Privacy

Last updated on 13 November 2026

Mafi Pal helps you live healthier. For that you tell Mafi things about yourself, and some of them concern your health. Here is what we keep, what for, who helps with it and how you remove it again. Mafi Pal is made by Danny de Kruijk.

What we keep

• An account without a login. The app creates an anonymous account when it first starts. If you sign in with Apple, we keep the identifier Apple gives us and, if you share it, your email address, so your data comes back on another device.
• What you tell Mafi when getting to know each other. Your first name, year of birth, height, weight, goals, how you eat and move, your daily rhythm, and what you choose to say about your phase of life, complaints and conditions. All of it is optional except what is needed to make a plan.
• Your days. How much water you drank, today's steps if you let them be counted, what you ate with Mafi's estimate, your workouts and walks, your weight if you note it, what was different on a day, and your evening look back.
• Your shopping list and recipes.
• Your subscription. Whether you have one and until when. Payment goes through Apple; we see no payment details.
• A message you send us. If you write to us through the form on the website or by email, we keep your name, email address and message in our mailbox so we can answer. The form is not linked to your account in the app.
• What helps against misuse. Per account we keep track of what the use of the AI service has cost. When an account is created we keep, apart from that account, a scrambled print of the network address, to see whether one source creates a great many accounts. That print is erased after a month.

What we do not keep

• Photos of your meal. A photo is looked at to estimate what is on the plate and then discarded.
• Where you are. If you switch the weather on, the app sends a position rounded to about ten kilometres to ask for the weather. That position is used and not stored.

What we use it for

Only to guide you: making your day plan, suggesting food and movement that suit you, and showing how things are going. Because some of this data concerns your health, we only use it with your consent. You give it by entering the data, and you withdraw it by erasing the data or deleting your account.

Who helps us

• OpenAI, only if you give permission in the app for thinking along with AI. OpenAI then writes your menu and recipes, looks at the photo of your meal and helps Mafi answer your questions. For that it receives a description of your answers without your name, date of birth or account, and your question, note or photo. You withdraw the permission under Profile; your day plan keeps working.
• Open-Meteo provides the weather for the rounded position. It receives no data about you.
• Hetzner hosts our server, in the European Union.
• Cloudflare sits between your device and our server: it keeps attacks out and makes the website fast. Everything the app and the website send travels encrypted through Cloudflare to our server; Cloudflare does not keep it. It also delivers the messages from the contact form.
• Apple handles sign-in and purchases.

What we do not do

Mafi Pal shows no adverts, uses no trackers and does not sell or share data for advertising. Advice is never influenced by a company paying for it.

Not a medical device

Mafi is a coach for a healthy lifestyle. He makes no diagnoses and does not replace a doctor. What you enter about your health he only uses to make your plan safer and more fitting.

For adults

Mafi Pal is meant for people of eighteen and over.

Viewing, taking along and deleting

In the app, under Profile and then My data, you make a copy of everything we keep about you, and you delete your account. Deleting erases everything at once and for good. Backups that still contain your data are overwritten within fourteen days.

Your rights

You have the right to see your data, have it corrected, take it with you and have it erased, and to withdraw your consent. Most of it you arrange yourself in the app. For anything else, email [email protected]. If you disagree with us, you can lodge a complaint with the Dutch Data Protection Authority or the authority in your own country.