Privacy in Dagens Rätt

Who is responsible

The data controller is Per Andersson, who develops Dagens Rätt. Send any questions about your data to kontakt@dagensratt.se.

What the app stores

Dagens Rätt is an app for keeping a food diary and tracking weight and training. To work, it stores:

• Profile: name, year of birth, sex, height, weight and activity level – to calculate your daily requirement.
• Food diary: what you have eaten, the amount and the time, with nutritional values.
• Weight and goals: weigh-ins and your weight goal.
• Training: activities, workouts and step counts.
• Recipes and your own foods that you create or import.

Data about weight, diet and training is health data. That is why, by default, it is stored only on your own device and is not sent anywhere unless you turn that on.

The app is made for adults. If you set up a profile for a child in a household account, you as the parent or guardian are responsible for it.

What leaves your device – and when

• Sync between computer and phone at home (optional): the phone and the computer talk directly to each other over your own network, encrypted. Nothing goes via the internet.
• Cloud sync (optional, for household accounts – currently only open to invited testers): food diary, weight, training, recipes and your own foods are sent encrypted (HTTPS) to the Dagens Rätt server in Sweden, so that the household's devices can sync. To recognise the account, the server stores the account name and, for each device, a name, a hashed (unreadable) copy of the device key and which profile the device belongs to. The server also logs the IP address and time of each request for 14 days, in order to detect errors and abuse. The server is backed up every night; the backups are kept for 14 days. If you disconnect a device, it stops syncing immediately.
• The Swedish Food Agency's food database (Livsmedelsverket): when you search for foods, the app fetches nutritional values from there. Only the search is sent, no information about you.
• Open Food Facts: when you scan a barcode or search for a product, the barcode or search term is sent to the open Open Food Facts database. If you yourself log in with an Open Food Facts account to improve their data, the changes you make are sent.
• AI interpretation of recipes (off by default, requires a cloud account – currently only for invited testers): if you turn it on, the text of a recipe you paste in, photograph or fetch from a web page is sent, via the Dagens Rätt server, to Anthropic (Claude) to be interpreted. No other data is sent with it, and our server does not store the text.
• Recipes from a web page: when you fetch a recipe from a link, the phone downloads the page directly from that website, which then sees your IP address as it would on an ordinary visit.
• Google ML Kit (the phone, when you scan a barcode or photograph a nutrition table or a recipe): the reading itself is done on the phone and the image is not passed on. ML Kit does, however, send technical data to Google – phone model and Android version, the app version, a random per-installation ID and how long the reading took – encrypted and not shared further. No images, no text and nothing about what you eat.
• Update check (computer and phone): the app asks the Dagens Rätt server whether a new version is available. No personal data is sent.

What stays on the device

• The camera is only used to scan barcodes and read nutrition tables and recipes. The reading is done on the phone – the image is not passed on (for technical data from Google ML Kit, see above).
• The crash log is only stored locally, in the app's own folder. It is never sent automatically.
• Passwords and keys for sync and Open Food Facts are stored encrypted, tied to your computer or phone.

The app has no advertising and no tracking, and we do not collect any statistics about how you use it. Your data is never sold or shared with anyone for other purposes.

The website

The website does not use any tracking cookies. Like all web servers, the server stores IP addresses and times in technical logs for 14 days in order to detect errors and abuse. If you comment on the blog, the name you enter, your comment and your IP address are stored (to be able to stop spam).

Your rights

You have the right to know what data is held about you, to have it corrected, to have it erased and to receive a copy of it. Most of this you can do yourself in the app: everything is on your own device, and you can delete entries, profiles and the whole app whenever you like. If you have a cloud account, you can choose Delete my data in the cloud on the phone (see below), and on the account owner's computer choose Export account data to get everything the server holds about the account, or Delete cloud account to remove the account and all data there (Settings → Cloud, sharing & sync). The server's backups disappear within 14 days of the deletion. A device that has not been used for 12 months is disconnected automatically. You can also contact kontakt@dagensratt.se and we will help you.

If you are not satisfied with how your data is handled, you can turn to the Swedish Authority for Privacy Protection (IMY).

Delete your account and your data

Without a cloud account, all data exists only on your device. On your phone it is removed when you uninstall the app. On your computer it stays in the app's data folder (by default %LOCALAPPDATA%\DagensRatt) until you delete it.

With a cloud account, you delete the account and all data on the server like this:

1. Open Dagens Rätt on the account owner's computer.
2. Go to Settings → Cloud, sharing & sync.
3. Choose Delete cloud account and type the confirmation word shown (DELETE in the English version of the app).

The account and all synced data are removed from the server immediately, for all devices. The server's backups disappear within 14 days. The data on your own devices remains until you delete it.

From the phone. On a phone connected to a cloud account, you delete your own data directly in the app:

1. Open Dagens Rätt on the phone.
2. Go to Settings → Account and sync.
3. Choose Delete my data in the cloud and type the confirmation word shown.

Your food diary, weight and goals, profile, training and the Calm mode setting are removed from the server immediately, and the phone is disconnected from the account. The household's shared recipes and own foods remain, as they belong to the whole household. The server's backups disappear within 14 days. What is on the phone and on the account owner's computer remains until you delete it there.

Cannot access the app? Email kontakt@dagensratt.se from the address, or with the account name, that you use, and we will delete the data and confirm when it is done.