Privacy Policy

Last updated: 23 August 2026

Who processes your data

The data controller is Adolfo Orlandini. You can write to us at adolfoorlandini@icloud.com about anything to do with your data.

What we collect

Only what the app needs to work. We don't buy data from anyone and we don't pull it from other sources: everything we hold, you gave us by using Amaia.

To have an account: your email address and a password. We never see or store the password; it is handled by Firebase Authentication, from Google, and it always travels encrypted.

To adapt the plan to you (health data): the type of birth you had, how many weeks postpartum you were when you signed up, and the symptoms you tell us about during onboarding. This is health data, which is why we ask for your explicit consent before collecting it.

What you generate as you use the app: which sessions you complete and when, which week and day of the plan you are on, your streak, your total sessions, and the meals and notes you write in the nutrition diary.

Technical data: an internal identifier for your account and the dates it was created and last accessed.

What we don't collect: we don't ask for your real name, your address, your phone number or your location. We don't access your camera, your microphone, your contacts or your photos. We don't use advertising or tracking cookies.

What we use it for, and our legal basis

We use your email and password to give you access to your account, because without that there is no contract to perform (article 6.1.b GDPR).

We use your health data and your progress to build and adjust your twelve-week plan, and we do so with your explicit consent (articles 6.1.a and 9.2.a GDPR). You can withdraw it whenever you want; doing so means no longer using the personalised part of the app.

We use aggregated, anonymous data to understand what goes wrong and improve Amaia, on the basis of our legitimate interest (article 6.1.f), always in a way that cannot identify you.

Who else sees your data

Nobody buys it and nobody rents it. We do not sell or hand over your data to third parties for commercial purposes, and we do not do advertising profiling.

We do use an infrastructure provider: Google Ireland Limited, through Firebase Authentication and Cloud Firestore, which is where your account and the app's data are stored. Google acts as a data processor and is bound by the European Commission's standard contractual clauses. You can read their policy at https://firebase.google.com/support/privacy.

Servers may sit outside the European Economic Area. When that happens, the transfer relies on the standard contractual clauses approved by the European Commission.

We may also have to hand over data if a competent authority requires it by law.

How long we keep it

For as long as your account is open. If you delete it from within the app, we erase your profile, your completed sessions and your nutrition diary within a maximum of 30 days, except for anything we are legally obliged to keep.

If you stop using Amaia without deleting your account, we will email you before removing it for prolonged inactivity.

What you can do with your data

You have the right to access it, to correct it, to erase it, to restrict or object to its processing, to take it with you in a machine-readable format, and to withdraw your consent at any time.

To exercise those rights, write to adolfoorlandini@icloud.com. We will reply within one month at the latest. If you think we have not done things properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Inside the app you also have a button to delete your account in Settings, which does the same thing without having to write to us.

Security

Everything travels encrypted (TLS) and is stored encrypted at rest on Google's servers. The database access rules are written so that each user can only read and write her own documents: not even another Amaia user can see your data.

Even so, no system is infallible. If a breach ever affected your data, we would tell you and notify the AEPD within 72 hours, as the law requires.

Minors

Amaia is intended for people over 18. We do not knowingly collect data from minors. If we detect an account belonging to someone under age, we delete it.

Changes

If we change this policy, we will update the date above and let you know inside the app before any important change takes effect.