Hooli is a mobile app and this website, gethooli.app. This page says what each of them knows about you, where it goes, and how to have it deleted. In short: your health profile and your scans stay on your phone, the app has no accounts, and this site sets no cookies.
Who is responsible
Hooli is responsible for the personal data described on this page. For anything about it, write to hello@gethooli.app.
What stays on your phone
The app has no accounts. What you tell it and what you scan is kept in the app's own storage on your phone, and is never sent to us:
- the situations and medicines you choose, your language and your settings;
- the products you scan, the ones you add to your home, and the photos you take of them;
- the scores, which the app works out on the phone.
To delete all of it, open your profile in the app and choose Delete everything on this phone, or delete the app.
When you photograph a product
To read a product's photo, the app sends the photo and the app's language to our server. The server passes the photo to Claude, an AI made by Anthropic, which reads the ingredients, and sends back what it found. Nothing else goes with it: not your profile, not your scans. We don't keep the photo once it has been read. We do this because you ask the app to read the photo.
Anthropic handles the photo for us under its commercial terms, which don't let it train its models on what we send. It may keep it for a short time for safety checks, as those terms set out. Photograph the product only, not people or documents.
When the app reads a photo on the phone instead, in the Ingredients mode, nothing is sent at all.
When you scan a barcode
The app looks the barcode up itself, in Open Food Facts, Open Beauty Facts and Open Products Facts: open databases run by the non-profit Open Food Facts. It sends them the barcode and, to find swaps sold where you live, your phone's country. Their privacy policy applies to those requests. Our server isn't involved.
Updates and reminders
The app downloads the list of changes to EU rules from our server, and checks your products against it on the phone. The daily tip, if you turn it on, is scheduled by the phone itself: no notification token is sent to anyone.
Hooli Plus
If you subscribe to Hooli Plus, Apple handles the payment, and we never see your card. The app uses RevenueCat to know whether you have Plus: RevenueCat receives a random identifier the app creates and the purchase records from Apple, never your health profile or your scans.
No analytics, no ads
The app has no analytics, no advertising and no tracking. This site sets no cookies and loads no trackers.
The waitlist on this site
If you join the waitlist, we keep your email address, the site's language, your situation if you choose one, and the campaign of the link you came from, if any. Your situation is health information: it is optional, and we keep it only because you choose to give it.
We use them to write to you the day Hooli opens, and to decide what to build first, on the basis of your consent. We never share or sell them, and we keep them until you ask us to delete them. To be removed, write to hello@gethooli.app.
Server records
Like any website, our server notes the requests it receives, with their IP address and time, to keep the site and the app's service running and to stop abuse, such as too many requests from one address. That is our legitimate interest, and these records are kept only as long as it needs.
Who else receives data
- Anthropic: the photos the app sends to be read.
- Open Food Facts: the barcodes and the country the app sends from your phone.
- Apple and RevenueCat, if you subscribe to Hooli Plus.
- The company that hosts our server.
No one else. Anthropic and RevenueCat are in the United States: what they receive is covered by the safeguards the GDPR requires, such as the European Commission's standard contractual clauses.
Your rights
You can ask us to show you, correct or delete the data we hold about you, to stop using it, or to send it to you, and you can withdraw your consent at any time. Write to hello@gethooli.app. Most of what Hooli knows about you is on your phone, where you can delete it yourself.
You can also complain to a data protection authority. In Estonia, it is the Andmekaitse Inspektsioon.
Children
Hooli is made for adults. We don't knowingly collect anything from children.
Changes
When this policy changes, we update this page and the date at the top.