Last updated: August 19, 2026

 

This Privacy Policy describes how Avocado (the "App") collects, uses, and protects the personal data of users who utilize the Avocado mobile application and related services (the "App" or the "Service"), in compliance with Regulation (EU) 2016/679 (GDPR).

 

1. Data Controller

 

The Data Controller is Marco De Benedictis, who can be contacted at the email address: This email address is being protected from spambots. You need JavaScript enabled to view it..

 

For any requests regarding your personal data (access, rectification, deletion, objection, or other rights provided by the GDPR), you may write to this address.

 

2. Data We Collect

 

2.1 Account and authentication data

• Email and password (the password is stored in encrypted form, never in plain text) upon registration;

 

• Optionally, full name;

 

• App language/locale, to provide content in the correct language;

 

• As an alternative to email registration, you can log in via Google Sign-In (OAuth authentication managed by Google);

 

• Optionally, a profile photo uploaded by the user;

 

• Technical information regarding the devices used for access (device type, platform) necessary for secure session management.

2.2 "Guest" mode

 

You can use certain basic features of the App (such as analyzing a meal via photo or text) without creating an account, through a temporary anonymous session linked to the device. If you decide to register later, you can link the results obtained in guest mode to your new account.

 

2.3 Health and physical activity data

 

If you explicitly authorize it via operating system permissions (Apple Health / Health Connect), the App can read (never write or modify) the following data from your device's health platform:

• Weight and height;

 

• Daily steps;

 

• Active and basal calories (resting metabolism);

 

• Duration and type of physical activity/workouts;

 

• Gender and age/date of birth (iOS only).

This data is used exclusively to personalize your nutritional goals and show you your progress. You can revoke authorization at any time via your device settings.

 

2.4 Dietary data and nutritional diary

• Meal photos that you take or upload for automatic nutritional analysis;

 

• Text descriptions of meals entered manually;

 

• Voice recordings, if you use the voice input feature: the audio is sent for automatic transcription and deleted from the device immediately after processing;

 

• Nutritional estimates generated by artificial intelligence (calories, protein, fat, carbohydrates, fiber, ingredients);

 

• Nutritional targets and goals that you set or that are calculated for you;

 

• Pantry data, if you use this feature, including any product photos.

2.5 Conversational assistant (AI chat)

 

If you use the virtual assistant chat feature, the messages you send are processed to generate a response for you. The conversation history is managed primarily on your device; Our servers do not permanently store the content of conversations beyond the time required to generate the response.

 

3. How we use your data

 

We use the collected data for the following purposes:

• Provide and improve the App's features (food diary, meal analysis, progress tracking);

 

• Generate, using artificial intelligence, nutritional estimates and assessments regarding the consistency between your diet, weight, and stated goals;

 

• Manage your account, authentication, and session security;

 

• Respond to your inquiries via the conversational assistant;

 

• Send you essential technical communications (e.g., password resets).

Assessments and scores generated by artificial intelligence are for informational and motivational purposes only: they do not constitute a medical diagnosis, professional health advice, or a clinical opinion under any circumstances. Always consult a doctor or qualified professional regarding any decisions concerning your health.

 

4. Legal basis for processing

 

We process your data based on:

• Performance of a contract, to provide the App features you request;

 

• Explicit consent, for the processing of special categories of data (health data, medical documents), which may be withdrawn at any time;

 

• Legitimate interest, for service security and the prevention of abuse.

5. Data sharing with third parties

 

We do not sell or transfer your personal data to third parties for marketing purposes. Your data may only be shared with:

• OpenAI (a US-based artificial intelligence service provider), to which necessary data (e.g., meal photos, text descriptions, nutritional data, chat messages) is sent in order to generate the App's analyses and automated responses.

AI model call logs stored on our servers do not include the content of prompts, but only anonymized technical metadata (cryptographic hashes, timestamps, request type);

• Google, if you choose to log in via Google Sign-In;

 

• Technical infrastructure providers (hosting, storage) that process data exclusively on our behalf and in accordance with our instructions.

Since some of these providers operate outside the European Union (e.g., the United States), data transfer takes place based on appropriate safeguards provided for by the GDPR, such as the Standard Contractual Clauses adopted by the European Commission.

 

6. Data retention

 

We retain your personal data for as long as necessary to provide the Service—that is, for as long as you maintain an active account. You may request the complete and permanent deletion of your account and all associated data at any time directly from the App (Profile section). Deletion is irreversible and entails the removal of your food diary, medical documents, pantry data, sessions, and linked credentials.

 

7. Data security

 

We implement appropriate technical and organizational measures to protect your data, including: encrypted connections (HTTPS/TLS) between the App and servers, storage of login credentials in protected areas of the device's operating system (keychain/keystore), and storage of passwords in encrypted form. However, no system is 100% secure; we encourage you to keep the App updated and not to share your credentials with third parties.

 

8. Your rights

 

As a data subject, you have the right to:

• Access your personal data and obtain a copy of it;

 

• Rectify inaccurate or incomplete data;

 

• Delete your data (right to be forgotten), including independently via the App;

 

• Restrict or object to the processing in certain circumstances;

 

• Obtain the portability of your data in a structured format by writing to us at the address indicated in point 1;

 

• Withdraw consent at any time for processing based on consent (e.g., health data, medical documents), without affecting the lawfulness of processing carried out prior to the withdrawal;

 

• Lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali - www.garanteprivacy.it) if you believe that the processing violates applicable regulations.

9. Minors

 

The Service is not intended for minors under the age of 16. If you are a parent or guardian and believe that a minor has provided us with personal data without your consent, please contact us to request its removal.

 

10. Changes to this Policy

 

We reserve the right to update this Policy periodically. In the event of material changes, we will notify you via the App or other appropriate channels. The date of the last update is indicated at the top of the document.

 

11. Contact Information

 

For any questions regarding this Privacy Policy or the processing of your personal data, please write to: This email address is being protected from spambots. You need JavaScript enabled to view it..