when we become aware of a problem. Reports can also be sent to support@getflawless.app.
Contact point (Digital Services Act). Users, the authorities of EU Member States and the European Commission can reach us at support@getflawless.app, in English or Czech. Anyone, including people without an account, can report content they consider illegal at that address: tell us where the content is, why you consider it illegal, and your name and e-mail address. We confirm that we received the report and tell you what we decided.
When we refuse or restrict something, we say so. When the automated check refuses a post, a photo, a recipe or a name, the app tells you immediately what did not pass. If your access to the community is suspended, the app tells you that the community is blocked for your account. You can ask us for the specific reasons — what was refused and when — and for a review by a person at support@getflawless.app. We answer without undue delay, and if the decision was a mistake we reverse it. You can also use the routes in Sections 13 and 13a.
There is no private messaging. Everything written in the community — posts and comments — is public to other users of the app. Do not post health information you are not willing to make public.
Leaving. You can turn your visibility off at any time, which hides you from everyone while your account stays. Deleting your account removes your community content as described above.
5. Health Data Consent
The App collects health-related data (weight, body measurements, fitness goals) as described in our Privacy Policy under GDPR Article 9. By completing the onboarding process and checking the consent checkbox, you provide explicit consent to process this special category data. You may withdraw consent at any time by deleting your account.
6. Prohibited Conduct
You agree not to:
- Use the App in violation of applicable laws or regulations
- Attempt to access other users' data without authorisation
- Perform automated scraping, reverse engineering, or decompilation of the App
- Share login credentials with third parties
- Post content prohibited by Section 4a, or use the community to harass another user
- Evade a block or a suspension, including by creating a second account
- File reports in bad faith, or coordinate reports to hide someone else's content
- Use the App to distribute harmful, offensive, or illegal content
7. Third-Party Integrations
The App relies on third-party services including Google Gemini AI, Google Play Billing, Apple In-App Purchase and RevenueCat (subscriptions), Sign in with Google and Sign in with Apple (optional sign-in), Firebase Cloud Messaging and the Apple Push Notification service (notifications), Resend (e-mail), Open Food Facts, FatSecret and USDA FoodData Central (food data), and, only if you connect them, Health Connect on Android and Apple Health on iPhone and Apple Watch. The full list, with what each one receives, is in Section 6 of our Privacy Policy.
Your use of any connected third-party platform is governed by that platform's own terms of service — in particular, purchases are additionally subject to the Google Play Terms of Service on Android and to the Apple Media Services Terms and Conditions on iOS. We are not responsible for third-party service availability or accuracy.
8. Service Availability
We make reasonable efforts to maintain availability, but we do not guarantee uninterrupted service. The App may be temporarily unavailable due to maintenance, updates, or technical issues beyond our control. We reserve the right to modify, suspend, or discontinue the App at any time without prior notice.
9. Intellectual Property
All App content (design, code, text, logos, graphics) is owned by the developer or used under applicable licences. You may not copy, distribute, modify, or create derivative works without explicit written permission.
10. Disclaimer of Warranties
The App is provided "as is" and "as available" without warranties of any kind, either express or implied, including but not limited to merchantability, fitness for a particular purpose, or non-infringement.
11. Limitation of Liability
To the maximum extent permitted by law, we shall not be liable for:
- Any health outcomes or injuries arising from use of information in the App
- Data loss caused by technical failures
- Inaccuracies in nutritional data from Open Food Facts or AI analysis
- Unavailability of third-party services (Supabase, Google, Netlify)
- Any indirect, incidental, or consequential damages
Nothing in Sections 10 and 11 excludes or limits liability that cannot be excluded or limited under the law that applies to you, or the rights you have as a consumer, including those in Section 12a.
12. Right of Withdrawal (Digital Content — EU)
For the Flawless PRO subscription, EU consumers have a 14-day right of withdrawal from the date of purchase under the Consumer Rights Directive (2011/83/EU).
Note: By starting your subscription you expressly request immediate access to the digital service and acknowledge that this waives the statutory withdrawal right once the service has been fully provided. The full conditions, the cooling-off window and refund eligibility are set out in our Refund Policy.
How to withdraw. Before the 14 days are over, send us a clear statement that you withdraw, by e-mail to support@getflawless.app. You do not have to give a reason. You can use this form:
Withdrawal form
To: Jiří Sládek, Benešov, Czech Republic, support@getflawless.app
I hereby give notice that I withdraw from my contract for the Flawless PRO subscription.
Ordered on: …
Store order number (Google Play, starts with GPA., or the Apple order ID): …
My name: …
E-mail address of my Flawless account: …
Date: …
We confirm by e-mail that we received it. The money is returned through the store to the payment method you used, without undue delay and no later than 14 days after we receive your withdrawal.
You cancel in the store you bought from — Google Play → Profile → Payments & subscriptions → Subscriptions on Android, or Settings → your name → Subscriptions on iOS. Cancellation stops future charges and PRO access continues until the end of the period you already paid for.
12a. If Something Does Not Work (Rights From Defective Performance)
Flawless is a digital service. While you use it, it has to match what we describe in the app and on this website, work on the devices listed in the store, and receive the updates it needs to keep working and stay secure.
If it does not, you have the rights the law gives consumers for a defective digital service (Sections 2389a and following of the Czech Civil Code, which implement Directive (EU) 2019/770). You can ask us to fix the defect free of charge and within a reasonable time. If we do not fix it, or the defect is substantial, you can ask for a reasonable reduction of the price or withdraw from the contract and get back the part of the price for the time the service did not work as it should.
How to complain. Write to support@getflawless.app, or use Profile → Report a bug in the app, and tell us what is wrong, on which device and in which version. We confirm that we received your complaint and settle it without undue delay, no later than 30 days after you made it, unless we agree on a longer period with you. While a subscription is running, it is up to us to show that the service was in order.
If we cannot agree, Sections 13 and 13a say where you can turn.
13. Governing Law and Jurisdiction
These Terms are governed by the laws of the Czech Republic. If you are a consumer living in the EU, you keep the protection of the mandatory consumer laws of the country where you live, and you can bring a claim either before the courts of the Czech Republic or before the courts of the country where you live. If you are not a consumer, disputes are decided by the competent courts of the Czech Republic.
13a. Out-of-Court Dispute Resolution (Consumers)
If we cannot resolve a complaint between us, you have the right to turn to an out-of-court dispute resolution body. For consumers, the competent body in the Czech Republic is:
Czech Trade Inspection Authority (Česká obchodní inspekce)
Štěpánská 796/44, 110 00 Prague 1, Czech Republic
www.coi.cz · adr.coi.cz
This procedure is free of charge for the consumer and you may use it before going to court. Using it does not affect your right to seek a remedy in court.
Because your purchase is made through an app store, you may also raise the matter directly with that store — Google Play support or Apple Support — which handles billing complaints for purchases where the store is the merchant of record.
14. Changes to These Terms
We may update these Terms when the app changes, when the law changes, or to make them clearer. Material changes are announced in the app and on our social media channels. A change that is to your disadvantage takes effect no sooner than 14 days after we announce it. If you do not agree with it, you can stop using the App, delete your account and cancel PRO in the store before it takes effect; until then the previous Terms apply to you. If you keep using the App after a change has taken effect, the new Terms apply.
15. Contact
Refund Policy
Plain English summary: You buy PRO from Google or Apple, not from us — so the store refunds first. Google normally refunds automatically within 48 hours; on iOS you ask Apple. After that, ask us and we'll decide fairly. Billing errors are always refunded in full. You cancel in the store you bought from.
1. Who You Bought From
Flawless PRO is sold through the app store you downloaded Flawless from — Google Play on Android, Apple on iOS — and that store acts as the merchant of record. It takes the payment, issues your receipt and remits VAT. We never receive or store your card details.
This matters for refunds: the store's refund process applies first, and in the days right after a purchase it is the fastest route by far.
2. Subscription Plans
| Plan | Price | Billing |
|---|---|---|
| Monthly | from €7.49 / month | Auto-renews monthly until cancelled |
| Annual | from €54.99 / year | Auto-renews yearly until cancelled |
The price you actually pay depends on your country. Google Play and the Apple App Store add local VAT on top of our base price and convert it into your currency — so the amount can differ from the euro figures above. The exact final price is always shown to you in the app and by the store before you confirm. That displayed price is the one that applies.
3. Fastest Route — Ask the Store First
Bought on Android (Google Play). Within 48 hours of a purchase you can request a refund directly from Google and it is normally granted automatically:
Play Store → Profile → Payments & subscriptions → Budget & order history → select the purchase → Request a refund.
Or online at play.google.com/store/account/orderhistory.
Bought on iOS (Apple App Store). Apple handles refunds for App Store purchases and decides each request individually — there is no automatic 48-hour window:
reportaproblem.apple.com → sign in with your Apple Account → select the purchase → Request a refund.
If the store declines the request or redirects you to us, that's what the rest of this policy covers.
4. Right of Withdrawal (EU Consumer Law)
Under EU Directive 2011/83/EU you have the right to withdraw from a digital service contract within 14 days of purchase without giving a reason. How to withdraw, with a form you can use, is in Section 12 of our Terms.
Important — Waiver of the Withdrawal Right
When you start a PRO subscription you expressly request immediate access to the digital service and acknowledge that once it has been fully performed, the statutory withdrawal right is lost. In practice we do not apply this strictly: if you are within 14 days and have barely used PRO, we will refund you. See the table below.
5. Refund Eligibility
| Situation | Eligibility |
|---|---|
| Within 48 hours of purchase (Google Play) | Refunded by Google automatically — use the route in Section 3 |
| Any App Store purchase (iOS) | Apple decides each request — ask at reportaproblem.apple.com, see Section 3 |
| First subscription, within 14 days, minimal use of PRO features | Full refund |
| Annual plan cancelled within 30 days of purchase | Pro-rata refund for the unused months |
| Duplicate charge or billing error | Full refund, always |
| Charged after you cancelled | Full refund, always |
| Service unavailable for more than 72 consecutive hours | Pro-rata credit or refund |
| Monthly plan, after 14 days | No refund — cancel before the next billing date to stop further charges |
| Annual plan, after 30 days | No refund — cancel to prevent renewal |
| A free trial that converted because you forgot to cancel | Contact us — if you did not use PRO after it converted, we will refund it |
None of the above limits your mandatory statutory rights as a consumer in your country of residence.
6. How to Request a Refund From Us
E-mail support@getflawless.app with the subject line "Refund Request" and include:
- The e-mail address of your Flawless account
- The date of purchase and the store order number — the Google Play order number (starts with
GPA., in your Play order history and in Google's receipt e-mail) or the Apple order ID from the App Store receipt e-mail - The reason (optional, but it helps)
We respond within 14 days. Because the store holds the money, an approved refund is issued through Google Play or the Apple App Store back to your original payment method, which typically takes a further 5–10 business days depending on your bank.
7. How to Cancel
Cancellation is handled by the store, not by us — we cannot cancel a subscription on your behalf:
Android: Play Store → Profile → Payments & subscriptions → Subscriptions → Flawless → Cancel subscription
iOS: Settings → your name → Subscriptions → Flawless → Cancel subscription
The app also has a manage subscription button that takes you straight to the right screen for your device. Cancelling stops future charges; PRO stays active until the end of the period you already paid for. There are no cancellation fees.
8. Free Tier
The free tier has no charges and requires no cancellation. You can delete your account at any time from Settings → Account → Delete Account in the app, or from the Privacy Options tab on this page.
9. If We Cannot Agree
If you are not satisfied with how we handled your refund, you can turn to the Czech Trade Inspection Authority free of charge (adr.coi.cz) — see Section 13a of our Terms — or raise a billing complaint directly with Google Play support (Android) or Apple Support (iOS).
10. Contact
Refund questions: support@getflawless.app
Disclaimer
Most important: Flawless is not a medical device or health service. Always consult a qualified professional before starting a new diet or training programme.
General Health & Fitness Disclaimer
All information provided in the Flawless app — including calorie calculations, macro targets, training plans, and general recommendations — is for informational purposes only.
This information:
- Does not constitute professional medical, nutritional, or fitness advice
- Does not create a doctor–patient or dietitian–client relationship
- Cannot be considered a diagnosis, treatment, or prevention of any medical condition
- Should not replace consultation with a licensed healthcare provider
AI-Generated Content
The App uses Google Gemini AI to analyse food photos and generate personalised recommendations. Please be aware that:
- AI may misidentify foods or misjudge portion sizes
- AI recommendations are generated automatically and are not reviewed by a human expert
- Data you submit to the AI assistant may be temporarily processed on Google's servers (see Privacy Policy)
- AI outputs are not individualised medical or dietary advice
- Based on Google's standard API Terms, data submitted via the Gemini API is not used to train Google's AI models without your explicit consent
Scores, Reports and Targets
Flawless produces normative outputs — features such as the Progress Report and Nutrition Report compare where you are against "where you should be", and the app assigns scores, grades and daily targets for calories, macros, micronutrients, hydration and training volume.
These are generic statistical estimates derived from population-level formulas, not an individual assessment of you. Specifically, they:
- Are not a health assessment, diagnosis, or a judgement of your fitness to exercise
- Do not account for medical conditions, medication, injuries, pregnancy, or anything you have not entered into the app
- Can be wrong for you personally, especially at the extremes of body composition, age, or training experience
- Should never be the reason to ignore symptoms, delay seeking care, or override advice from a healthcare professional
A low score means the app's model did not see what it expected. It does not mean something is wrong with your health.
What Other Users Post
The community inside Flawless is a place where people share their own training. Posts, photos, numbers, streaks, templates and comments there come from other users — not from us.
- Other users are not experts, and they have not seen your situation. Nothing posted in the community is medical, nutritional or fitness advice.
- A badge next to a name is not a qualification. Coach, Athlete and Trusted say how a person earned trust inside the app: a public profile we checked, months of logged training, or advice that others marked as helpful. We do not check certificates, and feedback from a user with a badge is still that user's opinion, given without seeing you or knowing your health.
- We do not verify that what people post is true. A weight, a lift, a result or a photo may be wrong, exaggerated, or achieved in a way that would not be safe or healthy for you. A training template someone shared has not been reviewed by anyone.
- Automated moderation is not a quality check. It removes content it recognises as prohibited before anyone sees it. It is not perfect, and content that passes it is not endorsed or recommended by us.
- Comparing yourself to other users is not a health assessment. Bodies, ages, medical histories, medication and starting points differ, and none of that is visible in a post.
- If something in the community concerns your health, speak to a qualified professional instead of acting on a post. If something breaks the rules, use Report — we review reports within 24 hours.
Nutritional Data Accuracy
Nutritional values in the food database are sourced from Open Food Facts (an open community database available under the Open Database License), FatSecret, USDA FoodData Central, NutriDatabaze.cz (the Czech food composition database) and user-submitted entries. While we aim for accuracy, we cannot guarantee the correctness of all nutritional values. Actual nutritional content varies by brand, preparation method, and portion size.
Fitness and Training
Before starting a new exercise programme, particularly if you:
- Have a chronic or acute medical condition
- Are recovering from injury or surgery
- Are pregnant or breastfeeding
- Have been sedentary for an extended period
…always consult a physician or certified personal trainer. The developer of Flawless accepts no liability for injuries or health complications resulting from exercise or dietary changes made on the basis of information in the App.
Third-Party Data Accuracy
We are not responsible for the accuracy, availability, or content of data provided by third parties including Open Food Facts and Google Gemini AI. Use of this data is at your own risk.
Contact
Questions or concerns: support@getflawless.app
Privacy Options
Plain English: Flawless does not use tracking cookies or ad networks. Your data is stored in the EU. You are in full control of your data at all times — including deleting everything, right here on this page.
What Flawless Does NOT Use
- Tracking or advertising cookies (our analytics is cookieless)
- Advertising networks (Google Ads, Meta Pixel, etc.)
- Third-party heatmap or session-recording services such as Hotjar or FullStory (the only replay we use is PostHog's fully masked one, described below)
- Health data in analytics — your weight, food, and workouts are never sent to analytics
- Data broker integrations
- Sale of personal data to any party
What Flawless Does Use
Strictly Necessary (cannot be disabled)
- localStorage — theme & language: Stores your chosen colour theme and language. Contains no personal data.
- Supabase session token: Keeps you signed in. Stored in localStorage and refreshed automatically while you keep using Flawless. Removed when you sign out.
- Push notification token: Only if you turn notifications on. Removed when you turn them off, sign out, or delete your account.
- Your choice to turn usage statistics off: A single marker that remembers the choice on this device. Contains no personal data.
- Where you first heard about Flawless (older versions of the app only): Your answer to that question in the first-run questionnaire, kept on the device so we do not ask again. Current versions save it in your profile instead (deleted with your account) and send it as one usage-statistics event linked to your random account ID, never to your name or e-mail.
Product Analytics (PostHog)
To understand which features are useful and how to improve the app, we record pseudonymous product events (e.g. "a workout was completed", "the paywall was viewed") via PostHog, hosted in the EU (Frankfurt, Germany). Before you sign in they carry a random identifier that exists only in memory while the app is open; after you sign in they are linked to your account's user ID, a random string. They are never linked to your name or e-mail and never contain health data (weight, food, measurements). It stores nothing on your device (no cookies, no local storage) and respects your browser's "Do Not Track" setting. It exists solely to improve Flawless and is never sold or used for advertising.
Masked session replay. PostHog also records how you move through the app — which screens you open, where you tap, and where something does not respond — so we can find broken or confusing steps without asking you to report them. Every piece of text and every input value is masked before the recording leaves your device: the replay shows the shape of the screen and the position of your taps, never your weight, meals, measurements, messages or any other content. Recordings are stored in the EU and deleted after 30 days. You can turn usage statistics off at any time in Settings (Usage statistics); that stops the events and the replay on that device.
AI Features (optional)
If you use the AI assistant or food photo analysis:
- Your messages and relevant profile data are sent to Google Gemini API
- Based on Google's standard API Terms, this data is not used to train AI models
- These features are entirely optional — the App works fully without them
- You can stop using AI features at any time; previous messages are stored in your account and can be deleted from the AI chat screen
Managing Your Data
| Action | How to do it |
|---|---|
| View your data | All your data is visible within the app (Profile, Nutrition, Fitness tabs) |
| Edit your profile | Settings → Profile → edit and save |
| Delete food entries | Nutrition tab → swipe entry left → Delete |
| Delete workout sessions | Fitness tab → workout detail → Delete |
| Delete AI chat history | AI tab → Clear conversation |
| Manage or cancel your subscription | Android: Play Store → Profile → Payments & subscriptions → Subscriptions. iOS: Settings → your name → Subscriptions. (Or the manage subscription button in the app.) |
| Turn off notifications | Settings → Notifications, or in your phone's system settings per channel |
| Delete your account | Settings → Account → Delete Account in the app, or the tool at the bottom of this page (permanent) |
| Export your data (portability) | Settings → Import from another app → Export my data saves your last 30 days. For a complete export, email support@getflawless.app — delivered within 30 days |
| Stop product e-mails | Tap Unsubscribe at the bottom of any tips or reminder e-mail. Account and purchase e-mails keep coming. |
| Turn off usage statistics | Settings → Usage statistics. Stops the analytics events and the masked replay on that device. |
| Withdraw health data consent | For Health Connect / Apple Health: Settings → Integrations → Disconnect and delete. For everything else: delete your account, or contact us to remove health data only |
Account & Data Deletion
Use the tool at the bottom of this page, or go to Settings → Account → Delete Account in the app (which brings you here). This permanently deletes your profile, food log, workouts, habits, measurements, AI conversations, push subscriptions, and every photo you uploaded. This action cannot be undone.
Two things intentionally survive, as explained in the Privacy Policy: community food entries you contributed remain in the shared database with the link to you removed (Section 5a), and purchase records are kept for the statutory tax retention period (Section 9a).
Deleting your Flawless account does not cancel a running subscription — the store controls that. Cancel it first in Google Play (Android) or in Settings → your name → Subscriptions (iOS), otherwise it will keep renewing.
If the tool does not work for you, email support@getflawless.app — we will delete your data manually within 30 days.
Data Location
Your account and everything you log is stored in Supabase's EU-Central-1 (Frankfurt, Germany) data centre. Some of the processors listed in Section 6 of the Privacy Policy — for example Google Gemini for AI answers, RevenueCat for subscriptions and Resend for e-mail — process limited data outside the EU, under Standard Contractual Clauses.
Withdrawing Consent for Health Data
You provided explicit consent to process health-related data (weight, measurements, fitness goals) during registration. You may withdraw this consent at any time by:
- Deleting your account (removes all data), or
- Contacting us at support@getflawless.app to remove only health data while keeping your account, or
- For a feedback request in the community (a photo of your body, details about your diet): deleting the request in the app, or leaving the community, which deletes all of them
- For data from Health Connect, Apple Health and the watch apps: tapping Disconnect and delete in Settings → Integrations (see Section 3a)
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Supervisory Authority
If you believe your data is being processed unlawfully, you have the right to lodge a complaint with your national data protection authority. Czech Republic users:
Office for Personal Data Protection (ÚOOÚ)
Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
www.uoou.cz · posta@uoou.cz
Contact
For all privacy-related requests: support@getflawless.app
We respond within 30 days as required by GDPR Article 12.