Information on the Processing of Personal Data

una studio s. r. o.

with its registered office at Doležalova 3424/15C, 821 04 Bratislava,

registered in the Commercial Register maintained by the Municipal Court Bratislava III under file number 197193/B

Company ID (IČO): 57500614

represented by its managing director (konateľ)

contact details for personal data protection purposes:

e-mail: support@evenyn.com

address: Doležalova 3424/15C, 821 04 Bratislava

(hereinafter the “Controller”)

The purpose of this Privacy Statement is to provide you with information on the conditions under which the personal data you provide will be processed.

We process personal data in accordance with the legislation on personal data protection, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR”) and Act No. 18/2018 Coll. on Personal Data Protection.

We are fully aware of the importance of protecting the personal data and privacy of our customers and business partners. When processing personal data, we take care to:

a. process up-to-date and accurate data only to the extent necessary to fulfil the purpose of the processing,

b. process personal data only for as long as necessary,

c. secure your personal data against unauthorised access to the greatest possible extent,

d. protect your privacy as much as possible and not interfere disproportionately with your rights.

In relation to our customers and contractual partners, we process in particular:

• e-mail address,

• IP address,

• order and payment data,

• data you enter in the application: your calorie target, household members and their calorie targets, meal plans, custom recipes and shopping lists,

• content you voluntarily send us: written and voice feedback and photos or screenshots of recipes,

• data necessary for invoicing and the performance of the contract.

a. Conclusion and performance of a contract — We process your personal data for the purpose of concluding, amending and performing a contractual relationship, including communication and invoicing. The processing is necessary pursuant to Article 6(1)(b) GDPR.

b. Compliance with legal obligations — We also process personal data for the purpose of complying with obligations arising from the legislation of the Slovak Republic and the European Union, in particular accounting and tax legislation.

c. Recovery of claims and protection of legal claims — We may also process personal data on the basis of legitimate interest pursuant to Article 6(1)(f) GDPR, in particular for the purpose of recovering receivables or protecting legal claims.

d. Consent to the processing of personal data — Where consent has been given, we process personal data to the extent, for the purpose and for the period specified in that consent. Consent may be withdrawn at any time.

Your personal data may be disclosed to third parties where we are required to do so by law or where this is necessary for the provision of our services.

Your personal data may be made available to external partners who provide services to us, for example:

• accountants and auditors,

• payment service providers and app stores (Apple App Store, Google Play),

• hosting, database and e-mail service providers,

• providers of analytics and advertising tools,

• providers of artificial intelligence services.

Some features of the application (e.g. transcribing a voice message or reading a recipe from a photo) use third-party artificial intelligence services. We pass to them only the data needed for the given feature and we do not retain audio recordings or images after processing.

Your personal data may also be transferred to third countries outside the European Union, in which case the Controller ensures an adequate level of personal data protection in accordance with the GDPR.

The processing of personal data does not involve automated decision-making or profiling.

We retain personal data only for as long as necessary to fulfil the purpose of its processing.

Data processed on the basis of legal obligations is retained for the period laid down by law. Data processed on the basis of a contractual relationship is retained for the duration of the contract and thereafter, as a rule, for a period of 10 years.

Personal data may be processed both manually and by automated means.

The Controller has adopted appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure or damage.

You have the right to:

• request access to your personal data,

• request the rectification of inaccurate data,

• request the erasure of personal data,

• request the restriction of processing,

• object to processing,

• request data portability,

• withdraw consent given,

• lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.

Supervisory authority:

Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky)

https://dataprotection.gov.sk/sk/

Námestie 1. mája 18

811 06 Bratislava

You may exercise your rights using the contact details set out in point 1.

A user of the Evenyn application may at any time request the deletion of their account and the personal data associated with it in one of the following ways:

• directly in the application: Profile → Settings → Delete account → “Open request by e-mail”,

• in the iOS application: in the account settings using the account deletion option,

• by e-mail: by sending a request to support@evenyn.com from the e-mail address with which the account is registered.

Requests are handled manually, no later than 30 days from receipt.

When an account is deleted, we remove the login credentials and e-mail address, saved meal plans, favourite and custom recipes, shopping lists and user settings. Any active subscription is terminated upon cancellation of the account.

If you have a subscription paid through the App Store, cancel it in the subscription settings of your Apple account before deleting your account. Subscriptions through the App Store are managed by Apple and are not automatically terminated by deleting your Evenyn account.

We retain only the accounting documents relating to payments made, which we are obliged to archive for a period of 10 years pursuant to Act No. 431/2002 Coll. on Accounting.

This version is valid and effective from 20 October 2026.