Privacy Policy

Last updated: 24 June 2026

WeightFree takes your privacy seriously. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have. It applies to all users of the WeightFree app and website.

WeightFree operates from the Netherlands and is subject to the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and the Dutch Uitvoeringswet AVG (Implementation Act GDPR). We are the data controller for the personal data described in this policy.

1. Contact Details

For any privacy-related questions, requests, or complaints, please contact us at:
Email: support@weightfree.rolandb31.com
Organisation: WeightFree
Country: Netherlands

2. Data We Collect

We collect the following categories of personal data:

Account data: Your name, email address, and password (stored in encrypted form) when you register.
Assessment and health data: Answers you provide in the onboarding assessment, which may include your age, weight, height, fitness level, dietary preferences, sleep patterns, stress levels, lifestyle habits, and personal goals. This data may constitute health-related data under GDPR Article 9 and is processed only with your explicit consent.
Programme interaction data: Your progress through daily missions, weekly challenges, milestones, and habit tracking.
Payment data: Transaction identifiers and billing status. Full card details are processed directly by our payment processor and are not stored by us.
Communications data: Emails and messages you send to our support team.
Technical data: IP address, device type, browser type, operating system, and app usage logs collected automatically when you use the service.
Cookie data: As described in Section 8 below.

3. Why We Process Your Data (Legal Bases)

We process your personal data on the following legal bases under GDPR:

Performance of a contract (Article 6(1)(b)): To create your account, generate your personalised programme, manage your subscription, and provide customer support.
Explicit consent (Article 6(1)(a) and Article 9(2)(a)): To process health-related data from your assessment answers. You may withdraw this consent at any time (see Section 7), but doing so may prevent us from providing a personalised programme.
Legitimate interests (Article 6(1)(f)): To improve our service, prevent fraud, ensure platform security, and send you service-related notifications. We have balanced these interests against your rights and are satisfied they do not override your privacy interests.
Legal obligation (Article 6(1)(c)): To comply with applicable laws, such as financial record-keeping requirements.
Consent (Article 6(1)(a)): To send you marketing emails. You may opt out at any time using the unsubscribe link in any marketing email or by contacting us.

4. How We Use Your Data

Specifically, your data is used to:

Generate and personalise your 12-week programme (including user profile summary, calorie strategy, daily habits, exercise and nutrition recommendations, coaching messages, and tracking metrics).
Display your progress, milestones, and challenges within the app.
Process payments and manage your subscription.
Send transactional emails (e.g. account confirmation, billing receipts, cancellation confirmation).
Send marketing and motivational emails (with your consent).
Improve and develop the WeightFree service through anonymised analytics.
Respond to your support enquiries.
Comply with our legal obligations.

5. Third-Party Processors

We share your data with third-party service providers acting as our data processors. They may only process your data on our documented instructions and are bound by data processing agreements in line with GDPR requirements:

Payment processors (e.g. Stripe or Mollie): Process payment card data to handle subscription billing. These providers are PCI-DSS compliant.
Email service providers (e.g. Postmark, Mailchimp, or similar): Deliver transactional and marketing emails on our behalf.
AI infrastructure providers (e.g. OpenAI): Your assessment answers and relevant profile data are transmitted to AI models to generate personalised programme content. We take steps to minimise the data shared and ensure appropriate contractual safeguards are in place.
Hosting and cloud infrastructure providers (e.g. AWS, Google Cloud, or similar): Store and serve the application and your data within EU/EEA data centres where possible.
Analytics providers (e.g. privacy-friendly analytics tools): Collect anonymised or pseudonymised usage data to help us understand how the app is used.

We do not sell your personal data to any third party.

6. International Data Transfers

Some of our third-party processors may transfer or process data outside the European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCCs), adequacy decisions, or other GDPR-compliant transfer mechanisms.

7. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Ask us to correct inaccurate or incomplete data.
Right to erasure ("right to be forgotten"): Request deletion of your personal data, subject to legal retention obligations.
Right to restriction: Ask us to restrict processing of your data in certain circumstances.
Right to data portability: Receive your personal data in a structured, commonly used, machine-readable format.
Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to lodge a complaint: You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

To exercise any of these rights, please email us at support@weightfree.rolandb31.com. We will respond within one month of receiving your request.

8. Cookies

WeightFree uses cookies and similar tracking technologies. Cookies are small text files placed on your device to help us operate the service. We use:

Strictly necessary cookies: Required for the service to function (e.g. session authentication). These do not require your consent.
Functional cookies: Remember your preferences and settings to enhance your experience.
Analytics cookies: Help us understand how the service is used. These are set only with your consent.
Marketing cookies: Used to deliver relevant content or measure the effectiveness of marketing. These are set only with your consent.

When you first visit our website or app, a cookie banner will ask for your consent for non-essential cookies. You can withdraw consent or change your cookie preferences at any time through your account settings or browser controls.

9. Data Retention

We retain your personal data only for as long as necessary:

Account and programme data: Retained for the duration of your subscription and for up to 2 years after account closure, to allow you to reactivate your account and for us to resolve any disputes.
Health-related assessment data: Retained for the duration of your programme use and deleted within 12 months of account closure, unless you request earlier deletion.
Financial and billing records: Retained for 7 years in accordance with Dutch tax and accounting law (Belastingdienst requirements).
Support correspondence: Retained for up to 3 years after the last communication.
Technical logs: Retained for up to 12 months.

When data is no longer needed, we securely delete or anonymise it.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no online service can guarantee absolute security. Please use a strong password and keep your account credentials safe.

11. Children's Privacy

WeightFree is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or in-app notification at least 30 days before the changes take effect. The "Last updated" date at the top of this page will always reflect the most recent version.

Disclaimer: This Privacy Policy has been drafted to reflect GDPR obligations applicable in the Netherlands and is written for general informational purposes. It does not constitute professional legal advice. WeightFree recommends consulting a qualified privacy or legal professional to ensure full compliance with applicable data protection law before relying on this policy.