AGO2NOW app privacy policy
Updated November 5, 2026. This policy covers the local journal, optional AI features and subscription verification.
Controller and contact
Sébastien Ricard, individual publisher, 1 rue de Montebello, 95630 Mériel, France. Contact: sricard@hotmail.fr. AGO2NOW is a personal journal for adults. It does not sell your data or include targeted advertising or advertising tracking.
Your journal stays on your iPhone
Your answers, habits, weight, height, goals, meals and selfies are stored in the app’s private space. Photo files are excluded from app backups. No publisher account synchronizes your journal. Exports happen only at your request; your chosen destination has its own rules. Meal drafts and dated calorie guide versions remain on your iPhone. A draft stays until you save or explicitly discard it. The guide is optional, based on confirmed information and does not prescribe a diet. Structured nutrition exports include the components, unknown values, quantities, references and historical guides you choose to share. Confirmed guide inputs (age, weight, height and activity) are also included if you share this export. Other Apple Health measurements are not exported.
Anonymous journey measurement and Apple Ads
Since version 1.1.3, the app counts six milestones, each at most once per installation: first launch, questionnaire completed, offer shown, trial confirmed, first day saved, first payment. Only the milestone name, the app version, its build number and its source (App Store or test version) are sent to the AGO2NOW server, with no identifier, no answers, no photos and no health data. These counts are used only to improve the app; they are neither shared nor used for advertising. If the app was installed after an Apple Ads ad, it reads Apple’s attribution token, without tracking permission or device identifier; the campaign, ad group and keyword provided by Apple are sent to the server when a trial or subscription starts, with no identifier.
Apple Health and permissions
Authorized Apple Health measurements are read for local display only. They are not sent to AGO2NOW servers or OpenAI and are excluded from text exports. The app does not write to Apple Health. The camera and photo picker are used for images you choose. You can revoke permissions in iOS. Face ID or Touch ID supplies an authentication result, not biometric data. Reminders are local.
Food product scanning
Barcode reading happens on your device. Lookup sends the code to Open Food Facts, which also receives technical connection information including your IP address. No photos, health data or diary contents are sent. Recent product records are kept locally, separate from your diary, and removed by “Delete all my data”. Open Food Facts data is under ODbL and contents under DbCL. Ciqual name search is local and sends no search terms. Source: ANSES. 2025. Ciqual food composition table, Etalab Open License 2.0, https://doi.org/10.57745/RDMHWY.
AI portraits: a separate choice
After you consent, your selected selfie and a style instruction are sent over HTTPS to the AGO2NOW server and then OpenAI. Weight, height, numerical goals and Apple Health data are not sent. Illustrations do not predict your health or future appearance. Temporary server files expire after 24 hours; cleanup runs while the service operates. Cancellation also requests deletion of remote images. Technical creation records and used allowances are separate from photo files. Facial landmarks, including the eyes, are used only to crop and align images, not to identify a person. When foods are already counted, their names and quantities are also sent to exclude them from the photo. Neither your calorie profile nor past meals are sent. Technical receipts can include token usage, the provider response identifier and a calculated cost distinct from the invoice, without food descriptions.
Optional meal analysis
With your permission, the photo and your notes are sent to the server and OpenAI. Avoid including people, documents or medical information. The server processes the photo in memory. Results contain uncertain food, portion and calorie estimates, not measurements or prescriptions. Review and correct them before saving locally. The remote result is deleted at the app’s request or expires after 24 hours. A pseudonymous technical receipt, without the photo or meal description, may remain for 90 days to prevent duplicate calls. A technical fingerprint is not guaranteed anonymization.
Subscriptions and technical data
Apple handles payments; we do not receive your bank card details. The server verifies the signed proof and subscription status with Apple. It retains the original transaction ID, environment, expiry, a pseudonymous identifier and used AI allowances. The signed proof itself is not retained and purchase identifiers are not sent to OpenAI. These data and creation records support restoration, quotas and abuse prevention. Deleting the local journal does not automatically erase them: contact us to request deletion. Deleting the app does not cancel a subscription; manage it in Apple settings.
Why we process data
Optional AI transfers rely on your consent, explicit where they reveal health information. You may refuse or withdraw consent without losing the local journal. Withdrawal prevents new transfers but does not undo prior processing. Purchase verification provides the requested service. Protecting the service and preventing duplicate calls and abuse rely on our legitimate interest in security.
Providers and international processing
The publisher operates the service on a server in France; Tailscale provides public HTTPS access. The website is hosted by OVH SAS, 2 rue Kellermann, 59100 Roubaix, France. OpenAI processes requested AI tasks to deliver the service. Its security rules may require additional retention, including abuse-monitoring logs for up to 30 days, subject to legal or security exceptions. API data is not used to train models by default. Some processing may take place outside the European Economic Area. OpenAI’s DPA provides standard contractual clauses or adequacy decisions for relevant transfers. Exclusively European residency and zero provider retention are not promised.
Retention and deletion requests
Your local journal remains until you delete it. Temporary photo and result periods are stated above. Entitlement identifiers and security records are retained to maintain access and prevent quota resets; request their deletion from the publisher, which may affect technical restoration of these rights. We assess deletion requests and explain any data needed for a legal obligation or dispute. Support correspondence is retained for up to 12 months after closure unless required for a legal obligation or dispute. Never email passwords, API keys or selfies. Expired creation records and associated cost reservations are deleted after 90 days, unless a newer reservation remains. Entitlement identifiers are deleted 90 days after expiry once their associated jobs have been purged. Operator backups must follow the same deadlines.
Technical backups
An hourly backup retains only metadata needed for entitlements, quotas, costs and technical operations: it contains no photos or detailed meal results. Managed copies rotate over a 24-hour window. An older copy is removed only after a recent copy has been verified, so an outage may delay removal. Accepted erasure requests are applied before any restoration. These backups do not sync your journal and cannot recover your photos.
Your rights
Subject to applicable conditions, request access, correction, erasure, restriction, objection or portability at sricard@hotmail.fr, and withdraw consent. You may complain to the CNIL or your local authority. Proportionate verification of your request may be needed. Policy updates appear here; new uses requiring consent will be presented before activation.
Health limitations
AGO2NOW is not a medical device. Illustrations and nutritional estimates are not suitable for diagnosis, allergies or insulin dosing. Seek medical advice before abruptly stopping alcohol if you may be dependent.
Scanning food products
Barcodes are read on your device. Lookup sends only the barcode to Open Food Facts, which also receives connection information, including your IP address. No photo, health data or diary content is sent. Recent records are stored locally, separately from the diary, refreshed after seven days and removed with Delete all my data. Open Food Facts data is under ODbL, contents under DbCL. Ciqual searches are local and send no search terms. Source: Anses. 2025. Ciqual food composition table, Etalab Open Licence 2.0, https://doi.org/10.57745/RDMHWY.