Legal

Privacy Policy

Last updated: 2026-05-21

1. Who we are

Maistiqo is operated by MB Lengvin, a company registered in Lithuania (company code 307826590, registered address: Minties g. 15-36, LT-08231 Vilnius, Lithuania), which is the data controller. We provide a nutrition-tracking and recipe-generation web application available at maistiqo.com. Contact: info@maistiqo.lt, +370 679 89991.

2. What we collect

When you register, we store your email address, name, and a hashed password. As you use the app, we store the data you create: meals logged, recipes you save or publish, ingredients added, pantry items, weekly meal plans, shopping list, water and drink logs, weight log, goals, and any preferences you configure (target calories, dietary tags, units, language). If you use the AI Coach chat, we store the conversation thread including your messages and the assistant's replies. We also keep technical metadata: account creation date, last login time, IP address at sign-in (in an audit log), browser user-agent on crash reports, and aggregated token-usage counts for billing. We do NOT collect: your contacts, your location, your photo library, advertising identifiers, or any data from other apps on your device.

3. Why we collect it (legal basis)

Under GDPR Article 6: • Performance of contract (Art. 6(1)(b)) — we need your account data + the content you create to actually deliver the service you signed up for. • Legitimate interest (Art. 6(1)(f)) — for security audit logs, crash reports, and abuse prevention. We balance this against your rights; you can object via email. • Consent (Art. 6(1)(a)) — for the AI Coach feature specifically. By using it, you consent to sending your messages and contextual data (your daily nutrition totals, pantry, recent meals) to Anthropic's API for processing.

4. Where your data lives

All your data is stored in an SQLite database on a Hostinger server located in the European Union. Backups are stored on the same server, retained for 14 days, then auto-deleted. When you use the AI Coach chat, the relevant context (today's nutrition state, recent meals, pantry, recent observations) is sent to Anthropic's API. Anthropic is a US-based provider with a Data Processing Addendum and EU-compliant transfer mechanisms (Standard Contractual Clauses). Anthropic does not train models on customer data via the API.

5. How long we keep it

Account + content data: kept for as long as your account exists. If you delete your account from Settings → Security → Delete my account, all of it is removed within seconds (CASCADE delete). Audit logs (sign-ins, password changes, admin actions): kept for 2 years for security forensics, then auto-purged. When you delete your account, your actor identifier is anonymized in audit logs immediately, but the timestamps + action codes are retained. Crash reports and AI usage logs: kept for 90 days then auto-purged. Backups: 14-day rolling window.

6. Your rights

You have the right to: • Access your data — download everything at any time via Profile → Security → Download my data. • Erasure — delete your account at any time via Profile → Security → Delete my account. • Rectification — edit your profile, meals, recipes, and any other content directly in the app. • Portability — your data export is in standard JSON, ready to import elsewhere. • Restrict processing or object — email hello@maistiqo.lt and we'll honour the request within 30 days. • Withdraw consent — you can stop using the AI Coach at any time; your existing chat history remains until you delete your account.

7. Cookies + tokens

We use a single httpOnly authentication cookie (`nutrisync_token`) to keep you logged in. It expires after 30 days. No third-party trackers, no advertising cookies, no analytics scripts.

8. Third-party processors

We use these services to deliver the product: • Hostinger (EU) — hosting + email delivery. • Anthropic (US) — AI Coach LLM, only when you use the chat feature. • Resend (US) — fallback email delivery (only if SMTP is unavailable). All three are bound by industry-standard data processing agreements.

9. Children

Maistiqo is not intended for users under 16. We do not knowingly collect data from anyone under 16. If you believe a child has registered, email hello@maistiqo.lt and we will delete the account.

10. Changes to this policy

When we change this policy materially, we'll notify registered users by email at least 14 days before the change takes effect. The current version is always available at maistiqo.com/app#/privacy.

For questions about this policy or about how we handle your personal data, email hello@maistiqo.lt. You also have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt).