Last updated: 10 October 2026 · Version 4.3
The controller for the processing of personal data described in this policy is:
Marcelo Ferreira (sole proprietorship)
Rathausenstrasse 17, 6032 Emmen, Switzerland
Email: info@eini.app
Processing is governed by the revised Swiss Federal Act on Data Protection ("FADP"). Where you use our services from the European Economic Area and the EU General Data Protection Regulation ("GDPR") applies, it applies in addition; where the two regimes differ, we apply the higher standard.
This policy covers the Eini mobile app (iOS and Android) and the website eini.app (together, the "Services"). It does not cover the websites, apps or in-store practices of the retailers whose promotions we display; those retailers are independent controllers of any data they collect from you directly.
Account data: email address and sign-in via email, Apple or Google (from Apple/Google we receive only the limited profile data they share, typically email address and name), preferred language, subscription status.
Profile preferences: household size, preferred retailers, pantry items, kitchen appliances, cooking days, and dietary preferences and restrictions (e.g. vegetarian, vegan, allergies).
Planning data: meal plans, recipes selected or swapped, shopping lists and savings estimates generated for you; loyalty cards you choose to add to the in-app wallet (card number or barcode).
Career module (Eini Premium): the role, industry, years of experience, salary, canton, skills, target role and education you enter, and the CV text or CV file you choose to share. The analysis we produce for you is stored in your account so you can return to it.
Taxes module (Eini Premium): gross income, municipality of residence, marital status, number of children, the deductions you indicate and, if you use the spending check, your spending by category. Your tax profile is stored so it follows your account across devices.
Housing module (Eini Premium): your current city and rent, income, work location or address, household size and the commuting days of each person, plus any rent alerts you set. Your housing profile is stored so it follows your account. If you choose to share your net rent, it is kept as an anonymous observation (municipality, number of rooms, net rent, month) that carries no identifier and cannot be linked back to you; it is used only once at least five such observations exist for a municipality, to improve rent estimates for all users. Listing text you paste for analysis is processed only for that request.
Insurance module (Eini Premium): the policies you enter (type, insurer, premium, dates, coverage details and notes), stored in your account. Photos or PDFs of policies you scan are used once to extract these details and are not stored.
Document scanner (Eini Premium): photos or PDFs of administrative documents you scan are used once to classify the document and pre-fill the relevant module. The image is not stored; only the values you confirm are saved.
Technical data: IP address, device type and identifiers, operating system, app version, timestamps, and crash and error reports.
Usage data in the app: which features you open and use, for example opening a module, starting or generating a meal plan, viewing the shopping list or comparing premiums, together with your user ID, platform, app version, language and time. These records do not contain what you enter in the app. From app version 1.1.8 these records, together with the screens you open and events such as opening the app, are processed with PostHog (see Section 6). They are linked to your user ID, never to your name or email address, and IP addresses are discarded. You can switch this off at any time in the app under Profile › Privacy & Support › Share usage statistics.
Sign-up check: when you create an account with your email address in the app (version 1.1.8 or later), Apple (App Attest) or Google (Play Integrity) confirms that the request comes from the genuine Eini app on a real device. We keep only the result of this check (passed or not, platform, app version), linked to your account; no device identifier is stored.
Push notification tokens: if you enable notifications, the identifier provided by Apple or Google that allows us to deliver them.
Correspondence: messages you send us by email or form.
Profile photo: optional, if you upload one.
Dietary restrictions and allergy information may constitute health-related data and thus sensitive personal data under Art. 5 lit. c FADP and Art. 9 GDPR. We process this information only with your consent, given when you enter it, and exclusively to filter and generate suitable meal plans, recipes and shopping lists. We do not use it for marketing profiling, do not infer religious or philosophical beliefs from it, and do not disclose it to third parties for their own purposes. You can remove these preferences at any time in the app.
Your data is never sold, and never shared with third parties for their advertising purposes.
We use the following service providers, which process data on our behalf under data processing agreements:
The figures in the Career, Taxes, Housing and Insurance modules are computed from public data published by the Federal Statistical Office (BFS), the Federal Tax Administration (ESTV) and the Federal Office of Public Health (BAG). No personal data is sent to these authorities.
ChatGPT (OpenAI) and Claude (Anthropic), only if you connect them. If you add the Eini connector to ChatGPT or Claude and log in with your Eini account, Eini sends that service, each time you ask, the data needed for the answer: your current meal plan and shopping list, the plan settings used to make a new plan, and your e-mail address (part of the login). Deal searches and health-insurance comparisons need no login and contain no personal data from your account. OpenAI and Anthropic process your conversations as independent controllers under their own privacy policies; they are not our processors. The connection gives them no access to your password, payment details or other modules, and cannot change your account except to create a new meal plan when you ask. You can disconnect at any time in ChatGPT or Claude.
Beyond this, we disclose data only where required by law or legal process, or where strictly necessary to protect our rights or the security of the Services.
Your data is primarily processed in Switzerland and the European Economic Area (Ireland, the Netherlands and Germany), which the Swiss Federal Council recognises as providing an adequate level of data protection. Where providers process data in the United States, we rely on appropriate safeguards, in particular the EU Standard Contractual Clauses with the adjustments recognised by the FDPIC, and, where applicable, the provider's certification under the Swiss–U.S. Data Privacy Framework.
| Data category | Retention |
|---|---|
| Account and profile data | Duration of the account + up to 12 months after deletion |
| Meal plans, lists, preferences | Duration of the account |
| Career analyses, tax and housing profiles, rent alerts, insurance policies, loyalty cards | Duration of the account |
| Scanned documents and policy photos | Not stored — processed only for the request |
| Anonymous rent observations | 12 months; never linked to an account |
| Server and application logs | 30 days |
| Usage data in the app | 12 months |
| Sign-up check results | Duration of the account |
| Crash and diagnostics data | Up to 90 days |
| Push notification tokens | Duration of the account + 90 days |
| Consent and unsubscribe records | Up to 24 months after consent ends |
| Support correspondence | Up to 24 months after resolution |
| Records required by law (accounting, tax) | 10 years (Art. 958f Swiss Code of Obligations) |
If you delete your account, we delete or irreversibly anonymise your personal data within a reasonable period, subject to the periods above.
We implement appropriate technical and organisational measures, including encryption in transit (TLS), encryption at rest, row-level access controls in the database, least-privilege access and backups. If we become aware of a data breach that is likely to result in a high risk to you, we will notify you and the competent authority as required by Art. 24 FADP and, where applicable, Art. 33–34 GDPR.
The app may send push notifications (e.g. planning or shopping reminders) only if you enable them. You can disable them at any time in your device settings.
The website eini.app uses strictly necessary cookies only, to keep the site working and remember your language. We use no tracking, analytics or advertising cookies on the website. The web app at app.eini.app uses only strictly necessary cookies to keep you signed in; when you pay on the web, Stripe sets cookies that are needed for secure payment and fraud prevention.
Subject to the conditions of the FADP and, where applicable, the GDPR, you have the right to:
Requests can be sent to info@eini.app; we may ask you to verify your identity and aim to respond within 30 days. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland, or, if the GDPR applies to you, with the supervisory authority of your country of residence.
Our meal-planning algorithm processes your preferences automatically to generate plans and lists. The Career, Taxes, Housing and Insurance modules compute their figures automatically from your inputs and public official data, and an automated language-model service produces the accompanying explanations on our behalf (see Section 6). These outputs are information to support your own decisions; they do not produce legal or similarly significant effects on you within the meaning of Art. 21 FADP or Art. 22 GDPR, and they are not tax, legal, financial or insurance advice.
The Services are not directed at children. Accounts require a minimum age of 16, or the consent of a parent or legal guardian. If we learn that we have collected data from a child below that age without appropriate consent, we will delete it promptly.
We may update this policy from time to time. We will post the updated version with a new date and, where changes are material, inform you in the app or by email with reasonable advance notice.
Questions about this policy or your data: info@eini.app.