Myron Get the app

Privacy policy

Controller

Markus Schwed, Tempelstraße 7, 66773 Schwalbach, Germany — markus@myron.app

Hosting and server logs

This website is hosted by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany). When you visit, technically necessary data (IP address, timestamp, page requested, user agent) is processed in server logs — the legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). Logs are deleted automatically after a short time.

Newsletter / launch notification

If you enter your email address, we store it solely to inform you about Myron's launch (Art. 6(1)(a) GDPR — consent). No tracking takes place. We use the service provider Brevo for sending (see "Other recipients"); beyond that, the address is not shared. You can withdraw your consent at any time — informally by email to markus@myron.app; your address will then be deleted.

No cookies, no third-party tracking

This website sets no cookies for analytics or advertising and embeds no third-party tracking services; we count page views ourselves, without cookies (see Audience measurement). Fonts are loaded from Google Fonts; in doing so your IP address is transmitted to Google.

Audience measurement

To understand how visitors find our website and whether they download the app, we count page views with Umami, open-source software that we run ourselves on our server at Hetzner in Germany (insights.schwed.online); no data goes to any other service. Only the public pages of this website are counted, not the web portal and not the app. We process the page visited, the referring page, browser, operating system, device type, screen size, language and the country, region and city derived from the IP address; the IP address itself is not stored. A hash is computed from the IP address and browser identifier with a key that changes monthly, so visits can be attributed to the same visitor only within one month. No cookies are set and no data is stored on your device. If your browser sends “Do Not Track”, you are not counted. The legal basis is our legitimate interest in designing the website to meet demand (Art. 6(1)(f) GDPR). We delete the data after 24 months. You can object to this processing at any time (Art. 21 GDPR), for example by emailing markus@myron.app.

Privacy in the Myron app

Account and sign-in

You sign in with Apple ("Sign in with Apple") or Google ("Sign in with Google"). We store your email address (or the relay address provided by Apple) and a technical identifier for linking your account (Art. 6(1)(b) GDPR — performance of contract).

Content and health data

Myron processes the data you enter or share for tracking: food entries, recipes, training data, body weight and — only with your explicit permission via Apple Health (iPhone) or Health Connect (Android) — activity, resting heart rate, heart rate variability and sleep. We process this health data solely to provide your analyses and, if enabled, the coach reviews (Art. 9(2)(a) GDPR — consent; revocable at any time in the iOS settings, in Health Connect or in the app). Optional photo check-ins are only stored with separate consent and can be deleted individually at any time.

AI features (Anthropic)

For the AI features (voice and photo logging of meals, nutrient estimation, coach reviews) we transmit the necessary content — e.g. the transcribed text of your voice input, meal photos or your weekly figures — to Anthropic PBC (USA) as a processor. On iPhone, speech-to-text runs on your device; audio recordings never leave your iPhone. On Android, Myron uses the system's speech recognition: if your device offers on-device recognition, the audio stays on the phone; otherwise your device's speech recognition service (usually Google) processes the recording under its own privacy policy. Anthropic does not use API data to train its models. The transfer to the USA is based on standard contractual clauses (Art. 46 GDPR).

Other recipients

  • Brevo (Brevo SAS, France — processing in the EU): sending our emails (confirmation links, invitations, system notifications, newsletter). Brevo receives your email address for this.
  • Hetzner Online GmbH (Germany): hosting of the application, database and photo storage.
  • Sentry (Functional Software, Inc., USA — processing on servers in the EU, Frankfurt): error monitoring of our server application. When a technical error occurs, we transmit the error message, program state, time, requested endpoint and a pseudonymous account identifier; IP address, email address, passwords and access tokens are not transmitted. The legal basis is our legitimate interest in stable and secure operation (Art. 6(1)(f) GDPR); error data is deleted after 90 days. Where access from the USA occurs, it is based on the EU-US Data Privacy Framework (Art. 45 GDPR).
  • Apple: push notifications (APNs) and handling of the "Myron Coach" subscription via your Apple account; we receive no payment data, only your subscription status.
  • Google (Google Ireland Limited; Google LLC, USA): on Android, push notifications (Firebase Cloud Messaging), Sign in with Google and handling of the "Myron Coach" subscription via your Google account (Google Play); we receive no payment data, only your subscription status. Transfers to the USA are based on the EU-US Data Privacy Framework (Art. 45 GDPR).
  • Open Food Facts (France): when you scan a barcode, the article number is transmitted to the product database. We contribute corrections to product data back to Open Food Facts anonymously (ODbL).

Retention, export and deletion

Your data remains stored as long as your account exists. In the app you can request a full data export at any time (Art. 20 GDPR, Account → Data → Export my data) and irrevocably delete your account with all data (Account → Data → Delete account); this also removes the link to your Apple or Google account.

Your rights

  • Access, rectification, erasure (Art. 15–17 GDPR)
  • Restriction of processing and data portability (Art. 18, 20 GDPR)
  • Objection (Art. 21 GDPR) and complaint to a supervisory authority (Art. 77 GDPR)