Privacy policy
What data CandyFit collects, why, where it is stored and how to delete it. In short: without an account everything stays on your phone.
Who is responsible
Data controller: Korolov Oleksii (autónomo, trading as Candy Fit), Calle de Santiago López 31, 16004 Cuenca, Spain, tax ID Y9854812Q (NIE). Privacy contact: legal@azulands.com.
This policy covers the candyfit.me website and the app at candyfit.me/app ("CandyFit"). Version of 2 October 2026.
Without an account
The magazine and the app work without signing up. Your questionnaire, plan, workout, food and habit check-ins, weight and badges are stored only in your browser on your device (localStorage). We do not receive them. You can delete them with "Start over" in the app or by clearing the site data in your browser.
The site uses no advertising or analytics cookies or trackers; the technical cookies and browser storage it does use are listed in the cookie policy. Like any web server, ours sees your IP address and technical request data; server logs are kept briefly and used only to run and protect the site.
With an account
If you create an account ("Save your progress"), we process:
| Data | Why | Legal basis |
|---|---|---|
| Email or Google / Apple sign-in identifier | Signing in, emails with your sign-in code | Performance of the contract |
| Progress: questionnaire without weight and height, plan, workout, food and habit check-ins, streak, badges | Moving your progress between devices | Your explicit consent when creating the account |
| Weight, height, target weight and weight history | Only if you switched on "Store weight and measurements on the server" | Separate explicit consent |
| Plan and access period, payment history (once payments launch) | Access to paid weeks, accounting | Contract, tax obligations |
| Checkout consent records: time, IP address, plan, terms version and consent text | Proof of the order and of consent to immediate access, including in payment disputes | Contract, legitimate interest |
| Session cookie (httpOnly, for /api/ only) and a technical sign-in log | Keeping you signed in, protection against abuse | Legitimate interest, contract |
Workout and food check-ins, and weight in particular, may be considered health data. That is why weight and measurements stay on your phone by default, and the rest of your progress is stored only with your consent. You can withdraw consent at any time: switch off weight sync (it is deleted from the server immediately) or delete your account.
We do not sell your data, do not use it for advertising and do not make automated decisions with legal effects based on it. A CandyFit account is not linked to Telegram or other services: if you open our Telegram bot, Telegram processes data under its own rules.
Processors
- Hetzner Online GmbH (Germany): the server running the site, the app and the account database. Data is stored in the EU.
- Email delivery service (named here once email sign-in is switched on): sign-in code emails; receives only the address and the message.
- Google: only if you sign in with Google; sign-in happens on Google's page and no Google scripts are loaded on candyfit.me. The site fonts are served from our own server.
- Apple: only if you sign in with Apple.
- Cloudflare: DNS for candyfit.me.
- Stripe Payments Europe, Ltd. (Ireland): card payments, VAT calculation, subscriptions. Only Stripe receives your card details; we never see or store them.
- Telegram: if you pay with Telegram Stars, Telegram processes the payment; we only receive the payment confirmation.
If data is transferred outside the EU (for example to Google or Apple in the US), this happens under an adequacy decision (EU–US Data Privacy Framework) or the EU standard contractual clauses.
Retention
- Account and progress: until you delete your account.
- Sign-in codes: no longer than one day, stored as a hash.
- Sign-in session: up to 180 days or until you sign out.
- Database backups: for a limited time, then overwritten.
- Payment and tax records: 10 years from the end of the year of the transaction (tax records, including OSS), even after the account is deleted, without your progress.
- Checkout consent records: together with payment records; if no payment was made, they are deleted with the account.
Your rights
You can get a copy of your data ("Download my data" in the app, Profile tab), correct it, delete your account with all data ("Delete account"), restrict or object to processing, withdraw consent and port your data to another service. For any of this write to legal@azulands.com; we answer within one month.
You also have the right to lodge a complaint with the data protection authority in the country where you live or work; in Spain this is the Agencia Española de Protección de Datos (aepd.es).
Age
CandyFit is meant for people aged 16 and over. If you are younger, please do not create an account.
Changes
If we change this policy materially, we will tell you in the app or by email before the change takes effect.