Privacy Policy

1. Introduction

This Privacy Policy explains how Nutrido (“we,” “our,” or “us”) collects, uses, stores, and protects information when you use the Nutrido mobile application and related services.

We aim to keep this policy clear and understandable. If you use Nutrido, you agree to the practices described here.

2. Information We Collect

2.1 Information You Provide

• Meal data: meals, ingredients, nutrition entries, notes, and meal history you create in the app
• Goals and preferences: daily targets, profile details, settings, language choices, and similar app preferences
• Photos: meal photos you capture or upload for analysis
• App account: when you first open Nutrido, the app automatically creates an anonymous account with a random identifier so your data can be stored securely in the cloud
• Account information: if you choose to sign in, we may receive account details such as your Apple account identifier and, where available, your name or email address
• Support communications: information you send us when you contact support

2.2 Information Collected Automatically

• Device and app information: device type, operating system, app version, and similar technical details
• Diagnostics and analytics: crash reports, performance information, and app usage data that help us improve Nutrido
• Notification data: a push notification token if you enable notifications
• Attribution data: limited advertising attribution data where supported by your device settings and applicable law
• Referral data: if you install Nutrido through a creator's referral link, the referral code from that link and a few install details, linked to your app account (see section 6)

2.3 Information We Do Not Intentionally Collect

• Precise location data
• Your contacts or address book
• Messages or content from other apps
• Biometric identifiers

3. How We Use Your Information

• Provide meal logging, nutrition tracking, dashboard, history, and statistics features
• Analyze meal photos and ingredient inputs with AI-powered services
• Store, sync, and back up your data in our cloud services, and restore it on a new device if you link Sign in with Apple
• Personalize the app based on your goals, preferences, and language
• Maintain security, prevent abuse, and troubleshoot issues
• Improve the app through analytics, crash reporting, and product development
• Send notifications if you choose to receive them
• Manage subscriptions, purchases, and account-related requests

4. How Your Data Is Stored

4.1 Where Your Data Is Stored

You do not need to sign in to use Nutrido. If you link Sign in with Apple, you can restore your data after reinstalling the app or on a new device. Without a linked account, your data may not be recoverable once you delete or reset the app.

4.2 AI Processing

When you use AI-powered meal analysis or ingredient lookup, we send the relevant image or text input to trusted AI service providers so they can generate nutrition results for you.

• Meal photos and ingredient text are processed to return analysis results
• We use secure transmission methods
• These features may require an internet connection

4.3 Security

• We use reasonable technical and organizational measures to protect personal data
• Data sent over the internet is protected with encryption in transit where supported
• Access to cloud-stored data is restricted to authorized systems and service providers
• No system can be guaranteed to be 100% secure, but we work to reduce risk and protect your information

5. Sharing and Service Providers

We do not sell your personal data.

We may share information only when needed to run Nutrido, comply with the law, or protect users and our services.

• AI providers: to analyze meal photos and ingredient requests
• Cloud and infrastructure providers: to store and sync your data and to support account features, restore, notifications, analytics, and app reliability
• Subscription and payment providers: such as Apple, Google, and RevenueCat to manage purchases and subscriptions
• Analytics, crash, and attribution providers: to understand app performance and marketing effectiveness
• Legal or safety reasons: if required by law or reasonably necessary to protect rights, safety, or security

Examples of providers we may use include OpenAI, Google Firebase, Apple, Google Play, RevenueCat, and attribution partners such as TikTok where applicable.

6. Creator Referrals (Affiliate Program)

Nutrido runs an affiliate program at affiliate.nutrido.io that rewards creators who recommend the app. If you install Nutrido through a creator's referral link, we use a small amount of data to credit that creator:

• Android: when you open the app after installing it, the app checks the referral information that Google Play keeps for your install (the Google Play Install Referrer). It sends something to our affiliate service only if that information holds a Nutrido referral code.
• iPhone: the invite page on go.nutrido.io copies an invite link to your clipboard when you tap its App Store button. When you first set up the app, it asks iOS whether your clipboard probably holds a web link, without seeing what it is; only then does it offer an invite step. Only if you tap Paste there does it read your clipboard, once, and it keeps the content only if it is a Nutrido invite link. The app does not read your clipboard otherwise.
• What the app sends: the referral code, a sign-in token for your app account and a few technical details such as the app version, install time and language. Our affiliate service reads only your account's user ID from the token and stores it only in hashed form.
• Purchases: for all app users, not only referred ones, the app links your purchases to your app account's user ID at our subscription provider, RevenueCat, which reports each purchase event (such as purchases, renewals, cancellations and refunds) to our affiliate service. We use this to find purchases that came from a referral, calculate and correct commissions, and report the app's revenue. Once a referral is matched, the app also adds a referral ID to your RevenueCat record.
• What creators see: totals of clicks and installs and, for each purchase credited to them, the date, product, store and amount with a short customer code. They never see your name, email address, account IDs, meals, photos or other app data.
• What we don't do: we don't use your advertising ID or device fingerprinting to match referrals. If a referral can't be matched exactly, it simply isn't counted.

We process this data based on our legitimate interests in running the affiliate program, paying creators correctly, preventing fraud and reporting our revenue, and to meet our tax duties where records support commission payments. We keep referral and purchase records for as long as tax law requires and commission claims can be raised (generally up to about six years); the raw purchase reports from RevenueCat are generally blanked after 90 days. The affiliate program's Privacy Notice explains the details, including how long each record is kept.

7. Your Rights and Choices

7.1 In-App Controls

• Access and review: view your meals, history, goals, and settings inside the app
• Edit: update meals, nutrition information, and preferences at any time
• Export: export your data from the app where this feature is available
• Delete items: remove individual meals or other saved content
• Reset All Data: clear app data from within the app
• Delete Account: if you use account-based features, you can request account deletion from within the app where available, or contact us for help

7.2 Device Permissions

• You can manage camera and photo permissions in your device settings
• You can enable or disable notifications in your device settings
• You can manage tracking-related permissions through your device privacy settings where supported

7.3 GDPR Rights

If you are in the EEA, UK, or another region with similar rights, you may have the right to:

• request access to your personal data
• request correction of inaccurate data
• request deletion of your personal data
• request restriction of processing
• object to certain processing
• receive a copy of your data in a portable format where applicable
• withdraw consent where processing is based on consent
• lodge a complaint with your local data protection authority

8. Legal Bases for Processing

Where GDPR applies, we generally process personal data on one or more of the following legal bases:

• Performance of a contract: to provide Nutrido and the features you use
• Consent: when you choose optional features such as notifications or certain permissions
• Legitimate interests: to secure, improve, and support the app, provided those interests are not overridden by your rights
• Legal obligations: where we must comply with applicable law

9. Data Retention

• Cloud data: your meals, photos, goals, and settings are kept while your account exists, unless you ask us to delete them sooner
• Reset and deletion: resetting the app clears the data on your device and starts you over with a new, empty account. To have your cloud data deleted, contact us at info@nutrido.io; if you linked Sign in with Apple, you can also delete your account in the app
• Support records: may be retained for a reasonable period to handle requests and protect our services
• Analytics and diagnostics: may be retained for a limited period to improve stability, security, and performance

10. International Data Transfers

Some of our service providers may process data outside your country, including outside the EEA or UK. When this happens, we take steps intended to provide appropriate safeguards under applicable law.

11. Children's Privacy

Nutrido is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal data to us, please contact us so we can review and take appropriate action.

12. Health and Wellness Disclaimer

Nutrido is a nutrition and wellness tool for informational purposes only. It is not a medical service, medical device, or substitute for professional advice from a doctor, dietitian, or other qualified healthcare professional.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you through the app, on our website, or by updating the date at the top of this page.