Legal

Privacy Notice

Last updated: 26 August 2026

1. Who is responsible

GreenRoot Labs operates FastyMe and acts as the data controller for the personal data described here. Contact us at hello@greenrootlabs.app for any privacy question or request.

2. What we collect and why

  • Account data — email address, password hash (or your Google sign-in identifier), display name and optional profile picture. Used to create and secure your account and to sign you in. Legal basis: performance of our contract with you.
  • Fasting data — start and end times, chosen plans and programs, eating windows, notes and preferences such as language and theme. Used to provide the tracker, history and statistics. Legal basis: performance of our contract.
  • Support and contact messages — the content of questions, feedback and bug reports you send, plus your reply address. Used to answer you and fix problems. Legal basis: legitimate interest in supporting our users.
  • Technical and security data — IP address, device and browser information, timestamps and error reports. Used for security, abuse prevention and diagnosing faults. Legal basis: legitimate interest in a safe, working service.
  • Subscription status — tier, purchase and renewal dates and the identifiers Paddle returns for your order. Used to unlock Pro features. Legal basis: performance of our contract and legal obligations (accounting).

We do not collect food logs, weight or health-record data, and we do not use your fasting data for advertising.

3. Payments

Payments are processed by Paddle.com, our reseller and Merchant of Record. Paddle collects the billing and payment details needed to complete your order, calculate tax and issue invoices, and acts as controller for that data under its own privacy notice. We never receive or store your full card details.

4. Who we share data with

  • Hosting and database providers that run the app and store your account data.
  • Our email delivery provider, for account emails and support replies.
  • Paddle, as Merchant of Record for purchases, subscriptions, tax and invoicing.
  • Professional advisers such as accountants or lawyers, where necessary.
  • Authorities, where we are legally required to disclose data.

We do not sell your personal data.

5. International transfers

Some of our providers process data outside Switzerland and the EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses together with appropriate technical safeguards.

6. How long we keep data

Account and fasting data are kept while your account exists. When you delete your account, the data is removed from our production systems promptly and from backups within the normal backup rotation. Support messages are kept for up to 24 months. Purchase and invoicing records are kept for as long as tax law requires.

7. Your rights

Depending on where you live, you have the right to access, correct, delete, restrict or object to the processing of your data, to data portability, and to withdraw consent where processing is based on it. You can export your fasting history and delete your account yourself from your profile at any time. Write to hello@greenrootlabs.app to exercise any other right; we respond within one month. You may also complain to your data protection authority (in Switzerland, the FDPIC).

8. Security

We use encryption in transit, access controls, row-level security in our database and least-privilege access for administrators. No system is perfectly secure, but we take appropriate technical and organisational measures to protect your data.

9. Cookies and local storage

FastyMe uses only essential cookies and browser storage: your session token to keep you signed in, and a local database that lets the app work offline and sync later. We do not use advertising or third-party tracking cookies. Paddle may set cookies necessary for checkout and fraud prevention. Clearing your browser storage signs you out and removes the offline copy of your data.

10. Children

FastyMe is not intended for children under 16. We do not knowingly collect their data; if you believe a child has created an account, contact us and we will delete it.

11. Changes

We will update this notice when our processing changes and will highlight material changes in the app or by email.