Privacy Policy

1. Who we are

Oliveo is operated by Nik Senekovič, a sole proprietor based in Slovenia, European Union (“Oliveo”, “we”, “us”, or “our”). For the purposes of the EU General Data Protection Regulation (“GDPR”), we are the controller of your personal data.

Privacy enquiries and requests: info@oliveo.fit.

2. Where this policy applies

This policy applies to the Oliveo website, web and mobile applications, and related services (together, the “Service”). Some mobile-app features are still in development. We will update this policy before new data processing begins or a material feature launches.

3. Information we collect

Communications and historical waitlist data

• Your email address when you contact support, and an existing email address if you previously joined the waitlist.
• The date, source, and consent version associated with a previous signup.
• The content of support, privacy, or account-deletion requests you send us.

Information you provide in the app

When you use an Oliveo application, the information required to produce your plan may include:

• Account details, such as your email address, user identifier, and information required to sign you in.
• Your selected grocery store and market, household size, lunch count, weekly budget, and cooking-time preference.
• Diet, allergy, food-preference, kitchen-appliance, and weekly-wish information.
• Meal plans, recipes, shopping lists, and saved preferences.

Subscription information

Purchases in the current web application are processed by Stripe; purchases in the mobile application are processed by Apple App Store or Google Play. Oliveo does not receive or store your full payment-card details. We may receive subscription status, product, purchase and renewal dates, and transaction identifiers needed to unlock paid features, keep accounting records, and provide support.

Information collected automatically

The Service and its infrastructure may process basic device, operating-system, app-version, IP-address, security, crash, and usage information. Where analytics is enabled and the required consent has been given, this may include product events and session recordings in which form inputs are masked. We use this for security, reliability, support, and product improvement—not for cross-app advertising or selling profiles.

4. Why we use your information

• Complete requested updates to previous signups and handle related deletion requests.
• Create and manage an account, where applicable.
• Generate meal plans, recipes, and a pack-aware shopping list based on your chosen constraints.
• Check and display the plan against your selected budget.
• Manage subscription access and restore purchases.
• Respond to support, privacy, and deletion requests.
• Protect the Service, prevent abuse, and diagnose failures.
• Meet legal, accounting, and regulatory obligations.

5. Legal bases under the GDPR

• Consent: historical waitlist and marketing emails, optional product analytics and session recordings, and any sensitive diet or allergy information.
• Contract: providing the Service, generating your plan, managing your account, and supporting your subscription.
• Legitimate interests: keeping the Service secure, understanding aggregate use, fixing problems, and improving functionality, balanced against your rights.
• Legal obligation: records or disclosures required by applicable law.

6. Automated meal recommendations

Oliveo may use software and AI-assisted systems to generate meal plans, recipes, and shopping suggestions. These outputs help organise meals; they do not make legal or similarly significant decisions about you.

Always verify ingredients, labels, allergen warnings, prices, pack sizes, and suitability for your household before buying or cooking. Oliveo is not medical or nutritional advice and cannot guarantee allergen safety.

7. Service providers and sharing

We do not sell your personal data. We share it only when needed with providers that help us operate the Service, such as:

• Cloudflare, for delivery, security, and public-website infrastructure. Netlify may retain historical waitlist submissions until the applicable retention period ends.
• Supabase, for sign-in, account management, and hosting the database and associated user data.
• Apple and Google, for sign-in, mobile-app distribution, purchases, and subscriptions; Stripe, for web-app payments while that product remains available.
• PostHog, for product analytics and session recordings when that processing is enabled on an appropriate legal basis.
• OpenAI, to assist with generating or checking a plan when AI processing is enabled. We send only information needed for the requested function, not your sign-in credentials or full payment card details.
• Professional advisers, authorities, or counterparties where required by law, to protect rights and safety, or in a legitimate business transfer.

Providers process personal data as processors or independent controllers, depending on the service and their terms. We use appropriate contracts and safeguards where required by law.

8. International transfers

Some providers may process data outside the European Economic Area. Where required, we use recognised safeguards such as an adequacy decision, the EU–U.S. Data Privacy Framework, or European Commission Standard Contractual Clauses.

9. Retention

• Historical waitlist email: until the requested communication is complete and only as long as needed, or earlier if you unsubscribe or ask us to delete it.
• Account and plan data: while your account is active and for a limited period afterwards where needed for recovery, security, disputes, or legal obligations.
• Support records: only as long as needed to resolve the request and document the outcome.
• Transaction records: for the period required by tax, accounting, fraud-prevention, and consumer-protection law.

Data that is no longer needed is deleted or anonymised. Backup copies may remain for a limited recovery cycle before being overwritten.

10. Your rights

Depending on the circumstances, you may ask us to access, correct, delete, restrict, or provide a portable copy of your personal data. You may object to certain processing and withdraw consent at any time. Withdrawal does not affect processing that was lawful before it.

Email info@oliveo.fit to exercise a right. We may need to verify your identity before completing the request.

11. Account and data deletion

You can request deletion of an existing waitlist entry, account, and associated personal data by emailing support@oliveo.fit. We will verify your identity before acting on the request. Before public release, the mobile app will also let a signed-in user initiate deletion from within the account. Deleting the account does not itself cancel an active Apple or Google subscription; you must cancel that separately in the relevant store settings. We may retain limited records where law, accounting, or fraud-prevention requirements apply.

12. Children

Oliveo is intended for adults and is not directed to children under 18. We do not knowingly collect children’s personal data. If you believe a child has provided data, contact us and we will investigate and remove it where appropriate.

13. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss, and misuse. No online service can guarantee absolute security.

14. Changes and complaints

We may update this policy as Oliveo develops or legal requirements change. We will post the new date here and give additional notice where a change materially affects you.

If you are not satisfied with our response, you may lodge a complaint with the Information Commissioner of the Republic of Slovenia or your local data-protection authority.

15. Contact

Nik Senekovič, sole proprietor
Slovenia, European Union
info@oliveo.fit

See also the Terms of Service and Support page.