GDPR Data Processing Agreement request

[Shirl Luo]

Hi FatSecret team,

I use the free tier of the FatSecret Platform API in my application, and I'm preparing to begin pilot testing with real users. As part of the GDPR compliance review, we need a Data Processing Agreement (DPA) in place with each third-party service we use, including FatSecret.

Could you help with the following:

1. Do you have a standard GDPR-compliant Data Processing Agreement (or Data Processing Addendum) available for free-tier Platform API users? If so, could you send it over, or point me to where it can be requested/signed?
2. Since our data subjects are based in the EU (Netherlands), if any of our API requests or associated data are processed outside the EU/EEA, does your DPA include Standard Contractual Clauses (SCCs) or another GDPR-recognized transfer mechanism?
3. Our integration only sends food search terms to your API to retrieve nutrition data, so no personal information is included in these requests. Could you confirm what, if anything, FatSecret logs or retains on your end from these search queries (e.g., IP address, timestamps), and for how long?

Thank you for the help in advance!

[seba...@fatsecret.com]

Thanks for reaching out.

Please send us a message to our Contact Us inbox and we'd be pleased to assist:

https://platform.fatsecret.com/contact