Privacy Policy
NutriHealth is a calorie and nutrition tracker. This policy explains what we collect, why, who helps us process it, how long we keep it, and the rights you have wherever you live. We don’t sell or share your data, we don’t show ads, and we don’t use trackers or analytics SDKs.
1. Who we are
NutriHealth (“we”, “us”) is an app published by an independent developer in Ontario, Canada, who is responsible for your personal information. Our Privacy Officer can be reached at support@nutrihealthai.app.
2. What we collect
| Data | Examples | Why |
|---|---|---|
| Account | Email address; name if you sign in with Google | Sign-in and account recovery |
| Profile | Name, sex, birth date, height, weight, activity level, goal, units | Calculating your calorie and macro targets |
| Food logs | Meals, foods, portions, nutrition, meal photos, favourites, recipes you import, meal plans | Your food diary and nutrition totals |
| Body and habits | Weight entries, water, fasting times, targets | Progress, trends and reminders |
| Health Connect activity | Steps, active and total calories burned, basal metabolic rate, exercise, distance (daily totals) | Showing calories burned next to calories eaten |
| AI summaries | Weekly reviews written from your logs | Your weekly review |
| Purchases | Whether you have NutriHealth Plus, plan and renewal date. No card details. | Unlocking Plus features |
| Problem reports | Your message, optional screenshot and contact email, device model, Android and app version | Fixing problems you report |
Profile, food, body and activity data is health-related information (“consumer health data” or “sensitive data” under some laws). Voice input is turned into text by your phone’s own speech service; NutriHealth never receives or stores audio. Reminders are scheduled on your phone. We collect this data from you and, with your permission, from Health Connect; we don’t buy data about you.
3. Consent and legal bases
When you create an account we ask for your explicit consent to process health-related data for the purposes above. You can withdraw it at any time by deleting your account (withdrawing it means we can no longer provide the app). Where a law asks for a legal basis, we rely on:
- Contract — running the app and your subscription.
- Explicit consent — health, body, food and activity data; Health Connect access.
- Legitimate interests — keeping the service secure, preventing abuse, fixing problems, and establishing or defending legal claims.
- Legal obligation — tax, accounting and responding to lawful requests.
4. Health Connect
With your permission, NutriHealth reads the activity types listed above from Health Connect, including past data and a daily background sync. It never writes to Health Connect. We store daily totals in your account to show them in the app. This data is never sold, never used for advertising, and never shared with AI services or other third parties. You can turn access off at any time in Health Connect; deleting your account removes our copy. Our use of Health Connect data follows the Health Connect permissions policy, including its Limited Use requirements.
5. AI features
AI recognises foods and portions in your meal photos and descriptions, estimates nutrition for foods not in our databases, and writes your weekly review and recipe summaries. Our AI providers receive only the photo or text needed for the task, not your name or email, and under their paid API terms they don’t use it to train their models. We don’t currently use your data to train AI models. We would only do so with your separate, opt-in permission, which you could withdraw at any time, and never with Health Connect data. AI results are suggestions you can edit; we make no automated decisions that have legal or similarly significant effects on you.
6. Who processes your data
We use these service providers, each only for the purpose shown and under contract:
- Supabase — stores your account and app data (servers in the United States).
- Anthropic, Google (Gemini) and OpenAI — the AI features above.
- USDA FoodData Central — food names only, to look up nutrition.
- Google Play and RevenueCat — subscriptions and purchase status.
- Linear — problem reports you choose to send.
- Cloudflare — hosts this website.
We don’t sell personal information and don’t share it for cross-context behavioural advertising. We may disclose information if the law requires it, to protect people’s safety, or as part of a sale or merger of the app, in which case this policy continues to apply.
Advertising
We don’t show ads or use your data for advertising. If that changes, we’ll update this policy, tell you in advance and ask for your consent where the law requires, before it starts. Food, body and health data and Health Connect data will never be used for advertising or shared with advertising networks.
Emails
We send emails you need, such as sign-in, account and deletion confirmations. We send tips or product news only if you opt in, and every such email has an unsubscribe link.
De-identified data
We may use aggregated, de-identified statistics (for example, how many meals are logged per day) to run and improve the app. We don’t try to re-identify them and never sell them.
7. Where your data is stored
Your data is stored in the United States and may be processed in other countries where our providers operate, which may have different data protection laws than where you live. Where required, transfers are protected by the providers’ data processing agreements, including Standard Contractual Clauses or the EU–U.S. Data Privacy Framework.
8. How long we keep it
- Account and app data, including meal photos: until you delete it or your account. Photos are kept so you can see your meal history.
- Backups: overwritten within 30 days after deletion.
- AI providers: process each request and keep it only as long as their API terms allow for security and abuse monitoring.
- Problem reports forwarded to our issue tracker: deleted on request.
- Purchase and tax records: as long as tax law requires.
9. Your rights
Wherever you live, you can:
- Access and take a copy — Profile → Export my data gives you a spreadsheet of your meals, weight and water, free on every plan. Email us for anything else we hold.
- Correct — edit your profile and logs in the app.
- Delete — Profile → Delete account deletes your account and everything in it. See how to delete your account.
- Withdraw consent — turn off Health Connect, camera, microphone or notifications in Android settings, or delete your account.
- Complain — to us first, and to your data protection regulator.
Email support@nutrihealthai.app to use any right. We may need to confirm the request comes from your account’s email address. We reply within 30 days (up to 45 days where the law allows, and we’ll tell you if we need longer). You can use an authorised agent. We will never treat you differently for using your rights.
Canada
You don’t have to give us personal information, but some features won’t work without it (for example, targets need your height and weight). Under PIPEDA and provincial laws you can access and correct your information and withdraw consent. Quebec residents also have the right to data portability and to ask us to stop disseminating their information. You can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.
United States
Residents of California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with privacy laws have the rights above, plus the right to know what we collect and disclose, and to limit the use of sensitive information. We already use sensitive information only to provide the app. If we deny a request, you can appeal by emailing us with “Appeal” in the subject; if you disagree with the outcome, you can contact your state Attorney General. We don’t share personal information with others for their direct marketing (California “Shine the Light”).
California notice at collection
| Category (CCPA) | What we collect | Disclosed to | Sold or shared for ads |
|---|---|---|---|
| Identifiers | Email, name, account ID | Supabase, RevenueCat, Linear (reports) | No |
| Protected characteristics | Age (birth date), sex | Supabase | No |
| Commercial information | Subscription plan and status | Google Play, RevenueCat | No |
| Audio, visual or similar | Meal photos; optional report screenshots | Supabase, AI providers, Linear | No |
| Internet or device activity | Device model, Android and app version in reports | Linear | No |
| Inferences | Calorie and macro targets, weekly review | Supabase, AI providers | No |
| Sensitive personal information | Health, body, food and activity data; account sign-in | Supabase, AI providers (not Health Connect data) | No |
We don’t collect precise location. Each category is kept as described in section 8 and used only for the purposes in section 2.
Consumer health data (Washington, Nevada, Connecticut)
See our separate Consumer Health Data Privacy Policy.
Other countries
NutriHealth isn’t currently offered in the European Economic Area or the United Kingdom. If that changes, we’ll appoint a local representative and update this policy. Where your local law (for example in Brazil, Australia or India) gives you additional rights, we’ll honour them; email us.
10. Security
Data is encrypted in transit and at rest. Each person’s data is restricted to their own account at the database level, meal photos are stored privately and shown through short-lived links, and AI service keys never leave our servers. If a breach affects your information, we’ll notify you and regulators as the law requires. No system is perfectly secure, so we can’t guarantee absolute security, but we work to protect your data and fix problems quickly.
11. Children
You must be at least 13, or the minimum age of digital consent where you live if higher, to use NutriHealth. We don’t knowingly collect data from younger children. If you believe a child has created an account, email us and we’ll delete it.
12. Website
This website uses no analytics, advertising or tracking cookies. Our host may process your IP address briefly for security.
13. Not medical advice
NutriHealth provides general nutrition information and estimates. It is not a medical device and doesn’t give medical advice.
14. Changes
If we change this policy, we’ll update the date above and tell you in the app before significant changes take effect. If a change affects how we use health data, we’ll ask for your consent again.
15. Contact
Privacy Officer, NutriHealth, Ontario, Canada · support@nutrihealthai.app