AGO2NOW app privacy policy
Updated September 24, 2026. This policy covers the local journal, optional AI features and subscription verification.
Controller and contact
Sébastien Ricard, individual publisher, 1 rue de Montebello, 95630 Mériel, France. Contact: sricard@hotmail.fr. AGO2NOW is a personal journal for adults. It does not sell your data or include targeted advertising or advertising tracking.
Your journal stays on your iPhone
Your answers, habits, weight, height, goals, meals and selfies are stored in the app’s private space. Photo files are excluded from app backups. No publisher account synchronizes your journal. Exports happen only at your request; your chosen destination has its own rules.
Apple Health and permissions
Authorized Apple Health measurements are read for local display only. They are not sent to AGO2NOW servers or OpenAI and are excluded from text exports. The app does not write to Apple Health. The camera and photo picker are used for images you choose. You can revoke permissions in iOS. Face ID or Touch ID supplies an authentication result, not biometric data. Reminders are local.
AI portraits: a separate choice
After you consent, your selected selfie and a style instruction are sent over HTTPS to the AGO2NOW server and then OpenAI. Weight, height, numerical goals and Apple Health data are not sent. Illustrations do not predict your health or future appearance. Temporary server files expire after 24 hours; cleanup runs while the service operates. Cancellation also requests deletion of remote images. Technical creation records and used allowances are separate from photo files.
Optional meal analysis
With your permission, the photo and your notes are sent to the server and OpenAI. Avoid including people, documents or medical information. The server processes the photo in memory. Results contain uncertain food, portion and calorie estimates, not measurements or prescriptions. Review and correct them before saving locally. The remote result is deleted at the app’s request or expires after 24 hours. A pseudonymous technical receipt, without the photo or meal description, may remain for 90 days to prevent duplicate calls. A technical fingerprint is not guaranteed anonymization.
Subscriptions and technical data
Apple handles payments; we do not receive your bank card details. The server verifies the signed proof and subscription status with Apple. It retains the original transaction ID, environment, expiry, a pseudonymous identifier and used AI allowances. The signed proof itself is not retained and purchase identifiers are not sent to OpenAI. These data and creation records support restoration, quotas and abuse prevention. Deleting the local journal does not automatically erase them: contact us to request deletion. Deleting the app does not cancel a subscription; manage it in Apple settings.
Why we process data
Optional AI transfers rely on your consent, explicit where they reveal health information. You may refuse or withdraw consent without losing the local journal. Withdrawal prevents new transfers but does not undo prior processing. Purchase verification provides the requested service. Protecting the service and preventing duplicate calls and abuse rely on our legitimate interest in security.
Providers and international processing
The publisher operates the service on a server in France; Tailscale provides public HTTPS access. The website is hosted by OVH SAS, 2 rue Kellermann, 59100 Roubaix, France. OpenAI processes requested AI tasks to deliver the service. Its security rules may require additional retention, including abuse-monitoring logs for up to 30 days, subject to legal or security exceptions. API data is not used to train models by default. Some processing may take place outside the European Economic Area. OpenAI’s DPA provides standard contractual clauses or adequacy decisions for relevant transfers. Exclusively European residency and zero provider retention are not promised.
Retention and deletion requests
Your local journal remains until you delete it. Temporary photo and result periods are stated above. Entitlement identifiers and security records are retained to maintain access and prevent quota resets; request their deletion from the publisher, which may affect technical restoration of these rights. We assess deletion requests and explain any data needed for a legal obligation or dispute. Support correspondence is retained for up to 12 months after closure unless required for a legal obligation or dispute. Never email passwords, API keys or selfies.
Your rights
Subject to applicable conditions, request access, correction, erasure, restriction, objection or portability at sricard@hotmail.fr, and withdraw consent. You may complain to the CNIL or your local authority. Proportionate verification of your request may be needed. Policy updates appear here; new uses requiring consent will be presented before activation.
Health limitations
AGO2NOW is not a medical device. Illustrations and nutritional estimates are not suitable for diagnosis, allergies or insulin dosing. Seek medical advice before abruptly stopping alcohol if you may be dependent.