The website counts visits without cookies and keeps your email address only if you email us, for example to join the waiting list. The app has no account, and what you log in it stays on your iPhone and in your own iCloud, never with us. If you turn them on, the app shares usage data and a rounded summary of how each phase went.
Who is responsible
Fazon is made by My Next Studio, a sole trader (enskild firma) in Sweden owned by Lars Bruce. In this notice, "we" means that business.
We are the controller: the one responsible for your personal data under the GDPR. For anything about your data, write to privacy@fazon.app. Our other details are on the company information page.
This website
This website sets no cookies and loads no scripts, fonts or images from anyone else. We count visits without cookies and without storing anything on your device. Our server sends OpenPanel the page path (registered pages only, otherwise one unknown bucket), language, the referring website's domain only, approved campaign tags and whether the page was not found. It also passes your IP address and browser details so OpenPanel can derive country, the kind of device, visitors and sessions. We store none of these counting details ourselves, and we exclude known bots.
OpenPanel uses your IP address only for a moment, to work out roughly where you are and a visitor code, then discards it. OpenPanel does not store your IP address. The visitor code is a one-way hash of your IP address, your browser details and our project, and it changes every day, so a visit today can't be linked to a visit tomorrow. The code doesn't tell us who you are.
When you answer "Was this helpful?" on a help page, our server sends OpenPanel the page, its language and your answer, nothing else. It does not pass on your IP address or browser details, so your answer isn't linked to the visitor code. We use your IP address for a moment to stop the form being flooded, then discard it.
OpenPanel processes the counting on our behalf as our processor, under a data processing agreement (GDPR Art. 28). It stores the data on Hetzner servers in Germany, with backups in the EU, so in normal operation the data does not leave the EEA. The OpenPanel sub-processors that handle it are Hetzner (Germany) and Cloudflare (EU edge network and backup storage); where Cloudflare carries traffic through the United States, the EU Standard Contractual Clauses apply. OpenPanel keeps the data while our account is active, and we delete it at least once a year.
The site is hosted by Cloudflare, which processes requests on our behalf. Like any web host, Cloudflare sees your IP address and the standard details your browser sends when it asks for a page. We keep no logs of those requests. Cloudflare is based in the United States; the transfer is covered by the EU-US Data Privacy Framework, under which Cloudflare is certified, and by the EU Standard Contractual Clauses in Cloudflare's data processing addendum.
The waiting list
To join the waiting list, you send an email to hello@fazon.app. We keep your email address, your message and the language you wrote in, as an email in our own mailbox. Google (Google Workspace) stores it on our behalf as our processor, on the terms described under "Email you send us".
We use it only to write to you when the beta opens and when Fazon is on the App Store. After that, we delete your email. If Fazon isn't on the App Store by 31 December 2027, or work on it stops sooner, we delete every waiting-list email, address and message, then. This replaces the usual time limit under "Email you send us".
Joining is voluntary. If you don't join, the only difference is that you don't get those two emails. The legal basis is your consent. You can withdraw it at any time, and have your email deleted sooner, by writing to privacy@fazon.app or hello@fazon.app, or by replying to any email of ours about the waiting list. Withdrawing doesn't affect what we did before you withdrew.
There is no sign-up form. The website never receives your address, and no IP address and no Cloudflare email service are used for the waiting list. Your email reaches us the way any email does.
What the app stores
Fazon has no account and no server of its own for what you log (food, weight, measurements, your phases and check-ins). It is stored on your iPhone and, when iCloud is on for Fazon, in your own private iCloud, so it can reach your other iPhone signed in to the same iCloud. In iCloud, what you log is end-to-end encrypted, so Apple can't read it. Apple sees only technical details, such as when records change and how many there are. What you log is never sent to us, and we have no copy. If you choose to share usage data or phase outcomes, the app sends what is described under "Usage data from the app" and "Phase outcomes from the app", never the entries themselves.
Your data is also included in your own iPhone backup, in iCloud or on your computer, depending on your Apple settings. Apple holds iCloud data and backups under Apple's terms.
Deleting the app removes your data from that iPhone, but not from iCloud or your backups. To delete it, use Delete all data in Fazon's Settings. It deletes your data from this iPhone and from iCloud, and your other devices remove it the next time they open Fazon online. If the app closes before it has finished on this iPhone, it finishes the next time you open Fazon. What Fazon wrote to Apple Health stays there (see "Apple Health"), and backups keep your data until you remove them. We never had a copy, so there is nothing for us to delete.
The coaching runs on your iPhone. We make no automated decisions about you that have legal or similarly significant effects.
Apple Health
Fazon reads from and writes to Apple Health only with your permission, and only the kinds of data you allow. You can change that in the Health app at any time.
What Fazon writes to Health becomes part of your Health data. It syncs through your iCloud if you have turned that on for Health, and it stays in Health after you delete Fazon. Your Apple settings decide what happens to it.
What the app downloads
The app downloads two things: the food database, from catalogue.mynextstudio.com, and signed coaching rules and content, from config.mynextstudio.com. My Next Studio, the studio behind Fazon, runs both on Cloudflare.
These downloads carry nothing you have logged and no identifier. Like any server, they see your IP address and the standard details your iPhone sends when it connects. We keep no logs of those requests.
Exports you make
When you export your food log as CSV or PDF, or all your data with Export all data, the file goes wherever you send it from the share sheet. From there, the app or service you send it to handles it.
Purchases and Apple's services
You buy an Active Phase through Apple. Apple handles the payment, and we never see your card or payment details.
If you choose to share crash reports and diagnostics with app developers in your iPhone settings, Apple passes them on to us. Apple also gives us App Analytics: usage figures for Fazon as a whole, not about you. Apple collects both under Apple's privacy policy.
Usage data from the app
The app shares usage data only if you choose "Share usage data", on the card shown the first time you open the app or in Settings → Privacy & Data. Until you do, nothing for usage data is stored on your iPhone and nothing is sent. One choice covers all of it, including the reasons you pick when you start an Active Phase. When you share usage data, the app sends information of these kinds:
- How you use the app: which screens you open and what you do, such as logging a weight or a meal, and how you logged it (by hand, from Apple Health or by scanning a barcode). Never what you logged.
- Your Active Phases: the phase you chose (Reset, Core or Transformation) and your pace, whether it is your first, second or a later phase, roughly how long since your last one ended, and the reasons you picked when you started it. Never GLP-1 medication.
- The coach: whether a check-in changed your targets or kept them, and which of the coach's suggestions you tapped.
- Technical details: the app version, and whether you installed it from the App Store or TestFlight.
- Phase outcomes: only if you turn them on separately, as described under "Phase outcomes from the app".
We describe kinds rather than every single event, and we change this notice when the app starts sending a new kind.
What the app never sends
Whatever you choose, the app never sends your individual measurements or log entries (weights, waist, food, calories, nutrients, step counts), anything you type, your name or email address, records read from Apple Health, or anything about GLP-1 medication.
The one exception is phase outcomes. If you turn them on, the app sends a few rounded figures worked out from your measurements, such as your weight change over a phase rounded to 0.5 kg, never the measurements themselves (see "Phase outcomes from the app").
How usage data is handled
Usage data is linked by a random code for your install of the app, the install id. The app creates it only after you say yes, replaces it every 30 days, and deletes it when you turn sharing off or delete the app. It is not linked to your Apple Account, your name or your email address.
The app sends each event straight to OpenPanel, the processor that counts visits to this website, under the same agreement and on the same servers in Germany (see "This website"). OpenPanel receives your iPhone's IP address with each event. It uses it to work out an approximate location (country, region and city), then discards it. The app sends no device model or iOS version.
Usage data is pseudonymous, not anonymous. It carries no name, but every event carries the install id, so the events from one iPhone can be linked to each other for up to 30 days, and OpenPanel sees the IP address they came from.
The legal basis is your consent (GDPR Art. 6(1)(a)). Because the data comes from an app about weight, it can say something about your health, so we ask for your explicit consent (Art. 9(2)(a)). Storing the install id on your iPhone also needs your consent under the Swedish Electronic Communications Act (LEK, chapter 9, section 28).
You can stop at any time: turn off "Share usage data" in Settings → Privacy & Data. Sharing stops at once, and the install id and anything not yet sent are deleted from your iPhone. Events already sent stay with OpenPanel until the yearly clean-up, because without the id we can't tell which ones were yours. Turning usage data off also turns phase outcomes off.
OpenPanel keeps usage data while our account is active, and we delete it at least once a year. Deleting the app does not remove events already sent.
Builds we use for development and internal testing send usage data to the same place, marked as development so it can be kept apart.
Phase outcomes from the app
Phase outcomes are optional and off by default. If you turn on "Share the outcome of my Active Phases" in Settings → Privacy & Data, Fazon sends one record when each later Active Phase ends: the phase type, the pace you chose, the reasons you picked (never GLP-1 medication), your weight change over the phase rounded to 0.5 kg, and how often you reached your daily step goal, in 10% ranges. A record never holds your weight itself, dates or day-by-day data. No phase with GLP-1 medication among the reasons you picked is ever sent.
We use these records only in aggregate, to back results we publish (always from at least 50 phases) and for our own product decisions. They are health data, so we ask for your explicit consent (GDPR Art. 9(2)(a)). They travel with the same rotating install id as usage data, and OpenPanel sees your IP address (the app sends no device model or iOS version), so they are pseudonymous, not anonymous.
This setting needs "Share usage data" to be on. If you turn usage data off, this turns off too and stays off until you turn it on again yourself. Turning either off stops future records; records already sent are kept until the yearly clean-up, because we cannot link them back to you.
Email you send us
When you write to one of our fazon.app addresses, we keep your address and your message so we can answer. The legal basis is our legitimate interest in answering you, or our legal obligation when you are using one of your rights. We keep the messages until the matter is closed, then for 12 months, or 3 years for a request about your rights. Mail to these addresses is stored by Google (Google Workspace) as our processor. Google may process it in the United States; the transfer is covered by the EU-US Data Privacy Framework, under which Google is certified, and by the EU Standard Contractual Clauses in Google's data processing terms.
Legal basis and how long we keep data
Each use of personal data has its own legal basis and its own time limit.
| What for | Legal basis | How long |
|---|---|---|
| The waiting list (the beta and launch emails) | Your consent (Art. 6(1)(a)) | Until we write to you when Fazon is on the App Store, then deleted. Deleted by 31 December 2027 if Fazon isn't on the App Store by then, or sooner if work on it stops or you ask. This replaces the time limit for answering your email. |
| Keeping the help pages' feedback form from being flooded | Our legitimate interest (Art. 6(1)(f)) | Not stored |
| Serving this website and the app's downloads | Our legitimate interest (Art. 6(1)(f)) | Not stored by us |
| Counting visits on this website | Our legitimate interest in knowing which pages and sources bring people to Fazon (Art. 6(1)(f)) | OpenPanel keeps it while our account is active, and we delete it at least once a year. We store nothing. |
| Usage data from the app | Your explicit consent (Art. 6(1)(a) and 9(2)(a)); for the install id on your iPhone, your consent under LEK 9 kap. 28 § | OpenPanel keeps it while our account is active, and we delete it at least once a year. Turning sharing off deletes the install id and anything not yet sent. |
| Phase outcomes from the app | Your explicit consent (Art. 6(1)(a) and 9(2)(a)) | As usage data: kept while our account is active, and deleted at least once a year. |
| Answering your email | Our legitimate interest (Art. 6(1)(f)); for rights requests, our legal obligation (Art. 6(1)(c)) | Until the matter is closed, then 12 months (3 years for rights requests) |
| What you log in the app | We never receive the entries. Phase outcomes, if you turn them on, are rounded figures worked out from them (see "Phase outcomes from the app"). | You decide: it stays on your iPhone and in your own iCloud until you delete it in the app (see "What the app stores") |
Your rights
You have the right to:
- see the personal data we hold about you; - have it corrected; - have it deleted; - have its use restricted; - get it in a format you can take elsewhere; - object to uses based on our legitimate interest; - withdraw your consent at any time.
Write to privacy@fazon.app and we answer within one month. For the waiting list, you can also write to hello@fazon.app or reply to any email of ours about it. For the app, what you log is on your iPhone and, when iCloud is on for Fazon, in your own iCloud, so you can export it or delete it yourself.
If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection, IMY.
For usage data and phase outcomes, we can find your events only by the install id, which stays on your iPhone and is deleted when you turn sharing off. Without it we can't tell which events already sent were yours, so we can't show, correct or delete them (GDPR Art. 11); they are removed in the yearly clean-up. You can withdraw your consent at once by turning sharing off in Settings → Privacy & Data.
You can object to the counting at any time by writing to privacy@fazon.app. Because we keep no visitor identifier, we cannot find your earlier visits. Your browser's Global Privacy Control or Do Not Track signal is respected; requests that send either are not counted.
- See the personal data we hold about you
- Have it corrected
- Have it deleted
- Have its use restricted
- Get it in a format you can take elsewhere
- Object to uses based on our legitimate interest
- Withdraw your consent at any time
Changes and language
When we change how we handle personal data, we update this notice in the same release and change the date at the top of the page.
This notice is written in English and Swedish, and both versions are equally valid. If they ever differ, the reading more favourable to you applies.