Skip to content
Get Healthy

Legal

Privacy Policy

Last updated: October 2026

Get Healthy is the Data Controller of the personal data collected through the Get Healthy application and related services, pursuant to Regulation (EU) 2016/679 (GDPR).

Data Controller:

Get Healthy

Privacy email: info@gethealthy.it

Account Data (Required):

Email and name (if provided). This data is necessary to provide the service and cannot be omitted.

Health & Fitness Data (Optional):

Height, weight, body fat percentage, activity level, diet preferences (calorie target, macros, meals per day, diet style), allergies/intolerances, wellness goals, logged workouts, sleep sessions, mood entries, body measurements, medications, and medication reminders. This data is optional and provided voluntarily to enable personalized recommendations.

Data from Connected Health Sources (Apple Health / Health Connect — Optional):

If you choose to connect Apple Health (iOS) or Health Connect (Android), Get Healthy reads — read-only, and only after the explicit permission you grant in the operating system — exclusively the following data types:

  • Steps
  • Sleep sessions (total duration and stages: deep, REM, awake)
  • Heart rate
  • Heart rate variability (HRV)
  • Resting heart rate
  • Active calories burned
  • Total calories burned
  • Respiratory rate
  • Exercise sessions (type and duration)

These types are used for a single purpose: to show you your activity, rest, recovery, and energy trends inside the app, and to personalize workout, nutrition, and wellness recommendations accordingly. If you enable syncing, this data is stored in your Get Healthy account so your history stays available across your devices. We never write or modify any data in Apple Health or Health Connect.

On Android you may additionally grant optional background access (Android 15 and later), which lets the app refresh these same data types while it is closed, roughly every 15 minutes. No additional data types are read.

Data read from Apple Health and Health Connect is never sold, never transferred to third parties for advertising or marketing purposes, and never used to train artificial intelligence models. You can revoke access at any time from Apple Health or Health Connect settings, or by disconnecting the source in the app's "Devices & integrations" screen; revoking immediately stops all further reads, and already-synced data can be removed by deleting your account.

Service Usage Data (Required):

Chat messages with the AI coach, request history, technical logs, usage analytics, device type, browser version, and platform interaction data. This data is necessary for the functioning of the service and to ensure security.

Location Data (real-time only, not stored):

When you use features such as "nearby stores" or "meals near me" in the Shopping Assistant, your device location (latitude and longitude) is used in real time only to fetch relevant suggestions and is not stored by us. No precise location is retained in our databases or logs.

Data Sent Through Website Forms (Optional):

If you join the delivery waiting list or write to us from the Companies, Become a partner or Contact pages on gethealthy.it, we process the data you enter: email, postcode and, for company and kitchen requests, name, role, organisation name, city, headcount, phone (optional) and message. We use it only to answer your request or to tell you when delivery reaches your area, and keep it for as long as needed to handle the request or until you withdraw consent by writing to info@gethealthy.it. To protect the forms from spam we keep a one-way hash of your IP address, never the address itself.

Note: The provision of personal data for account creation and service delivery is mandatory. Without this data, we cannot provide our services. The provision of health/fitness data is voluntary and consent can be withdrawn at any time.

We process your data for the following purposes and legal bases:

Performance of Contract (Art. 6(1)(b) GDPR):

  • Provide and improve our AI wellness coaching services
  • Manage your account

Consent (Art. 6(1)(a) GDPR):

  • Personalize workout, nutrition, sleep, and wellness recommendations based on health data
  • Send marketing communications and promotional offers
  • Use anonymized data for research and service improvement
  • Analytics and usage tracking
  • Answer requests sent through the website forms and tell you when delivery reaches your area

Legitimate Interest (Art. 6(1)(f) GDPR):

  • Send important service notifications and updates
  • Ensure platform security and prevent fraud
  • Improve user experience and service quality

Legal Obligation (Art. 6(1)(c) GDPR):

  • Comply with legal obligations (tax, accounting, etc.)
  • Respond to legal requests from authorities

Some of the data we process — including data about workouts, meals, sleep, mood, body measurements, medications, and health goals — may constitute health-related data under Art. 9 of the GDPR ("special categories of personal data").

We process this data solely on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you provide when you activate health tracking features in the app. You may withdraw consent at any time from the app settings, which will result in the cessation of processing your health data for personalization purposes.

Health data is processed with enhanced security measures, including encryption, access controls, and strict data minimization.

We do not sell your personal data. We may share data only with:

  • Infrastructure service providers (Supabase for database and authentication) acting as data processors
  • AI model providers (OpenAI for generating personalized meal, workout, and nutrition recommendations) acting as data processors
  • Legal authorities when required by law

Your data is primarily stored and processed on servers located within the European Union (EU). In cases where data may be transferred outside the EU (e.g., to AI service providers such as OpenAI), we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions by the European Commission
  • Supplementary measures where necessary to ensure an essentially equivalent level of protection

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of Access (Art. 15 GDPR): You can request a copy of all personal data we hold about you
  • Right to Rectification (Art. 16 GDPR): You can request correction of inaccurate or incomplete data
  • Right to Erasure (Art. 17 GDPR): You can request deletion of your data ("right to be forgotten")
  • Right to Restriction of Processing (Art. 18 GDPR): You can request limitation of data processing
  • Right to Data Portability (Art. 20 GDPR): You can request your data in a structured, commonly used, machine-readable format
  • Right to Object (Art. 21 GDPR): You can object to processing based on legitimate interests
  • Right regarding Automated Decision-Making (Art. 22 GDPR): You can request human intervention, express your point of view, and contest automated decisions
  • Right to Withdraw Consent: You can withdraw your consent at any time without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, please contact us at info@gethealthy.it.

Right to Lodge a Complaint: You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) if you believe your rights have been violated. Contact: www.garanteprivacy.it

We retain your data for different periods depending on the type of data and purpose:

Active Account Data:

We retain your data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations.

After Account Deletion:

Upon account deletion, most personal data is deleted immediately. However, some data may be retained for up to 30 days for backup purposes, after which it is permanently deleted.

Legal Obligations:

We may retain certain data for as long as necessary to comply with legal obligations under Italian law.

Activity Logs:

Security and activity logs are retained for up to 90 days for security and fraud prevention purposes.

AI Chat Data:

Conversations with the AI coach are retained for the duration of your account to provide service continuity. They are deleted upon account deletion.

You can request deletion of your account and data at any time through the app settings or by contacting us directly.

Our service uses artificial intelligence (OpenAI) to provide personalized workout, meal, nutrition, sleep, and wellness recommendations based on your health data and preferences. This involves automated processing of your personal data (profiling) as defined in Art. 22 GDPR.

How it works:

  • AI analyzes your health data, goals, and preferences
  • Generates personalized workout plans, meal recommendations, and nutrition guidance
  • Adapts recommendations based on your progress and feedback
  • Provides sleep tracking, mood tracking, and wellness insights

Your rights:

You have the right to:

  • Request human intervention in the decision-making process
  • Express your point of view regarding automated decisions
  • Contest automated decisions that significantly affect you
  • Withdraw consent for profiling at any time through app settings

Legal Basis: Automated decision-making is based on your explicit consent (Art. 9(2)(a) and Art. 6(1)(a) GDPR) for the use of health data for personalization. You can withdraw this consent at any time without affecting the lawfulness of processing before withdrawal.

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, including:

  • Encryption of data in transit (HTTPS/TLS) and at rest
  • Secure authentication mechanisms via Supabase Auth
  • Access controls and role-based permissions (Row-Level Security)
  • Regular security audits and monitoring
  • Regular backups and disaster recovery procedures
  • Staff training on data protection
  • Enhanced security measures for special category data (health data)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

Our website and application use cookies and similar technologies. For detailed information about the types of cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting a notice in the app or by email. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of the service after changes constitutes acceptance of the updated policy.

For any privacy-related questions, to exercise your rights under GDPR, or to report a data protection concern, please contact us:

Privacy Email: info@gethealthy.it

We will respond to your request within 30 days as required by GDPR. In case of complex requests, we may extend this period by an additional 60 days, and we will inform you of any such extension.