Privacy Statement

1. Who We Are

Nutrinergy VOF (“2fuel”, “we”, “us”, or “our”) provides a sports nutrition platform consisting of the 2fuel mobile application, the 2fuel website, and related services that connect athletes with independent nutrition coaches, dietitians, and teams (the “Service”). Nutrinergy VOF is the controller responsible for the processing of your personal data described in this statement.

• Nutrinergy VOF
• Trianonstraat 26, 6213 AC Maastricht, the Netherlands
• Chamber of Commerce (KvK) number: 97094900
• Contact: info@2-fuel.com

2. Data We Collect

• Account data: name, email address, login details, language, and profile information you add to your account.
• Health and nutrition data: weight, height, body composition, allergies and intolerances, dietary habits and preferences, and training and performance data (see section 3).
• Training and integration data: planned and completed sessions (sport, duration, intensity) and, if you connect a third-party training platform or activity tracker, the activity data you authorize it to share with us.
• Usage data: how you interact with features, pages, and settings in the app and on the website.
• Communication data: support requests, feedback, and messages you send through the platform.
• Payment data — processed by our payment providers (Stripe, Apple, Google); we receive transaction status and billing details but do not store full payment card details.
• Technical data — device type, operating system, browser, IP address, time zone, and log information.

3. Health Data and Explicit Consent

To calculate personalized nutrition guidance, 2fuel processes health-related personal data, such as your weight, height, body composition, allergies and intolerances, dietary habits, and training and performance data. Under the GDPR this is a special category of personal data that we may only process with your explicit consent.

During onboarding we ask your explicit consent to process this health data. Because the core functionality of 2fuel cannot work without it, you cannot use the Service without giving this consent.

You may withdraw your consent at any time via the app or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, but without this data we can no longer provide the core functionality of the Service, and withdrawal may therefore mean that your account is closed.

If you share data with a coach or team through the platform, you control what you share, and they are independently responsible for how they handle your data in their professional capacity.

4. How We Use Data and Legal Bases

• Providing the Service — creating your account, calculating your nutrition plan, syncing training data, and enabling contact with coaches and teams. Legal bases: performance of our contract with you, and your explicit consent for health data.
• Payments — processing subscriptions and invoices. Legal bases: performance of a contract and legal (tax) obligations.
• Refund requests — if you ask Apple or Google for a refund of a 2fuel subscription, we may tell them whether the subscription was delivered and how much you used the AI features since the purchase (for example the number of AI requests and their value), as described in section 7 of our Terms & Conditions. We never share the content of your conversations, your food logs, or your health data. Legal bases: performance of our contract with you (the Terms you accepted) and our legitimate interest in giving the app store accurate information about the purchase.
• Communication — service updates, support, and operational messages. Legal bases: performance of a contract and our legitimate interest in keeping you informed. Marketing emails are sent only with your consent, and you can opt out at any time.
• Improving the Service — analytics, debugging, and product development, where possible using anonymized or aggregated data. Legal basis: our legitimate interest in improving the Service.
• Safety and compliance — preventing abuse and fraud, enforcing our Terms & Conditions, and complying with legal obligations. Legal bases: our legitimate interest and legal obligations.

5. AI Features

Parts of the Service use artificial intelligence technologies from third-party providers to generate recommendations, content, or responses. When you use these features, the input you provide (which may include personal data) is processed to generate the output and to provide, secure, and improve the feature. We do not allow our AI providers to use your personal data to train their general-purpose models.

5a. Garmin and Other Connected Devices

If you connect your Garmin account, we receive your completed activities, sleep, heart rate variability and resting heart rate from Garmin Connect, only after you give consent in the app.

How we use it. To adjust your nutrition and carbohydrate plan to your training and recovery, to show recovery signals in your app, to match activities to planned sessions, and, if you linked a coach, to show them to that coach.

Who processes it.

• Hetzner, which hosts our servers in the European Union, including our self-hosted Open Wearables integration service that receives the data from Garmin.
• Mistral AI (EU servers), only if you turned on AI processing (see below).
• Your linked coach or team, only if you connected one.

We do not sell Garmin data or share it with anyone else, and we never use it for advertising.

AI transparency. If you turn on AI processing, your AI coach and planner may read your Garmin data to personalise your nutrition advice. The data is pseudonymised (no name or email address) and sent to Mistral AI on servers in the EU. AI processing is off until you explicitly agree, and you can turn it off at any time in Me › AI processing. Garmin data and anything derived from it is never used to train, evaluate or improve any AI model, by us or by our providers.

Your control. You can disconnect Garmin at any time in Me › Connections. Disconnecting removes the Garmin data we hold. You can access, correct, export or delete your data, and withdraw consent, as described in sections 9 and 13.

6. Data Sharing

2fuel does not sell personal data. We share personal data only:

• With service providers (processors) that support hosting, infrastructure, payments, email and communications, analytics, and AI features — under data processing agreements that bind them to confidentiality and security obligations.
• With coaches and teams you choose to connect with through the platform, to the extent of the data you share with them.
• With Apple or Google when you request a refund of a subscription bought through their app store: only the usage information described in section 4 (Refund requests). Apple and Google handle that information under their own privacy policies.
• For legal reasons — to comply with a legal obligation, court order, or lawful request, or to establish, exercise, or defend legal claims and prevent fraud or abuse.
• In a business transfer — if our company or assets are (to be) acquired or merged, in which case we will inform you where required by law.

7. International Transfers

Some of our service providers process data outside the European Economic Area. Where that happens, we rely on an adequacy decision of the European Commission or on appropriate safeguards such as the EU Standard Contractual Clauses. You can request more information about these safeguards via info@2-fuel.com.

8. Data Retention

We keep personal data only as long as necessary for the purposes described in this statement: in general, for as long as your account exists. Invoicing data is kept for the statutory retention period (7 years in the Netherlands). After deletion of your account, personal data is deleted or anonymized, unless a legal retention obligation applies. Anonymized and aggregated data, which can no longer identify you, may be retained for analytics and product improvement.

9. Deletion and Inactivation

Users can request data deletion in the app via Account → Delete Account → Delete Data. A deletion request is then created, and data is deleted within 5 working days, unless legal retention obligations apply.

Users can also choose account inactivation so data is not lost. Inactivated accounts are protected and blocked from lookup or viewing by other users and unauthorized parties.

For full details, see our Delete Data page.

10. Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure. You are responsible for keeping your password confidential; notify us of any unauthorized use of your account.

11. Cookies

Our website uses cookies and similar technologies. Essential cookies are used for the website to function; analytics and marketing cookies are only placed with your consent. See the cookie policy in the website footer for details and to manage your choices.

12. Third-Party Services

The Service can link to or integrate with third-party websites, platforms, and devices (such as training platforms and activity trackers). Their own privacy policies apply to the data they process; we encourage you to review them. We are not responsible for the privacy practices of third parties.

13. Your Rights

Under the GDPR you have the right to:

• access the personal data we hold about you and receive a copy;
• have incorrect or incomplete data corrected;
• have your data deleted (“right to be forgotten”);
• restrict or object to processing based on our legitimate interest;
• receive your data in a portable format (data portability);
• withdraw your consent at any time, without affecting processing before withdrawal.

To exercise these rights, contact us at info@2-fuel.com. We respond within one month; if we need more time we will let you know within that month. If you are not satisfied with our response, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

14. Children

The Service is intended for adults aged 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.

15. Changes to This Statement

We may update this Privacy Statement. For significant changes we will inform you via the app or by email before the changes take effect. The date at the top shows when this statement was last updated.

16. Contact

If you have questions about this Privacy Statement or how we handle your data, contact us at info@2-fuel.com or write to Nutrinergy VOF, Trianonstraat 26, 6213 AC Maastricht, the Netherlands.