Privacy Notice

In short

Wenu — pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”).

• We process only the data needed to make the app work: your account and the content of your plans.
• No advertising, no profiling, no analytics or tracking tools.
• If you use voice or document reading, the text or the document goes to Anthropic (United States), which reads it for us and sends back the items to suggest to you: for documents we first ask for your consent.
• If you link Alexa, Amazon receives the questions you ask it about the plan and our answers, including the names of the diners.
• The data is stored on servers in the European Union, in Germany, and backup copies also stay in the Union.
• You can delete your account from the app at any time, and ask us for a copy of your data.

1. Who the data controllers are

The data controllers are, jointly (joint controllers, Art. 26 GDPR), Mauro Giuseppe Mazzola, Via Ferdinando Cafiero 9, 76121 Barletta (BT), Italy, tax code MZZMGS94C14L109B, and Alberto Cassano, Via Cesare Dante Cioce 21, 76121 Barletta (BT), Italy, tax code CSSLRT93S04L328B, who publish the app under the name Arè Labs. We have jointly determined the purposes and means of the processing and which of us does what; we answer your requests together, through the single address below, and you can in any case exercise your rights against each of us.

Email for any privacy request: arelabs.bt@gmail.com.

We have not appointed a Data Protection Officer (DPO): it is not mandatory for the type of processing we carry out.

2.1 Your account data

• your email address;
• your password, which we store only in encrypted form using a non-reversible algorithm: we cannot read it;
• if you sign in with Google or Facebook, the identifier the provider sends us and your profile name;
• the date of registration and of your last sign-in;
• security data: failed sign-in attempts and any temporary blocks;
• the plan you have chosen as your favorite;
• the version of the Terms you accepted and of the Notice that was shown to you, with the date.

2.2 The content of your plans

• the name of the plan; meals, courses, dishes, ingredients, quantities and units of measurement;
• the names of the diners and what each of them eats;
• the shopping list: the items, which ones you ticked off and the date on which you ticked off each item;
• the members of the plan and their roles; invitations, with the email address of the invited person;
• the location of the plan: the city you choose and its rounded coordinates (about one kilometer);
• the food sticker album: for each person eating, which ingredients they have tasted, how many times and when, and which stickers you have put “out of the album” (without the reason);
• the dish history: which dishes were in the plan and for how long, with their ingredients.

2.3 Technical data

• When you use the app, our servers record the IP address, the date and time, the address of the request and the type of device or browser (server logs).
• The application logs record the identifier of the user and of the plan involved in an operation, without your email address.
• Sign-in sessions are managed with codes stored in encrypted form, which expire.
• To stop abuse, such as creating accounts in bulk, we count the registrations and the readings with artificial intelligence that come from the same IP address: the counters expire within one day.
• Notifications: reminders are scheduled by your phone (section 2.4). We do not use notifications sent by the server and, apart from the updates code below, we do not collect device identifiers; if we ever use them, we will update this notice.
• App updates: when the app opens or comes back to the foreground, it asks Expo, which distributes new versions for us, whether there is one. The request contains the IP address, the operating system, the app version and a random code created at installation, which contains no data about you and is used only to distribute updates and to count them.

2.4 The data on your phone

The app keeps a copy of the plan and of your preferences on the device, and the session code in a protected area of the system. They are deleted when you sign out of your account or uninstall the app.

Reminders you set are an exception — for which dish or ingredient, on which day and at what time —: they stay on the phone and do not reach our servers. When you sign out, the scheduled notifications are deleted but the settings remain, so you find them again when you sign back in; they are deleted when you delete your account from that phone or uninstall the app.

2.5 What we do not collect

Payment data, GPS location, contacts. Photos and health data only if you choose to have a document read (section 3.3), and only for the time of the reading. We ask you not to write health information (for example diagnoses or allergies) in the text fields: the app does not need it.

3.1 Diners

The names of the diners, the information about what they eat and the tastings recorded in the album concern people who often do not have an account, for example your children. You enter them yourself, under your own responsibility: make sure you are entitled to do so and inform the people concerned; for a minor, you may do so if you exercise parental responsibility over them. We recommend using a first name or a nickname.

We cannot inform these people directly because we do not have their contact details; we process their data only to provide you with the Service.

3.2 If you have received an invitation

Someone has invited you to share a plan by entering your email address. We use it only to send you the invitation and, if you register, to link you to the plan. If you do not want to receive invitations or want us to delete your address, write to us. The legal basis is the legitimate interest, ours and that of the person who invited you, in sharing a plan (Art. 6(1)(f) GDPR).

3.3 Voice and document reading

You can fill in the week by dictating it, writing it or uploading a document (a diet, the canteen menu, a recipe, a photo of a menu). Speech recognition is done by your phone — on Android by Google’s service, which may go through Google’s servers under its own rules —: only the text reaches us.

We send the text, the document or the photos to Anthropic PBC (United States), which reads them with the Claude model and sends back the items of the week. The items are only suggestions: they enter the plan when you confirm them.

• What is sent: the dictated or written text, or the document or the photos (the phone shrinks them and removes the location data); the names of the plan’s diners; the day of the week and today’s date.
• What is not sent: your email, your account name, the plan’s place, your other plans.
• Anthropic does not use this data to train its models and deletes it within 30 days (up to 2 years only for content flagged by its safety systems).
• We do not keep the document: it is never written to disk or to the database. The items read stay on the server for at most one hour, for the preview.
• A diet may contain health data: for documents we first ask for your explicit consent, which you can withdraw from the Profile at any time. Without it, voice, text and the rest of the app work all the same.

The text of the consent to document reading

3.4 The Alexa link

If you have a device with Alexa, you can link your account and ask it out loud what is in the plan. The link is optional and you set it up yourself, from the Profile in the app or from the Alexa app.

• What the skill reads: to answer your questions, its program — which runs on Amazon’s servers — reads, with read-only access, your favorite plan together with the basic data of your account (such as your email and pending invitations). It does not read the food sticker album or the content of your other plans.
• What Amazon receives: your questions — Alexa itself does the speech recognition — and our answers, which may contain the names of the diners, dishes, ingredients and quantities. To recognize them when you say them, we also send it the names of the diners and of some dishes and ingredients of the plan.
• Amazon processes this data as an independent controller of the Alexa service, according to its own rules.
• If you link Alexa from the app, you sign in to Amazon: Amazon gives us a temporary code, which we use only to enable the skill on your Amazon account and do not keep.
• The link stays active until you unlink it, from the Profile (“Unlink Alexa”) or from the Alexa app: from then on Alexa stops reading the plan within an hour. If unused, the link expires after one year.

4. Why we process the data and on what legal basis

• Creating and managing the account, making the app work, sharing plans (data in sections 2.1, 2.2 and 3): performance of the contract (Art. 6(1)(b) GDPR).
• Service emails — address verification, password reset, invitations (email addresses): contract (point b); for invitations to people without an account, legitimate interest (point f).
• Security: preventing unauthorized access, abuse of the Service and attacks, detecting and fixing faults (data in section 2.3 and security data): legitimate interest in protecting the Service and its users (point f).
• Reading what you dictate or write to suggest the items of the week (section 3.3): performance of the contract (point b). Reading the documents you upload, which may contain health data: your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR), which you can withdraw at any time.
• Answering the questions you ask Alexa, if you link it (section 3.4): performance of the contract (point b).
• Proving acceptance of the Terms and the consent to document reading (version and date): contract and legitimate interest (points b and f).
• Complying with legal obligations and requests from authorities (the necessary data): legal obligation (point c).
• Defending our rights in a dispute (the necessary data): legitimate interest (point f).

We ask for consent for one processing only, document reading (section 3.3): separately, at the first document, and you can withdraw it at any time from the Profile. We do not carry out advertising, profiling or statistics.

For processing based on legitimate interest, you can ask us how we balanced our interest against your rights, and you can object (section 9).

5. What is mandatory

Your email address and password (or signing in with Google or Facebook) are necessary to create the account: without them, we cannot provide the Service. All other data is optional.

6. Who we share the data with

Providers that process data on our behalf (data processors, Art. 28 GDPR), bound by a contract:

• servers and database: Contabo GmbH, in Germany;
• sending emails: Brevo, in France;
• backup copies: Cloudflare, Inc. (United States), in a storage that keeps the data in the European Union;
• app updates: Expo (650 Industries, Inc., United States), which receives the IP address and the installation’s random code (section 2.3);
• the Alexa skill’s program, if you link Alexa (section 3.4), which Amazon hosts on its servers in the European Union, in Ireland;
• voice and document reading: Anthropic PBC (United States), which receives the text, the document or the photos and the names of the diners, and uses them only to send back the items to suggest to you (section 3.3), under the data processing agreement (DPA) included in its commercial terms, accepted on 24 October 2026.

• The other members of your plans, who see the content of the plans you share with them.
• Google and Meta, if you sign in with their account: they send us your email, name and profile identifier in accordance with their privacy notices, and they are independent controllers of the processing they carry out in their sign-in service.
• Amazon, if you link Alexa: it receives your questions, our answers and the names it needs to understand you (section 3.4), and processes them as an independent controller of the Alexa service.
• MET Norway receives from our servers only the rounded coordinates of the plan, without any data that identifies you.
• Authorities, when required by law.

We do not sell or transfer data to third parties for commercial purposes.

If you create the week postcard and share it, the image leaves the Service by your choice, and whoever receives it (for example WhatsApp) processes it according to their own rules. The postcard does not contain the names of the diners.

7. Transfers outside the European Union

Our servers are located in the European Union, in Germany, and the backup copies and the Alexa skill’s program also stay in the Union (in Ireland). If a provider processes data outside the Union (for example in the United States), the transfer is based on an adequacy decision of the European Commission — such as the EU-US Data Privacy Framework for certified companies — or on standard contractual clauses (Arts. 45 and 46 GDPR). You can ask us for a copy of the safeguards adopted.

Anthropic processes in the United States what we send it for voice and document reading: the transfer is based on the standard contractual clauses of its data processing agreement. Expo distributes updates from the United States: it participates in the EU-US Data Privacy Framework, and its terms also include the standard contractual clauses. Cloudflare, Inc., which keeps the backup copies in the Union, is a US company that participates in the EU-US Data Privacy Framework.

8. How long we keep the data

• Account: until you delete it.
• Account registered and never verified: 30 days from registration, then deleted.
• Plan content: as long as the plan exists.
• Archived items (dishes, ingredients) and deleted plans: 7 days, so that they can be restored; then deleted.
• Invitations: as long as the plan exists, as a record of the sharing; deleted with your account.
• Food sticker album: as long as the person eating and the plan exist.
• Dish history: up to 24 months after the dish stops being in the plan.
• Sign-in sessions: at most about 30 days from the last renewal.
• Alexa link: until you unlink it; if unused, it expires after one year.
• Codes to verify your email and reset your password: until they expire (24 hours and 1 hour), then deleted.
• Record of accepted Terms and of the consent to document reading: as long as the account exists.
• Voice and document reading: we do not keep the document, the items read stay on the server for at most one hour, and the monthly count of readings: 12 months. Anthropic keeps texts and documents for up to 30 days.
• Counters of registrations and readings per IP address: at most one day.
• Server logs: 14 days.
• Backup copies: 7 days: deleted data disappears from backups within this period.

9. Your rights

You can ask us at any time to:

• access your data and receive a copy of it (Art. 15);
• correct it (Art. 16);
• delete it (Art. 17);
• restrict its processing (Art. 18);
• receive it in a structured, machine-readable format, including to transfer it to another service (portability, Art. 20);
• object to processing based on legitimate interest (Art. 21).

How. You can do many things directly in the app: edit or delete plans and content, leave other people’s plans (Table → Leave plan), unlink Alexa, withdraw the consent to document reading and delete your account (Profile → Delete account). For everything else, write to arelabs.bt@gmail.com from your account’s email address. We reply within one month, extendable by two more months in complex cases (we will let you know), free of charge.

For portability, we send you a file with the data of your account and of the plans you own, with your roles and your invitations. The data of the other members of shared plans is not included.

Complaints. If you believe the processing infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma) or with the authority of the EU country where you live or work.

Italian Data Protection Authority (Garante per la protezione dei dati personali)

10. If you delete your account

• From the app: Profile → Delete account, with double confirmation. Or by writing to us from your account’s email address.
• We delete: the account, sessions, device identifiers and preferences, the record of accepted Terms and of the consent to document reading, the count of readings, your roles in other people’s plans, the invitations you sent and those you received, and the plans you own that have no other members. The Alexa link stops working at once, and on the phone from which you delete the account the reminders are deleted too.
• Shared plans you own pass to the member who accepted the invitation longest ago (with priority to editors): the content you entered in them remains with the other members.
• Backup copies are overwritten within 7 days and logs within 14 days.
• Instructions are also available at https://wenuplanner.app/en/delete-account.

How to delete your account and data

11. Minors

The Service is reserved for adults. We do not knowingly collect data from minors as users: if you believe a minor has created an account, write to us and we will delete it. Minors may appear as diners, entered by a parent (section 3.1).

12. How we protect the data

Encrypted connections (HTTPS); passwords stored only as a non-reversible hash; session codes stored in encrypted form and with an expiry; access to plans only for their members; temporary block after failed sign-in attempts; limits on registrations and readings from the same network; logs without email addresses; backup copies.

13. Automated decisions

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR). The app’s suggestions — for example the “Week balance” — are informational calculations that you can ignore. The items suggested by voice and document reading are drafts too: they enter the plan when you confirm them.

14. Cookies

The app does not use profiling or statistics cookies. The web pages of the legal documents do not use cookies. When you sign in with Google or Facebook, our server uses a technical session cookie, necessary to complete the sign-in, which does not require consent.

15. Changes to this notice

If we make substantial changes to this notice, we will let you know in the app. Previous versions are available on request.

16. Contact

Arè Labs: Mauro Giuseppe Mazzola, Via Ferdinando Cafiero 9, and Alberto Cassano, Via Cesare Dante Cioce 21, 76121 Barletta (BT), Italy — arelabs.bt@gmail.com

Terms and conditions