Privacy notice
The Art of Eating Energy app · as of 11 November 2026
Who is responsible
Dr. Cornelia Kawann, Zürich, Switzerland, author of The Art of Eating Energy, is responsible for your data
(controller). The app is built and run for her by Hannes Hennerbichler, Lisbon, Portugal, under a data processing agreement.
For any question or request about your data write to hanneshnr@gmail.com.
What we store and why
- Email address and first name: to create your account, send login links and greet you. Basis: your subscription contract.
- Subscription status (active, cancelled, end of period), received from Stripe: to open or lock the tools.
- Your entries in the Energy Tools, with date and time. They can include health information
(for example intolerances or how you feel). We store them only with your explicit consent, which you give before your first entry
and can withdraw at any time in Account. Without consent the app stays readable, entries are not saved.
- Technical data: a login cookie (keeps you logged in, 180 days) and a cookie that remembers you came from the book
(for the book price). No advertising or tracking cookies, no analytics.
Payments are handled by Stripe on the author's own Stripe account. The app never sees your card details.
Where your data is
- Cloudflare (Cloudflare, Inc., USA): hosting, database and the login emails. The database is set to Cloudflare's
EU jurisdiction, so it is stored only in the EU. Requests are answered in the Cloudflare data centre nearest to you, which can be outside the EU,
for example in Switzerland; your data passes through there but is not stored there.
Access by Cloudflare is covered by the EU-US and Swiss-US Data Privacy Frameworks and standard contractual clauses.
- Scaleway (Paris, France): a weekly encrypted backup.
- Stripe (Stripe Payments Europe, Ireland): payments and subscription management.
How long
- Single entries: until you delete them.
- Your whole account: you can delete it any time in Account, it is deleted at once.
- If your subscription ends and is not renewed, your account and entries are kept for 12 months so you can return to your journal.
You get an email 30 days before they are deleted automatically.
- Deleted data disappears from backups as they expire: after at most 30 days from the point-in-time recovery, after at most 8 weeks from the weekly backup.
- Billing records stay in Stripe as required by law.
Your rights
You can see, correct, download and delete your data and withdraw your consent at any time. Most of this works directly in
Account (download, delete, withdraw); for anything else write to hanneshnr@gmail.com.
You can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC / EDÖB) or to a data protection authority in the EU.
Security
All connections use HTTPS. Data is stored encrypted. Login works by one-time email links, there are no passwords to leak.