checkly ← Back to home

Privacy Policy

Last updated: 10 August 2026

1. Who we are

Checkly is operated by Nave, a business registered in the Netherlands. For the purposes of the EU General Data Protection Regulation (GDPR), we are the data controller for the personal data described in this policy.

  • Trading name: Checkly
  • Operator: Nave
  • Address: Jan Nautahof 46, Amsterdam, the Netherlands
  • Chamber of Commerce (KVK): 80502474
  • VAT (BTW-id): NL003447574B73
  • Email: info@get-checkly.com

If you have any question about this policy or about how your data is handled, contact us at the email address above. We aim to respond within 30 days, as required by the GDPR.

2. Our approach: your data stays on your device

Checkly is designed so that your personal information does not leave your phone. Your health goals, body measurements, dietary preferences, allergens, and scan history are stored locally on your device only. We do not operate user accounts, we do not run a server that stores your profile, and we cannot see your data.

This means we hold almost no personal data about you. The sections below describe the limited exceptions.

3. What data is processed, why, and on what legal basis

3.1 Profile and health preferences (stored on your device)

During onboarding you may provide your gender, height, weight, health goal, dietary restrictions, allergens, and how strict you want recommendations to be. Some of this qualifies as health data under Article 9 GDPR.

  • Purpose: to generate recommendations tailored to you.
  • Legal basis: your explicit consent (Article 9(2)(a) GDPR), given by entering the information. You can withdraw consent at any time by deleting the data in the App.
  • Storage: locally on your device. Not transmitted to us.
  • Retention: until you delete it or uninstall the App.

3.2 Camera

The App requests camera access to read barcodes. The camera feed is processed live on your device to detect a barcode number. We do not record, store, or transmit images or video.

  • Legal basis: performance of the service you requested (Article 6(1)(b) GDPR).

3.3 Barcode lookups to Open Food Facts

When you scan a product, the barcode number is sent to the Open Food Facts database to retrieve product information. Only the barcode number is sent. No profile data, health information, identifier, or account is attached to the request.

Open Food Facts is an independent open database. Their handling of the request, including any technical logs such as IP address, is governed by their own privacy policy: world.openfoodfacts.org/privacy.

  • Legal basis: performance of the service you requested (Article 6(1)(b) GDPR).

3.4 Subscriptions and payments

Subscriptions are sold and processed by Apple through the App Store. Apple handles all payment details. We never see or receive your card number, billing address, or Apple ID. We receive only an anonymous confirmation from Apple's StoreKit framework that a valid subscription exists. Apple's handling of your data is governed by the Apple Privacy Policy.

  • Legal basis: performance of a contract (Article 6(1)(b) GDPR).

3.5 Support correspondence

If you email us, we process your email address and the content of your message in order to reply.

  • Legal basis: our legitimate interest in answering support requests (Article 6(1)(f) GDPR).
  • Retention: up to 24 months after the matter is closed.

4. What we do not do

  • We do not sell your personal data. We never have and we will not.
  • We do not share your data with advertisers or data brokers.
  • We do not use third-party advertising or analytics SDKs in the App.
  • We do not track you across other apps or websites. The App does not request App Tracking Transparency permission because it performs no tracking.
  • We do not create user accounts or profiles on our servers.

5. International transfers

Because your profile stays on your device, we do not transfer it anywhere. Barcode lookups reach Open Food Facts servers, which are located in the European Union. Apple may process subscription data outside the European Economic Area under its own safeguards, including EU Standard Contractual Clauses.

6. Your rights under the GDPR

You have the right to request access to, rectification of, or erasure of your personal data; to restrict or object to processing; and to data portability. Where processing is based on consent, you may withdraw that consent at any time.

Because your profile and scan history are stored only on your device, you can exercise most of these rights directly and immediately: open the App, go to Profile, and use "Clear All Data", or delete the App. Neither action requires our involvement, and once done the data no longer exists.

For anything we do hold, such as support emails, contact info@get-checkly.com.

If you believe we have handled your data improperly, you have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the supervisory authority in your country of residence.

7. Children

Checkly is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided data through the App, contact us and we will assist in removing it, although in practice such data resides only on the child's own device and can be deleted there.

8. Security

Data stored on your device is protected by your device's own operating system security, including the passcode, biometric lock, and encryption provided by iOS. Network requests use encrypted HTTPS connections. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Automated decision-making

Checkly scores products against the preferences you set. This is an automated process, but it produces informational guidance only. It has no legal effect on you and does not significantly affect you within the meaning of Article 22 GDPR. It is not medical advice.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. Material changes will be announced in the App or on this website. Continued use after a change means you accept the updated policy.

11. Contact

Nave — Checkly
Jan Nautahof 46, Amsterdam, the Netherlands
KVK 80502474 · VAT NL003447574B73
info@get-checkly.com

© 2026 Checkly · Nave · KVK 80502474 · VAT NL003447574B73

Home Privacy Policy Terms of Service Support