Privacy Policy
Last updated: 17 October 2026
1. Who we are
Sanuo (the mobile app, the website sanuo.app and the related Telegram bot) is provided by Good Days OÜ, registry code 12627359, VAT EE101702702, A. H. Tammsaare tee 109, Tallinn, Estonia ("we", "us"). We are the data controller for your personal data. Contact: support@sanuo.app.
2. What data we collect
| Data | Examples | Why |
|---|---|---|
| Account | Email address or Google / Telegram account ID, language, time zone | To sign you in and keep your data together |
| Profile | Name you enter, sex, age, height, weight, activity level, goal and target date, foods you exclude | To calculate your daily calorie and nutrient targets and a realistic forecast |
| Health and wellness logs | Meals and their nutrients, food photos, weight history, water, sleep, stress level, steps, workouts, "I'm unwell" mode; steps and sleep from Health Connect if you connect it | To show your day, progress, insights and weekly reports |
| Coach conversations | Messages you send to the AI coach and its replies, notes the coach keeps about your preferences | So the coach can answer and remember context |
| Subscription | Plan, trial and renewal dates, purchase token. We never see your card details. | To give access to paid features |
| Technical | Device type, app version, push notification token, error logs | To send reminders you asked for and fix bugs |
Health data is a special category of personal data under the GDPR. We process it only with your explicit consent, which you give when you start using Sanuo and can withdraw at any time by deleting your account.
3. How AI is used
Food photos and meal descriptions are sent to an AI model to estimate dishes and nutrients. Coach messages are generated by an AI model from your profile and the last days of your logs. Food photos are analysed and then discarded; we keep only the resulting meal entry. AI estimates can be wrong — always check them.
4. Health Connect (Android)
Connecting Health Connect is optional; by default you enter sleep and steps yourself. If you turn it on in Settings, Sanuo asks for read-only access to two data types: steps and sleep sessions. We use them only to fill in your daily steps and sleep in Sanuo and in your coach's advice. We never write to Health Connect, never read other data types, and something you entered by hand is never overwritten.
Data from Health Connect is not sold, not used for advertising, not shared with third parties except the processors listed below for running the app, and is not used to train AI models. It is deleted together with your account. You can revoke access at any time in Health Connect settings. Sanuo's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.
5. Who processes data for us
- Hetzner Online GmbH (Germany / Finland) — servers and backups. Your data is stored in the EU.
- OpenAI (USA) — AI analysis of meals and coach replies. We send only what is needed for the task (for the coach: the first name you entered, your profile and recent logs; never your email). Data sent through the API is not used to train their models and is transferred under the EU Standard Contractual Clauses.
- Google — Google Play billing, sign-in with Google (if you choose it) and push notifications (Firebase Cloud Messaging).
- Telegram and Stripe — only if you use the Sanuo Telegram bot and pay there.
We do not use advertising or tracking SDKs and do not sell or rent personal data.
6. How long we keep data
We keep your data while your account exists. When you delete your account, your data is erased from our live systems immediately and from backups within 30 days. Payment records required by Estonian accounting law are kept for 7 years, without your health data.
7. Your rights
You can access, correct, export or delete your data, restrict or object to processing and withdraw consent. Most of this is available in the app under Settings; for anything else write to support@sanuo.app and we will answer within 30 days. You can also complain to the Estonian Data Protection Inspectorate (aki.ee) or the authority in your country.
8. Children
Sanuo is intended for people aged 16 and over. We do not knowingly collect data from younger children.
9. Not medical advice
Sanuo is a wellness app, not a medical device. It does not diagnose, treat or prevent any disease. If you are pregnant, have a medical condition or an eating disorder, talk to a doctor before changing your diet or activity.
10. Security
Data is transferred over encrypted connections (HTTPS), access to servers is limited and protected by keys, and backups are kept in a separate EU location with restricted access.
11. Changes
If we change this policy in a meaningful way, we will tell you in the app before the change takes effect.