Privacy Policy
Last updated: 19 February 2026
1 Data controller
LYTEX - Immanuel Mruk (sole proprietorship) Breslauer Str. 12, 54516 Wittlich, Rhineland-Palatinate, Germany Email: [email protected]
2 Overview of processing
lytex is a tracking app for nutrition, entries, routines, and biometric data. You can use the app without an account; then your content is stored locally on your device. With an account you can store data on our servers and sync across devices.
3 Data categories
Depending on use, we process account data, content data, communication data, and security logs. This includes email, username, optional profile fields, entries, schedules, reminders, and activity logs.
4 Special categories of personal data (Art. 9 GDPR)
When you use an account and store server-side content, we may process data with a health context only based on your explicit consent (Art. 9(2)(a) GDPR).
5 Purposes and legal bases
Providing app features and sync (Art. 6(1)(b) GDPR), consent-based processing of health-related content (Art. 6(1)(a) and Art. 9(2)(a) GDPR), and abuse prevention/security (Art. 6(1)(f) GDPR).
6 Local mode without account
Without an account, content is stored only locally on your device. Search terms used for optional online search are sent to our API and not stored permanently.
7 Recipients and service providers
Hosting via ProHosting24, optional CDN/security via Cloudflare, push delivery via Expo/APNs/FCM, translation via DeepL, and public data sources (RxNorm/openFDA) server-side.
8 International transfers
Some providers may process data outside the EU. Appropriate safeguards such as SCCs are applied.
9 Retention
Account/content data until account deletion; activity logs typically up to 90 days; admin audit logs up to 12 months; support data up to 12 months after resolution.
10 Security
TLS (HTTPS), Argon2 password hashing, role-based permissions, and mandatory 2FA for admin operations.
11 Your rights
You have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.
12 Withdrawal of consent
You can withdraw consent at any time with future effect, e.g. by disabling sync or deleting your account.
13 Right to complain
You have the right to lodge a complaint with a supervisory data protection authority.
14 Changes to this notice
We may update this privacy notice. The current version is available in the app and on the website.