Weight Journal — privacy policy
Last updated: 19 October 2026
Weight Journal helps you keep track of your weight, body measurements and progress photos. That is personal and, under the GDPR, health data. This policy explains what we collect, why, where it is stored and how you stay in control. It applies to the Android and iOS apps and to the web app at weight-journal.nextim.app.
1. Who we are
The controller of your data is NEXTIM LABS SRL, Tax ID (CUI): 55575324, Trade register: J2026054077007, București, România. Contact: suport@nextim.app.
2. What we collect
| Data | Why |
|---|---|
| Account: email address, name, password (stored only as a hash), language, unit system, time zone offset | To create your account, sign you in, send confirmation and password-reset emails, and show dates in your local time |
| Sign in with Google or Apple (only if you choose it): the account identifier and email address the provider shares with us | To sign you in without a password |
| Profiles: name and, optionally, height, target weight, date of birth and sex | Height and target weight: to calculate BMI, progress and your target. Date of birth and sex are used only to interpret BMI — the adult categories do not apply under 18 |
| Health data: weight entries, body measurements, progress photos and the notes you add to them | This is the journal itself |
| GLP-1 treatment journal (only if you use it): medication, treatment periods, doses (number, optional amount) and their notes — medication and notes encrypted | To show your treatment next to your weight and mark the treatment periods on your chart |
| Reminder settings | To remind you to weigh in |
| Purchases (when lifetime access is bought): status, store, product, the store’s order number and purchase token, the price shown to you and the date — never your card details, which stay with Google or Apple | To unlock lifetime access |
| Technical data: IP address and device information in server logs, sign-in tokens | To keep the service secure and working |
| Error reports (only when the app or the server runs into an error): the error message, where in the code it happened, the app and operating system version and the device model — never your weights, measurements, photos, notes, email address or IP address | To find and fix errors. You can turn them off in the app under Settings → Error reports |
Using the app without an account (phone only): you can keep the basic journal — profile, weight entries, body measurements, treatment journal and reminder — without creating an account. This data then stays only on your phone and none of it reaches us: we have no copy or backup of it, so we cannot restore it. It is protected only by your device’s own security, and it is lost if you uninstall the app, clear its data, or reset or lose the phone. If you create an account or sign in, the app first asks for your consent to the processing of health data and then moves this data into your account; from then on, this policy applies to it as to the rest of your account. Error reports, if you leave them on, work the same way with or without an account.
3. Legal basis
- Your explicit consent (Art. 9(2)(a) GDPR) for health data. You can withdraw it at any time by deleting the entries, photos or your whole account (see section 6 for when the data is gone for good); this does not affect processing that happened before.
- Performance of our contract with you (Art. 6(1)(b)) for your account, profiles, reminders and purchases.
- Legitimate interest (Art. 6(1)(f)) for server logs and error reports, used to keep the service secure and working. You can turn off error reports in the app’s settings.
4. How we protect it
- All connections are encrypted (HTTPS/TLS).
- Names, email addresses, all notes and the medication you log are encrypted in the database. The numbers themselves — weights, measurements, doses and dates — are not encrypted field by field; they are protected by the security of the server and by encrypted backups. Encryption happens on our server: it is not end-to-end encryption.
- Progress photos are encrypted before they are written to disk, with a key kept separate from the rest of the data, and stored under random file names. Location and device data (EXIF, including GPS coordinates) are removed from every photo.
- Backups are encrypted on the server before they leave it; only we hold the key that can decrypt them.
- Access to the servers is limited to us, with key-based authentication.
- On your phone, the app keeps a copy of your profiles and recent entries so it also works offline. This copy is protected by your device's own security (screen lock and device encryption), not by extra encryption in the app. The sign-in token is kept in the system's secure storage (Keychain on iOS, Keystore on Android). Signing out or deleting your account clears the copy on that phone; other signed-in phones clear theirs the next time they connect.
- PDF reports that you create in the app (Lifetime) are generated on your phone. We do not receive them; you decide whether and with whom you share them.
- The home screen widget (Android, Lifetime) shows your current weight and the last 30 days on your phone’s home screen. Its data is prepared on the phone from the app and is not sent anywhere; anyone who sees your screen can see it, so you can hide the values in Settings or remove the widget.
- Health Connect (Android, optional): if you turn it on, the app reads only weight entries from Health Connect and adds them to your journal, and/or writes your weigh-ins to Health Connect. Nothing else is read. Imported weigh-ins are treated like the ones you enter yourself (with an account, they are synced to your account). You can turn each direction off in Settings and revoke access in Health Connect at any time.
5. Where your data is stored and who helps us
We do not sell your data, we do not show ads and the apps contain no analytics or tracking SDKs. Error reports go to our own server (errors.nextim.app), not to a third party. We use a few service providers, each only for what is listed:
- Hébergement OVH Inc. (OVHcloud group, Canada) — hosting. The service runs on a server in Germany; encrypted backups are kept in France (Roubaix). Both are in the European Union. Canada is recognised by the European Commission as providing an adequate level of data protection.
- Proton AG (Switzerland) — sends the app's emails (account confirmation, password reset). Switzerland is recognised by the European Commission as providing an adequate level of data protection.
- Google and Apple — only if you use Sign in with Google or Sign in with Apple, and to process in-app purchases through Google Play and the App Store under their own privacy policies. To confirm a purchase and to learn about refunds, our server sends Google Play the purchase token. On iPhone, the app sends our server the transaction signed by Apple, and Apple notifies our server of refunds.
- Cloudflare — manages our domain's DNS. It only answers lookups for our domain's addresses and does not see the content of your data or the traffic between the app and our server.
6. How long we keep it
- Your data stays in the service until you delete it or your account.
- When you delete a single entry, measurement, photo, dose, treatment period or profile, it disappears from your journal immediately and is permanently deleted from our database after 30 days. The files of deleted photos — including those in a deleted profile — are erased immediately.
- When you delete your account, your profiles, entries, measurements, photos, treatment journal, sign-in tokens, password-reset links and web sessions are removed from the live database immediately. Encrypted backups expire automatically within 90 days.
- Server logs are deleted after 14 days.
- Error reports are deleted after 30 days.
- Purchase records are deleted together with your account. The purchase itself remains in your Google Play or App Store account, which also issues the receipt.
7. Your rights
You have the right to access your data, correct it, delete it, restrict or object to its processing, receive a copy in a portable format and withdraw your consent. Most of this you can do directly in the app; for anything else — including a free copy of all your data — write to suport@nextim.app from the address of your account. We answer within one month.
You can also complain to the Romanian data protection authority, ANSPDCP (www.dataprotection.ro), or to the authority in the country where you live.
How to delete your account: see Delete your account.
8. Children
Weight Journal is not intended for children under 16, and we do not knowingly collect their data.
9. Changes
If we change this policy in a way that matters, we will tell you in the app or by email before the change applies. The date at the top shows the latest version.