Privacy Policy

Last updated: August 29, 2026 · Fullo by Larinera

This Privacy Policy explains how Larinera (“we”, “us”) collects and uses information when you use the Fullo mobile app and related services (together, “Fullo”). Fullo is a wellness and learning companion — not medical advice, diagnosis, or treatment.

Data controller: Larinera. Questions, requests, and privacy rights: hello@larinera.com.

What changed in this update

This version brings the policy up to date with features that shipped since August 2026: generative recipe text and imagery, restaurant menu photo understanding, Siri and Shortcuts actions, push notifications and Live Activities, and our analytics and attribution providers now named individually. We also clarified retention, international transfers, and how to request a copy of your data.

Information we collect

• Account identifier — a Firebase anonymous user ID. There is no sign-up: we never ask for your name, email address, or phone number. The display name you choose is a nickname stored on your device.
• Meal content you provide — photos or text descriptions of meals, restaurant menu photos, corrections you make, Satisfaction Check answers, craving prompts, and messages you send to Fullo in chat.
• Food preferences — dietary choices and allergies, used to filter suggestions and recipes so we do not suggest something you cannot eat.
• Subscription status — entitlement signals from our payments partner (RevenueCat / the App Store) so Premium features unlock correctly.
• Product analytics — which screens you open and which features you use. We minimise personal information in these events, and we do not use session replay.
• Device and diagnostic data — a push notification identifier, vendor device identifiers used by our analytics and attribution providers, and crash reports.

How we use information

• To run the Fullness Loop: meal analysis, suggestions, check-ins, and Personal Patterns.
• To generate recipes, coach wording, and recipe images.
• To provide the Premium features you subscribe to.
• To send the notifications you have allowed, including Live Activities on your Lock Screen.
• To improve safety filters and product reliability.
• We do not use your meal data to train models. If we ever offer that, it will be opt-in, off by default, and announced here first.

Consent before meal photos

We ask for your consent before uploading a meal or menu image, and we record each grant. You can also turn on a setting that deletes meal images automatically once analysis finishes. Photos you pick through Siri or Shortcuts follow the same rule — consent is never granted silently.

Artificial intelligence

Fullo uses OpenAI to understand meal photos and text, to read restaurant menu photos, to write coaching copy, and to generate Full Plate recipes together with the images that illustrate them. The meal or menu content involved is sent to OpenAI to produce that result.

OpenAI processes this data as our service provider under its API terms, and does not use it to train its general models. Output is generated text and imagery: it can be wrong, and it is never medical or nutritional advice.

Notifications and Live Activities

If you allow notifications, we use OneSignal to deliver Satisfaction Check reminders and other gentle nudges, and to run Live Activities that show your current check-in on the Lock Screen. OneSignal receives a push subscription identifier and the notification content. You can turn notifications off at any time in iOS Settings.

Siri and Shortcuts

Fullo offers actions you can run from Siri or the Shortcuts app. They send the same data to the same service as the equivalent in-app action:

• Log Meal — the meal description and meal type.
• Ask Craving Coach — the craving text.
• Generate Recipe — the ingredients or notes you provide.
• Analyze Meal Photo — the photo you select, after in-app consent.
• Open Meal Camera — no data.

Photos chosen through Shortcuts are held in a temporary folder, compressed, then deleted once they have been attached or the attempt has failed.

Analytics and app attribution

We use Firebase Analytics and Mixpanel (EU data region) for product analytics, Firebase Crashlytics for crash reporting, and AppsFlyer to understand which advert or link led to an install.

Fullo does not track you across other companies’ apps and websites. We do not collect Apple’s advertising identifier (IDFA), and the app never shows a tracking permission prompt. Install measurement uses Apple’s privacy-preserving SKAdNetwork, which reports campaign results without identifying you.

What we do not do

• We do not sell your meal or health-related data.
• We do not use your data for advertising networks or ad targeting.
• We do not track you across other companies’ apps and websites.
• We do not provide medical diagnosis or treatment.

Service providers

Each of these processes data only to provide its service to us, under an agreement with us:

• Google Firebase — anonymous authentication, analytics, crash reporting.
• Mixpanel (EU data region) — product analytics.
• AppsFlyer — install attribution.
• OneSignal — push notifications and Live Activities.
• RevenueCat and the App Store — subscriptions.
• OpenAI — meal and menu understanding, coach copy, recipe and image generation.
• Cloudflare R2 — image storage. Images are served through short-lived signed links, valid for about fifteen minutes.
• Railway — application and database hosting.

International transfers

Our providers operate in several countries, including the United States. Where data is transferred out of the UK or European Economic Area, it is done under the transfer safeguards those providers offer, such as Standard Contractual Clauses. Mixpanel is configured to use its EU data region.

Retention

• Meals, check-ins, and preferences — kept while your account is active.
• Meal images — deleted straight after analysis if you turn on auto-delete; otherwise kept with the meal until you delete the meal or your account.
• Account deletion — your meals, check-ins, and media are removed when you delete your account. Backups age out within 30 days.
• Analytics events — retained under each provider’s standard retention period.
• Menu photos and Shortcuts photos — deleted once processing finishes.

Your choices and rights

• Delete your account — You → Delete my account. This removes the meals, check-ins, and media held for your account.
• Delete a single meal — remove individual meals in the app.
• Request a copy of your data — email hello@larinera.com and we will send you a machine-readable copy within 30 days.
• Change a setting we hold for you — email us and we can adjust account preferences on your behalf, including hiding food-related numbers or deleting meal images automatically after analysis.
• Notifications — allow or turn off at any time in iOS Settings.

Depending on where you live, you may also have the right to access, correct, port, or restrict the use of your personal data, to object to processing, to withdraw consent, and to complain to your local data protection authority. If you are in California, you may request disclosure or deletion, and you have the right not to be discriminated against for exercising these rights. We do not sell personal information or share it for cross-context behavioural advertising. Email hello@larinera.com and we will respond within 30 days. Because Fullo accounts are anonymous, we may need you to make the request from the device holding the account so we can identify the right data.

This website

fullo.online sets no cookies and runs no analytics. Pages load a web font from Google Fonts (fonts.googleapis.com and fonts.gstatic.com), which means Google receives your IP address and browser details in order to serve the font file. Nothing else about your visit is collected or stored by us.

Children

Fullo is not directed to children under 13 (or the minimum age required in your region). We do not knowingly collect personal information from children.

Changes

We may update this policy. We will revise the “Last updated” date above and, when changes are material, provide additional notice in the app or on this site.

Contact

Questions about privacy: hello@larinera.com