The MyFitnessPal privacy policy says "We use photos, videos, or other data you provide to us to customize our Services." [1]
That's all they need to do to cover themselves.
> That's all they need to do to cover themselves.
If this is real and not a joke, I bet some DPA will disagree if this is brought to their attention. Effective consent under GDPR requires informed consent.
The policy defines "Services" as the mobile app and website. How is building a general purpose model for what the average fridge looks like used to customise either the website or the app? This feels like the kind of flimsy reasoning that only holds so long as no one is challenging it.