Version 1.0 · last updated 12 October 2026
This notice covers Fyvit Pro, the portal at pro.fyvit.com where professionals view the diaries their clients share with them. Clients who use the Fyvit Nutrition app: the Fyvit privacy statement applies to you as well. This notice is available in English, Dutch and German. If the versions differ, the Dutch version applies.
The short version
- The client decides. A client's diary only appears in Fyvit Pro after the client enters your invite code. The client chooses whether to add photos and personal details, and can stop at any time.
- Read-only. You can view and export what a client shares. You cannot change anything in their app.
- Two responsibilities. We are responsible for running Fyvit Pro. You are responsible for how you use what you see and export.
- Hosted in the EU. Fyvit Pro and its data run in Google data centres in the Netherlands.
- Not your client record. Fyvit Pro is a viewer. Copy what you need to keep into your own records.
Who we are
Fyvit Pro is provided by AlleyApp V.O.F., a general partnership registered in the Netherlands.
- Address
- Cabralstraat 16-1, 1057 CG Amsterdam, the Netherlands
- Chamber of Commerce
- KvK 75853663
- contact@fyvit.com
We have not appointed a data protection officer. Please send all privacy questions to contact@fyvit.com.
Who is responsible for what
Under the General Data Protection Regulation (GDPR), AlleyApp and the professional are each a separate controller, each for their own part.
| AlleyApp is responsible for | You, the professional, are responsible for |
|---|---|
| Your Fyvit Pro account | How you use what a client shares, for the care or coaching you provide |
| Running and securing the portal | Exports you make and anything you copy into your own files |
| Copying a client's data to Fyvit Pro on the client's instructions and with their explicit consent, and deleting it when they stop sharing | Your own professional duties, such as keeping a client record and professional confidentiality |
Fyvit Pro is not a client or medical record. We do not keep client data on your behalf. When a client stops sharing, their diary, photos and personal details disappear from Fyvit Pro. If you are a care provider and need to keep information in your client record, for example under the Dutch Medical Treatment Contracts Act (WGBO), copy it into your own record.
Data about you as a professional
- Account: your name, practice name (optional), email address, how you sign in (email and password, or Google), your invite code, and the fact that your account is a professional account.
- Connections: which clients are connected to you and the status of each connection.
- Sign-up record: your email address, sign-in method and sign-up date, which we use to count sign-ups. Our admin dashboard lists recent sign-ups by email address.
- Technical data: your IP address, browser and server logs.
- Portal settings such as language, layout and favourites. These are stored only in your own browser.
After a client sends a request with your invite code, the app shows them your name. Your name is also stored with each client connection.
| Purpose | Legal basis | How long |
|---|---|---|
| Your Fyvit Pro account and signing in | Contract (Art. 6(1)(b)) | Until you ask us to delete your account |
| Connecting you to clients who enter your code | Contract (Art. 6(1)(b)) | As long as your account exists |
| Security, preventing abuse and fixing errors | Legitimate interest in a secure, working service (Art. 6(1)(f)) | Server logs: 30 days |
| Answering your questions | Legitimate interest in helping you (Art. 6(1)(f)) | 12 months after we have handled them |
You need an email address to have a Fyvit Pro account. If you do not enter a name, we use the name of your Google account or your email address as your name, and your clients see it. The practice name is optional.
To delete your Fyvit Pro account, email contact@fyvit.com. We first end all your client connections, which deletes the copies of their data, and then delete your account.
Client data in Fyvit Pro
- How it gets there. The client enters your invite code in the Fyvit Nutrition app and gives explicit consent to share (Article 9(2)(a) GDPR). After you accept, we copy what they chose to Fyvit Pro, and keep it up to date while they share. A client younger than 16 can only share with you if a parent or guardian allowed it.
- What you can see. Always the client's diary (what they ate and when, meal names and types, products and brands, portions and nutrients) and the name of their account, or their email address if the account has no name. If the client chooses, also their meal photos and personal details (age, sex, height, weight, activity level, goal and profile photo). You never see their date of birth.
- Read-only. You cannot change anything in the client's app.
- Exports. You can export what you see as a PDF or spreadsheet. The detailed PDF can include meal photos from the last 7 days. An export is your copy and your responsibility.
- When sharing stops. A client can change what they share or stop at any time. You can also end a connection. When sharing stops, we delete the copies of the diary, photos and personal details in Fyvit Pro, and you lose access to them. The ended connection stays in your list, with the client's name or email address.
What we expect from you
- Use client data only for the care or coaching relationship with that client.
- Keep your login to yourself, use a strong password, and sign out on shared computers.
- Store exports securely and delete them when you no longer need them.
- Respect your professional confidentiality.
- Tell us straight away at contact@fyvit.com if you suspect that someone else has accessed your account or client data.
Who receives data
| Company | What for | Where | Safeguard |
|---|---|---|---|
| Google (Firebase and Google Cloud) | Hosting the portal, database, file storage, our servers, sign-in | Netherlands. Sign-in (Firebase Authentication) runs in the United States. | Google's data processing terms with Standard Contractual Clauses; EU-US Data Privacy Framework |
Some client profile photos come from the client's Google or Apple account and load directly from Google's or Apple's servers, which then see your IP address. Fyvit Pro does not use analytics or advertising cookies. We do not sell or rent data, and we only provide it to authorities when the law requires us to.
For the transfer to the United States we use the EU-US Data Privacy Framework and the Standard Contractual Clauses approved by the European Commission.
How long we keep it
| Data | How long |
|---|---|
| Your professional account | Until you ask us to delete it |
| Client diary, photos and personal details in Fyvit Pro | Deleted as soon as the client stops sharing or shares less |
| Ended client connections (name or email address, status) | As long as your account exists |
| Your sign-up record | Until your account is deleted |
| Server logs | 30 days |
| Your emails to us | 12 months after we have handled them |
Security
- Fyvit Pro and its data are hosted in the EU and encrypted in transit and at rest.
- Access rules make sure you only see clients who are connected to you, and only what they chose to share.
- If a data breach is likely to put you or your clients at risk, we will tell you and the Autoriteit Persoonsgegevens, as the law requires.
Your rights
As a professional, you have the right to access, correct and delete your data, to restrict or object to how we use it, and to receive it in a machine-readable format. Email contact@fyvit.com; we reply within one month. Clients can use their rights as described in the Fyvit privacy statement.
We do not make decisions about you by automated means that have legal or similarly significant effects (Article 22 GDPR).
You also have the right to complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or to the data protection authority where you live or work.
Changes
When we change what Fyvit Pro does with data, we update this page first, with a new version number and date. For important changes we tell you in the portal before they take effect.
Contact
Email: contact@fyvit.com
Post: AlleyApp V.O.F., Cabralstraat 16-1, 1057 CG Amsterdam, the Netherlands