Data retention

01Data retention

We retain your personal data for as long as necessary to provide our services and fulfil our obligations to you.

Order and invoice records are kept for the periods required by applicable Norwegian and EU accounting and consumer-protection laws.

Account data is retained while your account is active and, where necessary, for as long as required to complete the services you have requested. When the data is no longer needed, it is deleted or anonymised unless a longer retention period is required by law.

Messages sent through our contact form are retained for up to 12 months, unless they need to be kept longer to resolve an ongoing request or meet legal obligations.

Nutrition data: kept for as long as you have an account, except that meals (with their photos), body days and weigh-ins older than 2 years are deleted automatically. When you delete a single meal or weigh-in, it is removed from our servers at once and cannot be restored.

Photo records: the short technical record of a photo is deleted with its photo.

Searches that found nothing: the words searched, unknown barcode numbers and food names from photo scans that our database didn’t have are kept without who searched, with no time limit. We use them to add foods to the GalaxyXplore food database.

Deleted accounts: when you delete your account it is switched off at once. You can restore it for 90 days; then your account and personal data are erased for good.

Invitation emails: the invited address is kept in plain form only while the invitation is waiting (the link works for 14 days). When it is confirmed, expires or is withdrawn, only a one-way hash of the address is kept, to prevent misuse.

Referral records: kept while your account exists. One-way hashes of the friend’s email address and sign-in id stay after an account is deleted, so the same person can’t claim the friend’s discount twice.

Family and organisation seats: the seat status and the masked invited address are kept with the plan’s record. Invoices are kept as long as accounting law requires.

Campaign checks: the 18+ confirmation and the hashed email address used for one-per-customer checks are kept with the order records, as long as accounting and consumer law require.

Error reports and logs: server logs are kept for up to 30 days. Error reports are kept in our own error monitoring, on our own servers.

Backups: deleted data can remain in our encrypted backups for up to 6 months, until those backups are deleted.

Email lists: unconfirmed back-in-stock and launch-list sign-ups are deleted after 30 days. Leaving a list deletes your address at once. Optional product analytics from the app are deleted after 13 months.

What we keep and why is in the privacy policy.