Privacy Policy

Introduction

Renya ("we," "our," or "us") respects your privacy. This policy explains what we collect, why, and the rights you have. By using the Renya app or website, you agree to this policy.

Data Controller: Renya App OÜ, Estonia
Contact: contact@renya.com

Information We Collect

Account information you provide:

• Name, email, and authentication details
• Date of birth, sex, and wellness goals provided during onboarding

Health and wellness data you log in the app:

• Symptoms (e.g. heaviness, swelling, energy, sleep, stress, menstrual cycle)
• Habit completion and progress notes
• Body measurements and optional progress photos
• Meals and food logs

Subscription data: purchase status and entitlement information (we never see your payment card details).

Community content you choose to post, displayed under an anonymous pseudonym.

Usage data collected automatically: device type, app version, crash reports, and general usage patterns to improve the Service.

Apple Health (HealthKit)

If you choose to connect Apple Health, we read the following data types in read-only mode:

• Step Count
• Body Mass (Weight)
• Active Energy Burned

This data is used solely to display personal trends on your dashboard. It is never shared with third parties, used for advertising, or sold. You can disconnect at any time in Profile Settings.

How We Use Your Information

• Provide and personalize the Service, including AI-generated insights and recommendations
• Sync your subscription and unlock premium features
• Enable community participation under your pseudonym
• Send relevant notifications you've enabled
• Improve app performance and fix bugs
• Provide customer support
• Comply with legal obligations

Legal Basis (GDPR)

• Consent for processing your health and wellness data — you can withdraw it at any time
• Contract for providing the Service and managing your subscription
• Legitimate interest for security, fraud prevention, and product improvement
• Legal obligation for tax and accounting records

AI Features

Renya uses AI to analyze meals, scan menus, and generate personalized insights. When you use these features, the relevant input (text or photo) is sent to a trusted AI processing provider, processed in real time, and not retained by that provider after analysis. AI output is informational only and is not medical advice.

Community Feed

Posts in the community feed appear under an anonymous pseudonym — your name and email are never displayed. You can report posts or block users at any time. We moderate content and remove anything that violates our community guidelines.

Third-Party Providers

We use trusted providers for cloud hosting, authentication, subscription processing, AI analysis, and transactional email. These providers process data only on our instructions and under data-processing agreements. A current list of sub-processors is available on request at contact@renya.com.

Data Security

We use industry-standard encryption, access controls, and regular security reviews to protect your data. No system is perfectly secure, but we will notify you and the relevant authority promptly if a breach affects your personal data.

Data Retention

We keep your data for as long as your account is active. When you delete your account, we delete your personal and health data, except where we are required to retain certain records (e.g. tax documents for purchases) by law.

You can delete your account at any time in Profile → Account Settings → Delete Account, or by emailing contact@renya.com.

Your Rights

Under GDPR and similar laws, you have the right to:

• Access your data
• Correct inaccurate data
• Delete your account and data
• Export your data
• Restrict or object to certain processing
• Withdraw consent at any time
• Lodge a complaint with your data protection authority (in Estonia: Andmekaitse Inspektsioon, aki.ee)

To exercise any of these rights, contact contact@renya.com. We respond within 30 days.

Children

Renya is not intended for users under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with data, contact us and we will delete it.

International Transfers

Where data is processed outside the EU, we rely on Standard Contractual Clauses and equivalent safeguards approved under GDPR.

Cookies

The Renya mobile app does not use tracking cookies or advertising identifiers. Our website uses essential cookies only.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated in-app or by email, and the "Last updated" date above will reflect the change.

Contact