Privacy Policy
Who we are
The controller of your data is Izhar Perlman, Portuguese tax number (NIF) PT216828023, Largo da Cutelaria 8, 2550-354 Casais de Montejunto, Portugal (“we”). For any question about your data, write to izhar1@pm.me.
What data we process
- Email: to create your access and send your analysis. We don’t ask for your name.
- Initial check: the age, height and weight you enter before paying are used only to confirm the programme is suitable for you and are not stored. We keep only the outcome: confirmation that you are 18 or over and a calculated limit for the weight-loss question.
- Questionnaire answers: eating habits, gender, goals and, if you give them, health information (health conditions and medication). Health information is a special category of data.
- Your analysis, generated from your answers.
- Account data: password (stored encrypted, never as plain text), language, units, login and consent dates.
- Payment data: amount, currency, status and Stripe references. We never see or store your card details.
- Technical data: your IP address is used only as an irreversible code to limit abusive attempts and is deleted after 2 days. Our host keeps technical server access logs, as with any website.
Why we use it and on what basis
- Providing the service you bought (account, questionnaire, analysis, support): performance of a contract.
- Processing your health answers to create the analysis: your explicit consent, given before payment. You can withdraw it at any time (see “Your rights”); without it we cannot create the analysis.
- Keeping payment records: legal obligation (accounting and tax).
- Protecting the site against abuse and fraud: legitimate interest.
We don’t use your data for advertising, we don’t sell it and we don’t use tracking tools.
Automated analysis
Your analysis is put together automatically from your answers, using texts written by our team. No decision with legal or similarly significant effects is made about you. You can ask for a person to review your analysis.
Who we share it with
- Stripe Payments Europe, Ltd. (Ireland), which processes the payment.
- Our hosting and email-delivery provider (Namecheap, Inc., USA), where the site and database run.
- Our email service (Proton AG, Switzerland), which receives a copy of the analyses we send, for customer support.
Where data is transferred outside the European Economic Area, this relies on a European Commission adequacy decision (such as for Switzerland) or on the Commission’s standard contractual clauses. We only share data with authorities when the law requires it.
How long we keep it
- Answers, analysis and account: 12 months after your analysis is sent (or after purchase, if the questionnaire is never completed). They are then deleted automatically.
- Payment records: as long as tax law requires (currently 10 years in Portugal), without your answers.
- If you start paying but don’t finish, your email is deleted after 30 days.
Your rights
You can ask for access to your data, correction, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest. You can withdraw consent at any time without affecting processing done before. Just write to izhar1@pm.me from your account email; we reply within one month.
You also have the right to complain to a data protection authority: in Portugal the CNPD (www.cnpd.pt), in the UK the ICO (ico.org.uk), or the authority in your country.
Cookies
We use one essential cookie, which keeps you logged in and is deleted when you close your browser. We use no analytics or advertising cookies. Stripe’s payment page uses its own cookies, described in Stripe’s privacy policy.
Security
The site uses an encrypted connection (HTTPS), passwords are stored encrypted, and the admin area requires a one-time code. No system is completely secure, but we take reasonable measures to protect your data.
Children
The service is only for people aged 18 and over.
Changes
If we change this policy, we will publish the new version here with its date. Last updated: 12 October 2026.