Privacy Policy
Last updated: June 2026
Who we are
“Fennel” is a personal food-tracking tool for people managing dietary conditions such as kidney stones, gout, CKD, and coeliac disease. We are a small, independent application. For questions, contact us at support@myfennel.com.
What data we collect
We collect the minimum data needed to run the service:
- Account data: your name (optional) and email address.
- Health data (special category under GDPR Art. 9): foods you log, portion sizes, hydration entries, and symptoms you record. This data is stored only for your use and is never shared with third parties for any purpose.
- Usage data: server logs (IP address, request timestamps) retained for up to 30 days for security and debugging.
Legal basis for processing
Health data is a special category under GDPR Article 9. We process it only on the basis of your explicit consent, given when you create an account and confirmed at first sign-in. You may withdraw consent at any time by deleting your account.
Where your data is stored
Data is stored in a PostgreSQL database hosted by Neon (neon.tech). We aim to use an EU-region instance. Your authentication is handled by Auth.js with JWT tokens stored in encrypted cookies on your device only.
How long we keep your data
Your data is kept for as long as your account is active. You can delete your account and all associated data at any time from the Settings page. We have no backup retention beyond 7 days after deletion.
Your rights (GDPR)
- Right of access: request a copy of your data.
- Right to rectification: correct inaccurate data.
- Right to erasure: delete your account and all data.
- Right to portability: export your diary data (coming soon).
- Right to object: withdraw consent and stop processing.
To exercise any right, email us at support@myfennel.com or use the delete account option in Settings.
Cookies
We use a single session cookie (httpOnly, secure) for authentication. No third-party tracking cookies or analytics cookies are set.
Medical disclaimer
This application is for informational purposes only and does not constitute medical advice. Oxalate values are compiled from published research but may vary by food preparation method and individual absorption. Always follow guidance from your clinician or dietitian.
Changes to this policy
We will notify you of material changes by email or via an in-app notice. Continued use after changes constitutes acceptance.