Privacy policy

01Who we are

GalaxyXplore is a brand of Ovongiz AS, a company registered in Norway. Ovongiz AS is responsible for your personal data (the ‘data controller’ under the GDPR). Our company details are on the legal information page.

02What this policy covers

This policy covers everything GalaxyXplore runs:

The GalaxyXplore Watch app has its own privacy policy, which covers the data the app keeps. We don’t receive that data, except what you choose to share through your phone’s Health app.

• galaxyxplore.com and its shop, including GXS3 orders
• The GalaxyXplore Nutrition app and nutrition.galaxyxplore.com
• Family, organisation and partner plans, invitations, the referral programme and campaign offers
• The emails we send you: order and shipping updates, invitations, replies to your messages, and the lists you join

03Your orders

When you buy a GXS3 we process the details Stripe collects for payment and shipping: name, email, phone, billing and shipping address, and payment status. We use them to fulfil the order, send the receipt and owner code, and handle returns or warranty.

• Stripe is our payment processor. Card details stay with Stripe.
• We keep order records as required for accounting and consumer-rights claims.

04Shopping account

A shopping account stores your verified email, name, language, date of birth and country for eligibility, saved delivery addresses, wishlist and links to your orders. Signing in with a verified email links eligible guest orders; an email address on its own never unlocks Nutrition Pro or other app access.

Deleting the account deactivates it immediately. You can restore it for 90 days, after which personal account data is erased. Orders and invoices required by bookkeeping law remain as accounting records with the account link removed. Deleting the account doesn’t cancel a subscription: Account management explains how to cancel first.

05Back-in-stock list

If you ask to be told when a GXS3 colour is back, we keep your email, the country you picked, your browser language, the colour and when you agreed. We use it for one thing: one email when that colour is available again.

You must confirm via the link we send (double opt-in). Unconfirmed entries are deleted after 30 days. Every email includes a link to leave; leaving deletes your address. We never share the list or use it for ads. When you confirm, the GalaxyXplore team gets one email with your address, so we know about the new sign-up.

06GalaxyXplore news

If you sign up for GalaxyXplore news at the bottom of our pages, we keep your email address, your browser language and when you agreed. We use it to send you news now and then: new products and offers.

You must confirm via the link we send (double opt-in). Unconfirmed entries are deleted after 30 days. Every email includes a link to leave; leaving deletes your address. We never share the list or use it for ads. When you confirm, the GalaxyXplore team gets one email with your address, so we know about the new sign-up.

07Cookies

We use only essential cookies: to keep you signed in and to remember your cart and saved products. We don’t use cookies for analytics, tracking or advertising. The cookie policy names each cookie and how long it lasts.

08Order and support email

We email order confirmations, shipping updates and replies to support messages you send. Transactional mail is not marketing.

09Messages to us

When you write to us through the contact form, we keep your message to answer you. We keep it for up to 12 months, unless we need it longer to resolve an ongoing request or meet a legal obligation. Each message also goes by email to our support inbox and to the GalaxyXplore team, so someone can answer it.

10Your Nutrition account

Email, sign-in method (Apple, Google or email link), country and date of birth. We need these to run your account and to check the age rules for your country.

11What you log

Meals, photos you choose to scan, weight, plans, check-ins, allergies and goals. This is health data. We process it only with your explicit consent, asked separately in the app, and you can withdraw it at any time.

12Meal photos and AI

When you scan a meal, our server sends the photo to our AI service provider, without location data and without your name or email. The AI names the food and estimates the portion; calories and macros come from our food database, worked out by fixed formulas. The Privacy Centre in the app shows what the AI saw for each meal.

13Purchases

Which plan you have and until when. Card details stay with Apple, Google or Stripe; we never see them.

14Crash reports

Technical details when the app crashes, without your meals or health data. They go to our own error monitoring, described under Error reports and logs.

15Product analytics

Optional: anonymous usage counts, only if you switch them on. Always off for teens. They go to our own server with a random install number, never your account, and are deleted after 13 months. Switching them off deletes what your phone sent.

16Launch list

If you sign up on our website for the launch email, we keep your email address, the country you picked, your browser language and when you agreed. We use it for one thing: to tell you when GalaxyXplore Nutrition is in the stores in your country. If you don't confirm within 30 days, we delete it. The link in every email takes you off the list and deletes your address at once. We never share it or use it for ads. When you confirm, the GalaxyXplore team gets one email with your address, so we know about the new sign-up.

17The GalaxyXplore Watch app

The GXS3 pairs with the GalaxyXplore Watch app. The app has its own privacy policy, which covers the data it keeps. We don’t receive that data, except what you choose to share through your phone’s Health app.

18What the Nutrition app reads (Nutrition Pro)

Steps, active energy and sleep, read from Apple Health or Health Connect, and only when the GalaxyXplore Watch app wrote them. We don't read heart rate, weight or workouts, and we never write to your Health app.

19Your GXS3 order

Buying a GXS3 is covered under Your orders.

20Invitations by email

We send an invitation by email when we invite a guest or an influencer to free access, and when the owner or an admin of a family or organisation plan invites you to a seat. The email holds a one-time link to confirm, never a code.

• What we keep: the invited email address, who invited you and why, and when the link expires (14 days after it is sent).
• Why: to send that one invitation and to give you the access once you confirm.
• Legal basis: our legitimate interest in giving the access the inviter asked for (GDPR Art. 6(1)(f)). It isn’t marketing: one email, no follow-ups and no tracking.
• How long: the address is kept in plain form only while the invitation is waiting. When you confirm, or the link expires or is withdrawn, we replace it with a one-way hash: a scrambled value that can’t be turned back into the address. We keep the hash with the invitation record to prevent misuse and to answer support questions.

21Referral programme

When you share your invite link and a friend accepts it, we record who invited whom, whether the friend paid, and whether a reward was given.

• What we keep: the link, the two accounts, the status of the referral, and one-way hashes of the friend’s email address and Apple or Google sign-in id.
• Why: to give your friend the discount and you the reward, and to stop self-referrals and repeat claims.
• Legal basis: the programme’s terms, which you accept when you take part (Art. 6(1)(b)), and our legitimate interest in preventing reward abuse (Art. 6(1)(f)).
• How long: the referral record while your account exists. The hashes stay after an account is deleted, so the same person can’t claim the friend’s discount again with a new account. They can’t be turned back into an email address.
• Never: no advertising or attribution tools are involved, and your friend never sees your email address.

22Family and organisation plans

On a family plan the owner pays and invites the people on it. On an organisation plan a company buys seats and its admins invite people. Partners can also receive seats from us for a set period.

• What we keep: the plan, who owns or manages it, the status of each seat, and a masked copy of the invited address (for example a•••@example.com). For organisations we also keep the organisation’s name, billing email and VAT number for its invoices.
• Who sees what: owners and admins see only whether a seat is invited or active, and the masked address they invited. They never see your meals, body, health or nutrition data, or your account details.
• Why: to give each person on the plan Nutrition Pro, and to bill the plan.
• Legal basis: the contract with the person or organisation that pays (Art. 6(1)(b)), and our legitimate interest in running the seats for the people they invite (Art. 6(1)(f)).
• How long: seat records stay with the plan’s record, so we can answer billing questions. Invoices are kept as long as accounting law requires.

23Campaign offers

Some offers, such as a watch bundle for a limited time, have rules: you must be 18 or over, they are for new Nutrition Pro customers, and there is one per customer.

• What we keep: your confirmation at checkout that you are 18 or over, and a one-way hash of your email address with the offer, next to your order.
• Why: to apply the offer’s rules. We check each order against earlier orders in the same offer and against earlier Nutrition Pro purchases. An order that looks like a repeat, for example with the same delivery address or payment card, may be checked by a person before it ships.
• Legal basis: the contract for the offer (Art. 6(1)(b)), and our legitimate interest in preventing abuse of limited offers (Art. 6(1)(f)).
• How long: with the order records, as long as accounting and consumer law require.

24Who processes data for us

Every company below processes data for us under GDPR Art. 28.

• Stripe: payments and invoices on galaxyxplore.com
• An AI service provider: meal photo analysis, in the USA (see Data sent outside the EEA). You can ask us which provider it is.
• Apple and Google: App Store and Google Play purchases. We check each subscription with them on our own server; no other company sees it.
• Our server and email hosting providers
• Error monitoring and crash reporting, run on our own servers

25Error reports and logs

When something breaks on our website, in the app or on our servers, we record an error report so we can fix it. Our error monitoring runs on our own servers, so reports don’t go to an outside company.

• What we keep: the error, the page or feature, the app version, and a support code: a random reference that links a report to our records. If an error message shows you a support code, sending it to us helps us find the problem.
• What we leave out: names, email addresses, health values, food text, addresses, codes and passwords are removed before anything is logged. Account ids are hashed.
• Why and legal basis: to keep our services working and secure, our legitimate interest (Art. 6(1)(f)).
• How long: server logs for up to 30 days. Error reports are kept in our own error monitoring, on our own servers.

26Data sent outside the EEA

Meal photos you scan are analysed by our AI service provider in the USA. Before our server sends a photo, it removes its location data, and we never send your name or email. The transfer is covered by the EU’s standard contractual clauses and, where the provider is certified, the EU-US Data Privacy Framework. [FOUNDER: confirm the AI service provider’s data processing agreement and transfer basis]

Stripe may also process payment data in the USA, under the same kinds of safeguards.

27How long we keep it

Nutrition data: as long as you have an account. If you delete your data in the app, your account is switched off at once, you can restore it for 90 days, and then it is erased for good. Items you delete one by one can be restored for 90 days, then they are erased. A deletion email gives you a restore link that works on any device.

Orders and invoices are kept for the period required by Norwegian and EU accounting and consumer-law rules. Payment records are kept as long as accounting law requires.

Back-in-stock entries are removed when you leave or after the unconfirmed 30-day window. Messages sent through our contact form are retained for up to 12 months, unless they need to be kept longer to resolve an ongoing request or meet legal obligations. News sign-ups are removed when you leave or after the unconfirmed 30-day window.

Invitation emails: the plain address only while the invitation is waiting (the link works for 14 days); after that, only a one-way hash.

Referral records: while your account exists. One-way hashes of the friend’s identity stay after an account is deleted, to prevent reward abuse.

Family and organisation seats: with the plan’s record; invoices as long as accounting law requires.

Campaign checks (the 18+ confirmation and the hashed email address): with the order records.

Error reports and logs: server logs for up to 30 days. Error reports are kept in our own error monitoring, on our own servers.

Backups: deleted data can remain in our encrypted backups for up to 30 days, until those backups are deleted.

The Data retention page lists every period on one page.

28How we protect it

Every connection uses HTTPS. Backups are encrypted, database access is limited to what each part of the system needs, and our logs leave out personal data. Payments are handled by Stripe, which is certified to the card industry’s PCI DSS standard; we never store card numbers. The Data security page has the details. Report a suspected incident through the contact form.

29Your rights

You can see, correct, export and delete your data, ask us to restrict how we use it, object to how we use it, withdraw consent, and ask not to be subject to decisions made only by automated means. In the Nutrition app, export and delete are free on every plan, in the Privacy Centre. For anything else, write to us through the contact form and choose Privacy and my data. We answer within one month.

You can also complain to a data protection authority: Datatilsynet in Norway, the Garante in Italy, or the authority where you live. The GDPR and your rights page explains each right and how to use it.

30Children and teens

You need to be at least your country's age of digital consent (13 to 16) to have an account. Below it, sign-up is blocked and nothing is stored. Teens get safeguards: no weight-loss goals, no restrictive diets, and product analytics always off.

31Changes

If this policy changes in a way that matters, we tell you before it applies, in the app and on this page.