PRIVACY POLICY
Last updated 6 November 2026
Who is responsible
Eat More Plants AS is the controller of the personal data collected on eatmoreplants.no and in the Eat More Plants app. This policy explains what we collect, why, who we share it with and what rights you have.
Company: Eat More Plants AS
Organisation number: 923 554 513
Email: eatmoreplantsas@gmail.com
If you have questions about privacy, or want to use your rights, send us an email.
What we collect and why
We only collect what we need to give you the recipes, the app, the membership and the newsletter. We never see your card details; the payment provider handles them.
Free account: name, email and login details, to give you access to free recipes. Basis: contract (GDPR art. 6 b).
Membership: name, email, plan, payment status and invoices, to give access to all recipes, invoice and keep accounts. Basis: contract (b) and legal obligation (c).
Favourites: which recipes you saved, to show them to you. Basis: contract (b).
Newsletter: email, language and whether you open the emails, to send new recipes and offers. Basis: consent (a).
Chat, contact form and email to us: name, email and your message, to reply to you. Basis: legitimate interest (f).
Visiting the website: IP address, browser, device and pages viewed, for operation and security. Basis: legitimate interest (f).
Analytics: how you use the site, to improve it. Basis: consent (a).
Advertising: cookies and ad IDs, to show ads through Google AdSense. Basis: consent (a).
You can withdraw consent at any time. This does not affect processing that took place before you withdrew it.
The app
The app uses the same account as the website. You can use the app without an account, but then favourites, the shopping list and My Week are only stored on your phone.
Account and login: name and email, also when you log in with Apple or Google. The Apple login is checked by our website. Basis: contract (b).
Purchases in the app: you pay through the App Store or Google Play, and we never see your card details. RevenueCat records which subscription you have, when it renews or expires, and an anonymous user ID, or your member ID when you are logged in. This is needed to give you access, restore purchases and give the same access on the website. If you use the app without logging in, we remember which anonymous RevenueCat purchase IDs belong to your membership, so you keep access on the website. This is deleted when you delete your account. Basis: contract (b).
Favourites and shopping list: stored on your phone, and in your account when you are logged in, so you have them both in the app and on the website. Basis: contract (b).
My Week: the plants in your bowl, which recipes you marked as made and how many servings, fibre per day, your weekly plan and your daily fibre goal. Stored on your phone, and in your account when you are logged in, and only you can see it. Only the current week is kept: the bowl and the plan empty every Monday. The plant and fibre numbers come from the recipes. We do not collect health measurements, and the app is not connected to Apple Health or Google Fit. Basis: contract (b).
Move and videos: your favourite sessions, and that you have seen the note before your first session, are stored on your phone, and favourites also in your account when you are logged in. Videos are streamed from Wix. We do not collect health or exercise data. Basis: contract (b).
Only on your phone: language, Metric/US, when you accepted the terms and when you last saw a membership reminder. This is not sent to us.
The app has no tracking, no analytics and no ads.
Cookies
We only use strictly necessary cookies without consent. Everything else requires you to say yes in the consent banner, and you can change your choice at any time through “Cookie settings” at the bottom of the page.
Necessary (Wix): login, security and remembering your consent. No consent needed.
Functional (Wix): language and settings. Consent needed.
Analytics (Wix): which pages are visited and for how long. Consent needed.
Advertising (Google AdSense): ad IDs, ad measurement and personalised ads. Consent needed.
Advertising consent is collected through Google’s consent message. If you say no, you will see fewer, non-personalised ads. Read how Google uses data at policies.google.com.
Who we share data with
We never sell personal data, and we do not use automated decision-making or profiling. We only share it with providers that help us run the website, and with authorities when the law requires it.
Wix.com Ltd.: website, member accounts, favourites, shopping list, My Week, videos and audio, newsletter, chat and analytics. Israel, EU and USA.
RevenueCat, Inc.: records purchases in the app and gives access. USA.
Apple and Google: take payment for purchases in the app, and handle the login if you log in with Apple or Google. They are controllers in their own right under their own terms. EU and USA.
Membership payment provider (through Wix): takes payment for the membership. EU/EEA and USA.
Google Ireland Ltd. / Google LLC (AdSense): shows and measures ads. EU and USA.
Accountant and auditor when needed: bookkeeping under Norwegian law. Norway.
Transfers outside the EEA: Israel has an EU adequacy decision. Data sent to the USA goes to companies certified under the EU-US Data Privacy Framework, or is protected by the EU Standard Contractual Clauses (SCC).
How long we keep data
Account, favourites and shopping list: until you delete your account, or it has been inactive for 3 years.
My Week: only the current week. It empties every Monday, and is deleted when you delete your account.
Purchases in the app: at RevenueCat until you delete your account. Apple and Google keep the purchase history under their own rules.
Membership and invoices: 5 years after the end of the financial year (Norwegian Bookkeeping Act).
Newsletter: until you unsubscribe.
Chat and email: 12 months after the last contact.
Cookies: from the end of the session up to 13 months.
Your rights
Email us at any time to use your rights. We reply within 30 days.
Access: find out what we store about you and get a copy.
Rectification: have incorrect data corrected.
Erasure: have your data deleted, unless the law requires us to keep it.
Restriction: ask us to pause the processing for a period.
Portability: get your data in a machine-readable format.
Objection: object to processing based on legitimate interest.
Withdraw consent: unsubscribe through the link in every newsletter, and change cookie choices through “Cookie settings” at the bottom of the page.
You can also edit and delete your account yourself when logged in, and in the app under Profile > Delete account. This also deletes the data at RevenueCat. A subscription bought in the app must be cancelled by you in the App Store or Google Play.
If you believe we process your data unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet. We appreciate it if you contact us first.
Children, security and changes
Children: You must be at least 16 to create an account or sign up for the newsletter. If we find that we hold data about someone under 16 without parental consent, we delete it.
Security: The website and the app use an encrypted connection (HTTPS), and the app login is stored encrypted on your phone. Only we have access to the data in the dashboard, and our providers are bound by agreements to protect it.
Changes: We update this policy when we change how we process data. The date at the top shows when it was last changed. For larger changes we will let you know by email or on the website.
