Privacy Notice (GDPR)
Dayfast — Intermittent Fasting Tracker For Users in the European Economic Area and United Kingdom
Effective date: August 04, 2026 Last updated: August 04, 2026
1. Introduction
ICI Tech Teknoloji A.Ş. processes your personal data in compliance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and, where applicable, the UK GDPR.
| Data Controller | ICI Tech Teknoloji A.Ş. |
| Website | https://dayfast.app/ |
| app@icitech.com.tr | |
| Country of establishment | Republic of Turkey |
EU Representative (Article 27 GDPR): We are in the process of designating an EU representative per Article 27 GDPR. Updated contact details will be published at https://dayfast.app/en/privacy once appointed.
Data Protection Officer: We do not currently meet the mandatory DPO threshold under Article 37 GDPR. Contact: app@icitech.com.tr.
Medical Disclaimer: Dayfast is not a medical device, diagnostic tool, or health treatment. The app and all its content are for general informational and personal tracking purposes only and do not constitute medical advice, diagnosis, or treatment. Intermittent fasting is not suitable for everyone. Consult a healthcare professional before starting a new dietary regimen — especially if you are pregnant or breastfeeding, under 18, have diabetes or blood sugar disorders, have a history of eating disorders, or take medication. If you feel unwell during a fast, stop immediately.
2. Fasting and Dietary Data — GDPR Considerations
Dayfast processes data about your fasting patterns, dietary notes, and nutritional habits. While fasting tracker data does not automatically qualify as special category health data under GDPR Article 9 in all cases, it may reflect information about your health and physical condition.
We apply heightened care to fasting and dietary data because:
- Fasting patterns may reveal health-related behaviours
- Dietary notes may contain medically relevant information
- Progress data may reflect physical health goals
We process this data on the basis of your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) where applicable) provided during account setup and first use. You may withdraw consent at any time via Settings → Privacy → Manage Consents.
3. Data We Process
Account information: Email address, password (hashed), optional display name and profile photo.
Fasting tracking data: Start/end times, total durations, plan selection (16:8, 18:6, custom), fasting history.
Nutrition and activity notes (optional): Meal notes, dietary entries, activity logs, water intake.
Progress and statistics: Daily/weekly graphs, streak counts, completion rates.
Device and technical data: Device type, OS version, app version, truncated IP, crash logs.
Push notification data: Device push token if permission granted.
4. Legal Bases (GDPR)
| Purpose | GDPR Legal Basis |
|---|---|
| Account creation and management | Art. 6(1)(b) — Performance of contract |
| Fasting tracking data | Art. 6(1)(a) — Explicit consent / Art. 6(1)(b) — Contract |
| Nutrition and activity notes | Art. 6(1)(a) — Explicit consent |
| Progress statistics and graphs | Art. 6(1)(b) — Performance of contract |
| Notifications and reminders | Art. 6(1)(b) — Performance of contract |
| App quality and crash analysis | Art. 6(1)(f) — Legitimate interests |
| Legal obligations | Art. 6(1)(c) — Legal obligation |
| Marketing | Art. 6(1)(a) — Consent |
Where we rely on Art. 9(2)(a) for fasting and dietary data: We collect your explicit consent at account creation and first use of tracking features.
5. What We Do Not Do
We do not sell personal data or health-related data. We do not share fasting, dietary, or progress data with advertising networks. We do not profile users for advertising purposes based on health or dietary data. We do not use advertising identifiers. We do not make automated decisions with legal or similarly significant effects (Art. 22). We do not provide medical advice or health recommendations.
6. Your Rights Under GDPR
Right of access (Art. 15): Obtain a copy of your data — contact app@icitech.com.tr.
Right to rectification (Art. 16): Correct data in-app or by contacting us.
Right to erasure (Art. 17): Delete account via Settings → Account → Delete Account.
Right to restriction (Art. 18): Limit processing — contact app@icitech.com.tr.
Right to data portability (Art. 20): Receive data in machine-readable format — Settings → Privacy → Export or contact us.
Right to object (Art. 21): Object to legitimate interest processing — contact app@icitech.com.tr.
Right to withdraw consent (Art. 7(3)): Withdraw fasting/dietary consent via Settings → Privacy → Manage Consents. Withdraw marketing consent via Settings → Privacy → Marketing Preferences. Withdrawal does not affect processing before withdrawal.
Right to lodge a complaint (Art. 77): Contact your national supervisory authority.
Email app@icitech.com.tr — subject "GDPR Data Subject Request — Dayfast". Response within one month, free of charge.
7. Right to Lodge a Complaint
| Country | Authority | Website |
|---|---|---|
| 🇫🇷 France | CNIL | https://www.cnil.fr |
| 🇩🇪 Germany | BfDI + state DPAs | https://www.bfdi.bund.de |
| 🇪🇸 Spain | AEPD | https://www.aepd.es |
| 🇬🇧 United Kingdom | ICO | https://ico.org.uk |
| Other EEA | Your national DPA | https://edpb.europa.eu/about-edpb/about-edpb/members_en |
8. International Data Transfers
ICI Tech Teknoloji A.Ş. is established in Turkey. No adequacy decision exists for Turkey under GDPR Article 45. For EEA/UK transfers, we rely on Standard Contractual Clauses and UK IDTAs where applicable.
9. Data Retention
Account data: duration plus 3 years. Fasting, nutrition, and progress data: duration plus 1 year; deleted within 30 days of consent withdrawal. Technical logs: 12 months. Support communications: 3 years.
10. Security
TLS 1.2+ in transit; encryption at rest. Breach notification: Supervisory authority within 72 hours (Art. 33); users notified without undue delay for high-risk breaches (Art. 34).
11. Children's Privacy
Dayfast is for users 18 and older. Intermittent fasting is not suitable for minors. Contact app@icitech.com.tr for immediate deletion if a child has submitted data.
12. Cookies
Our website uses cookies with a consent banner. Analytics and marketing cookies require your consent. The Dayfast app does not use advertising identifiers.
13. Changes
Material changes notified 14 days in advance. Current version: https://dayfast.app/en/privacy/gdpr.
14. Contact Us
Email: app@icitech.com.tr Subject: "GDPR Data Subject Request — Dayfast" Website: https://dayfast.app/
Acknowledge within 5 business days, resolve within one month.