Privacy policy
Last updated: 26 September 2026
Who operates AttivaGo
AttivaGo is a wellbeing and daily-life app operated from the United Kingdom and available at attivagoapp.com. We are the data controller for the personal information described in this policy. You can reach us at support@attivago.app.
Information we collect
Account information such as your name, email address and password credentials held by our authentication provider. Profile and preference information such as country, city, language, dietary preferences, allergies and intolerances. App usage data such as pages and features you open. Device and technical information such as browser type, operating system, approximate location derived from your IP address and anonymous identifiers. Health-adjacent information you choose to enter, including food and meal entries, hydration, activity minutes, sleep and wellbeing check-ins. Support messages you send us.
Connected phone activity
In a compatible native app, only after you choose to connect and grant device permissions, we read daily step totals, distance, active calories and exercise time from Apple Health or Android Health Connect. We store daily totals, your device platform and the last sync time in your private account; not raw sensor samples, sleep or heart rate. These totals support personal activity, steps, streaks and challenges. Any phone-derived AttivaPoints estimate is not a redeemable balance. Leaderboard positions and other figures labelled Demo data are examples, not a comparison of real users. The website cannot read phone health data. Disconnecting removes the connection and saved daily totals from your account; you can also revoke device permission in your phone settings. Your phone's original health records remain on your phone. We do not share this health data with advertisers or analytics.
How we use your information
To create and secure your account, to provide the features you use, to personalise meal ideas and local content to your country and language, to send the reminders you enable, to process subscription payments, to respond to support requests, to keep the service safe and to understand and improve how the website and app are used.
Legal bases for processing
Contract: providing the account and features you ask for. Consent: analytics cookies, push notifications and any information you voluntarily enter about food, hydration, activity and wellbeing; you can withdraw consent at any time. Legitimate interests: keeping the service secure, preventing abuse and improving the product. Legal obligation: keeping records required by law, including tax and accounting records.
Google Analytics
We use Google Analytics 4 (measurement ID G-JQ0FJSMWUX) to understand traffic and usage of our public website. Analytics only runs after you accept analytics cookies. We use Google Consent Mode, so analytics and advertising storage are denied by default. Google processes this data as our service provider and may transfer it outside the UK.
Cookies and similar technologies
We use essential cookies and local storage to keep you signed in, remember your language and store your cookie choice, plus optional analytics cookies. Marketing cookies are disabled by default. Full details are in our Cookie Policy, and you can change your choice at any time using 'Cookie Settings' in the footer.
Third-party service providers
We share personal information only with providers who process it on our behalf: our cloud hosting and database platform, our authentication provider, Stripe for subscription payments, Google Analytics for website measurement, Google Firebase for push notifications and AI providers that generate meal suggestions from the preferences you set. We do not sell your personal information.
Data retention
We keep your account and the information in it for as long as your account is active. If you delete your account, personal data is deleted or anonymised within 30 days, except where we must keep records longer for legal, tax or fraud-prevention reasons. Analytics data is retained for up to 14 months.
Data security
Data is transmitted over encrypted connections and stored with access controls, so that one account can never read another account's data. Passwords are stored as hashes by our authentication provider. No system can be guaranteed completely secure, but we review our safeguards regularly.
International data transfers
Some of our providers process data outside the United Kingdom, including in the European Economic Area and the United States. Where that happens we rely on UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses to protect your information.
Device permissions
Camera, location and notification permissions are requested only when you open the feature that needs them. A compatible native app requests phone health read access only when you choose Connect my phone; refusing it does not block the rest of the app.
Your privacy rights
You have the right to access your data, to correct it, to have it deleted, to restrict or object to processing, to data portability and to withdraw consent at any time without affecting processing already carried out. You can export or delete your data from the Profile screen, or contact us and we will respond within one month.
Complaints
If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, by phone on 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would appreciate the chance to resolve it with you first.
Children
AttivaGo is not intended for children under 13. We do not knowingly collect personal information from children, and we delete such data if we become aware of it.
Changes and contact
We may update this policy and will change the date at the top when we do. Questions or requests: support@attivago.app.