Privacy Policy

Last updated: 5 October 2026

1. Introduction

Fibremaxxing ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our fibre tracking service.

The data controller is METTLE OÜ (reg. code 14644103), Linnu tee 3-12, 11311 Tallinn, Estonia.

2. Data We Collect

2.1 Information You Provide

  • Account information: Email address, display name
  • Meal logs: Food names, brands, portion sizes, fibre amounts, dates
  • Settings: Daily fibre goal (20–50g), timezone, and whether you want recap emails
  • Payment information: Processed and stored by Stripe (we do not store card details)
  • Food photos (only if you use photo estimates): The photo you send or upload is used once to propose foods and portions, and is not stored by us. What you confirm is saved as ordinary meal-log entries
  • Telegram (only if you connect it): Your Telegram user ID, first name and username, so the bot knows which account a message belongs to, and the food messages you send it. We never see your phone number or your other chats

2.2 Automatically Collected Information

  • Server logs: Time and address of each request, kept by our hosting provider for security and troubleshooting. We do not use analytics or tracking scripts
  • Technical data: Browser type, device type, IP address (for security)
  • Subscription data: Trial status, billing dates, subscription status

3. How We Use Your Data

We use your information to:

  • Provide the service: Track your daily fibre intake and progress towards your goal
  • Send weekly recaps: Email summaries of your average fibre, best days, and tips to improve
  • Manage your subscription: Process payments, handle trials, send billing reminders
  • Keep the service working: Diagnose errors and prevent abuse
  • Communicate with you: Send transactional emails (sign-in links, trial reminders)

We do not: Sell your data, share it with third parties for marketing, or use it for advertising.

4. Data Sharing and Third Parties

We share your data only with trusted service providers necessary to operate Fibremaxxing:

  • Stripe: Payment processing (PCI DSS compliant)
  • Resend: Email delivery (sign-in links, reminders, weekly recaps)
  • Hosting and database providers: Run the application and store your account and meal logs on our behalf
  • Open Food Facts: Food database lookups. Only the search text is sent, from our server, never your identity
  • Anthropic: If you use photo estimates, the photo (and any caption) is sent to Anthropic's AI model to identify the foods. Nothing that identifies you is sent with it. Avoid photos that show people or documents
  • Telegram: If you connect it, your messages to our bot and its replies (your totals and what you logged) travel through Telegram, under Telegram's own privacy policy. Bot chats are not end-to-end encrypted. Payments never happen in Telegram

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

5. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right to access: Request a copy of your personal data (Settings → Download my data)
  • Right to rectification: Update your name or settings (Settings)
  • Right to erasure: Delete your account and all your data yourself, immediately (Settings → Delete account)
  • Right to restrict processing: Limit how we use your data
  • Right to data portability: Receive your data in a machine-readable format (CSV)
  • Right to object: Stop processing your data for certain purposes
  • Right to withdraw consent: Switch off recap emails in Settings or via the unsubscribe link in any of them

Most of these you can do yourself in Settings. For anything else, email us at support@fibremaxxing.app. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

6. Data Retention

We retain your data as follows:

  • Active subscriptions: All meal logs and account data retained while your subscription is active
  • Ended subscriptions: Your logs are kept so you can pick up where you left off, until you delete your account
  • Payment records: Invoices and payment records are held by Stripe and retained for 7 years for tax and legal compliance, even after you delete your account
  • Deletion: Settings → Delete account removes your account and logs from our database immediately, and disconnects Telegram. Messages already in your Telegram chat stay in Telegram until you delete them there
  • Telegram connection: Kept until you disconnect (Settings, or /unlink in the chat) or delete your account

7. Data Security

We implement appropriate technical and organisational measures to protect your data:

  • Encryption: HTTPS for all connections
  • Access control: No passwords to leak — sign-in uses single-use email links, and every request is checked against your signed session
  • Payment security: Stripe handles all card data (PCI DSS Level 1 certified)

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Cookies

We use one essential cookie and nothing else (no tracking, analytics or advertising cookies):

  • Session cookie: Keeps you logged in to your dashboard

This cookie is necessary for the service to function and expires after about six months or when you sign out. Stripe sets its own cookies on its checkout and billing pages.

9. Children's Privacy

Fibremaxxing is not intended for children under 16 years old. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately at support@fibremaxxing.app, and we will delete it promptly.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States (for payment processing, email delivery and hosting). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a prominent notice in the app. The date at the top of this page shows when it was last changed.

12. Contact Us

For privacy questions, data requests, or concerns, contact us:

Email: support@fibremaxxing.app

We aim to respond to all privacy requests within 30 days. For urgent matters, please indicate "URGENT" in your email subject line.

Note: We provide support via email only. No phone calls or meetings are required.

← Back to Fibremaxxing