28 Day Eating Plan
This policy explains how NullState ("we", "us") collects, uses and protects information when you use the 28 Day Eating Plan mobile app (the "App") on iOS and Android. By using the App you agree to this policy. If you do not agree, please do not use the App.
1. Who we are
The App is published by NullState, South Africa. We are responsible for the personal information processed through the App. You can reach us at admin@nullstate.co.za.
2. Information we collect
Information you enter in the App
- Your plan and round details, such as start dates, meals marked as eaten, skipped or off-plan, water intake, shopping lists and recipe choices.
- Weigh-ins and body measurements you choose to record.
- Progress photos you choose to take or upload. These are stored privately and only you can see them.
- App preferences such as language, units, reminders and appearance.
Account information
- When you first open the App we create an anonymous account identifier so your progress can be saved.
- If you choose to back up with Sign in with Apple or Google, we receive the details that provider shares, such as your name, email address (which may be an Apple private relay address) and a provider account identifier.
Optional features
- Household: if you create or join a household, your display details and the shared plan and shopping list are visible to the other members of that household.
- Grocery retailer linking: if you choose to link a supported grocery retailer account (for example Checkers Sixty60), we process the mobile number you provide to verify your account, a secure session to add items to your basket, and your shopping list items to find matching products.
Information collected automatically
- App usage data, such as screens viewed and feature events, through Firebase Analytics.
- Crash and diagnostic data, such as device model, operating system version and crash logs, through Firebase Crashlytics.
- Device and advertising identifiers used to serve ads to free users, subject to your consent (see section 5).
- Purchase and subscription status for Pro, through Apple, Google and RevenueCat.
We do not access Apple Health or Google Health Connect, your contacts or your precise location. We never receive your payment card details; payments are handled by Apple or Google.
3. How we use your information
- To provide the App: run your plan, save your progress, sync it across your devices and restore it on a new phone.
- To provide optional features you turn on, such as households, reminders and grocery basket filling.
- To manage Pro subscriptions and restore purchases.
- To show ads to users on the free tier.
- To understand how the App is used, fix crashes and improve features.
- To respond to your messages and requests.
- To comply with the law and protect the App and its users from abuse.
We do not sell your personal information. We do not use your weigh-ins, measurements or photos for advertising.
4. Service providers we share information with
We share information only with providers that help us run the App, and only what they need:
- Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Analytics, Crashlytics) — hosting your account and data, analytics and crash reporting. Firebase privacy.
- Google AdMob — ads for free users. Google advertising policy.
- RevenueCat — subscription management. RevenueCat privacy.
- Apple and Google — sign-in, in-app purchases and app distribution.
- Grocery retailers and product-matching services — only if you link a retailer account. Your mobile number and basket items go to that retailer, and shopping list item names go to a product-matching service to find suitable products.
We may also disclose information if required by law, to protect our rights or users' safety, or as part of a business transfer, in which case this policy continues to apply.
5. Advertising and tracking
Free users see a small number of banner ads. Pro subscribers see no ads. On iOS, we ask for permission through Apple's App Tracking Transparency prompt before using your advertising identifier for personalised ads; if you decline, you may still see non-personalised ads. Where required (for example in the EEA and UK), we ask for consent through Google's consent message. You can change these choices at any time in your device settings (iOS: Settings › Privacy & Security › Tracking; Android: Settings › Privacy › Ads).
6. Where your information is stored
Your data is stored on Google Cloud infrastructure through Firebase, and our service providers may process it outside your country, including in the United States and the European Union. Where this happens we rely on our providers' safeguards for international transfers.
7. How long we keep it
We keep your data for as long as your account exists. When you delete your account, your plan data, measurements, progress photos, household membership, retailer link and sign-in account are deleted. Some analytics, crash and purchase records are kept by our providers for their standard retention periods, and we may keep information where the law requires it.
8. Deleting your account and data
You can delete your account and all associated data at any time inside the App, under Settings › Delete all my data. Deleting your account does not cancel an active subscription; manage or cancel subscriptions in your Apple ID or Google Play settings. You can also ask us to delete your data by emailing admin@nullstate.co.za.
9. Your rights
Depending on where you live (including under South Africa's POPIA, the EU and UK GDPR, and US state privacy laws), you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent at any time. To exercise these rights, email us. You may also complain to your local data protection authority; in South Africa this is the Information Regulator (inforegulator.org.za).
10. Security
Data is sent over encrypted connections and stored with access controls so that only you (and, for shared household data, your household members) can read it. Retailer sessions are stored encrypted. No method of storage or transmission is completely secure, but we work to protect your information.
11. Children
The App is intended for adults and is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.
12. Health disclaimer
The App is a digital companion to an eating plan and is not medical advice. Consult a qualified health professional before starting any diet.
13. Changes to this policy
We may update this policy from time to time. We will change the effective date above and, for significant changes, let you know in the App.
14. Contact
NullState — admin@nullstate.co.za