Privacy Policy

Last updated: 10 September 2026

This is our current, first published version of this policy. It describes what we actually do today, not aspirational practices. Fields marked like this are placeholders that still need to be filled in and confirmed before this policy should be relied on as final — see the note at the end of the page.

Who we are

Fuel Snapshot is operated by AM Labs Oy (business ID / Y-tunnus: to be added), registered address: to be added ("we", "us", "our"). We are the data controller for the personal data described in this policy.

Contact for privacy questions or requests: privacy@fuelsnapshotapp.com — confirm this address is actually monitored before publishing.

What we collect today

What	When	Why (legal basis)
Email address	You join the early-access waitlist on this site	Your consent (GDPR Art. 6(1)(a)) — you tick a box to opt in, and can withdraw at any time
Account email, a hashed (not plaintext) password, and app data you create (sport preferences, saved fuel products, session/fuel plans)	You create a Fuel Snapshot account (this becomes possible once the Android app adds sign-in — the backend already supports it)	Necessary to provide the service you asked for (GDPR Art. 6(1)(b))
Anonymized site-traffic data (pages viewed, approximate location/device type) via Google Analytics	You click "Accept" on the cookie banner shown on this website - declining or ignoring it means nothing is sent	Your consent (GDPR Art. 6(1)(a)) — you can withdraw it at any time by clearing your browser's site data for this domain, which resets the banner

We do not use advertising trackers or any tracking that follows you to other websites. The only cookies this site sets are Google Analytics' own, and only after you accept the cookie banner.

What we don't do

We don't sell or rent your data to anyone.
We don't share your data with third parties for their own marketing.
We don't use your data to train any AI model.

Who else sees data, and why

Hosting infrastructure — our servers are provided by a hosting company (confirm provider name and data center region/country here), who can access data only as needed to run the infrastructure.
Open Food Facts — when you scan a product barcode in the app, the barcode is looked up against the public Open Food Facts database. We don't send them your account information, only the barcode itself.
Google Analytics — if you accept the cookie banner on this website, Google processes standard analytics data (pages viewed, approximate location/device type) on our behalf to help us understand site traffic. This may involve your data being processed outside the EU/EEA confirm Google's current data-processing terms/transfer mechanism (e.g. EU-U.S. Data Privacy Framework) before publishing. This does not apply to the Android app itself, only to this marketing website.

How long we keep it

Waitlist emails: until the app publicly launches, or until you ask to be removed, whichever comes first.
Account data: for as long as your account is active, plus a reasonable period afterward to handle any final requests, then deleted.

Your rights

Under GDPR, you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Delete your data ("right to be forgotten").
Restrict or object to certain processing.
Receive a copy of your data in a portable format.
Withdraw consent at any time, for anything based on consent (like the waitlist email).
Lodge a complaint with your national data protection authority — for example, Finland's Office of the Data Protection Ombudsman (tietosuojavaltuutetun toimisto), if applicable to you.

To exercise any of these, email us at the address above, or use the "Request my data" / "Delete my account" options in the app's Settings screen, which route the request to us directly. See deleting your account for the exact steps and what's deleted. To leave the early-access waitlist right now, use the link in any email we send you, or contact us directly.

Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS) between your device and our servers, and password hashing so we never store your password in readable form. No system is perfectly secure, and we can't guarantee absolute security.

Children

Fuel Snapshot is not directed at children, and we do not knowingly collect data from children.

Changes to this policy

We'll update the "last updated" date above whenever this policy changes, and post the new version here.

Note on this draft: this policy was prepared as a first working draft of our actual data practices, alongside the engineering behind it. It has not yet been reviewed by a lawyer or data protection professional, and the highlighted placeholders above still need real information filled in. Please treat it as a draft until reviewed and finalized.