Nutriva AI ("we", "us", "our") is the developer and publisher of the Nutriva AI mobile application available on the Apple App Store and Google Play Store. We are responsible for determining how and why your personal data is processed.
If you have any questions about this Privacy Policy, you can contact us at privacy@nutrivaai.com.
We use your information for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing and personalising the app's features (calorie goals, macro plans, AI suggestions) | Performance of contract |
| Syncing your data across your devices via your account | Performance of contract |
| Processing in-app purchases and managing subscriptions | Performance of contract |
| Sending important account and service notifications | Legitimate interest / consent |
| Diagnosing bugs and improving app stability | Legitimate interest |
| Understanding aggregate usage patterns to improve the app | Legitimate interest |
| Complying with legal obligations | Legal obligation |
We will never use your data for advertising profiling, selling to data brokers, or any purpose not listed above.
We use the following trusted third-party services to operate the app. Each service receives only the minimum data necessary for its function:
| Service | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Supabase | Cloud database & account authentication | Email, profile data, food logs, encrypted user records | supabase.com/privacy |
| OpenAI | AI food analysis & coaching responses | Food descriptions and coach messages only — no PII or health metrics | openai.com/privacy |
| RevenueCat | In-app purchase management & subscription status | Device ID, subscription status, purchase receipts | revenuecat.com/privacy |
| PostHog | Product analytics & feature usage | Anonymised event data, device type, app version | posthog.com/privacy |
| Sentry | Crash reporting & error monitoring | Stack traces, device info, app state at time of crash | sentry.io/privacy |
| Apple App Store / Google Play | App distribution & payment processing | Handled directly by Apple / Google under their own policies | Apple & Google privacy policies |
We do not share your data with any other third parties. We may disclose your information if required by law, court order, or to protect the safety of users.
If you grant Nutriva AI permission to access Apple HealthKit or Google Health Connect, the app may read data such as:
The app may also write nutrition data (calories, macros) and body weight back to HealthKit / Health Connect to keep your health records complete.
This use of HealthKit / Health Connect data complies with Apple's HealthKit guidelines and Google's Health Connect policies. HealthKit data will never be used for marketing or advertising purposes, and will never be sold.
Nutriva AI uses OpenAI's GPT models to power:
When you use these features, only the food description text or your chat message is sent to OpenAI. We do not include your name, email, health metrics, or any personally identifiable information in API requests. OpenAI processes requests under its API data usage policies and does not use API data to train its models by default.
AI-generated responses are based on statistical models and may contain inaccuracies. Never use AI food estimates or coaching advice for medical purposes, including insulin dosing, clinical nutrition therapy, or treatment of any medical condition.
Nutriva AI offers optional paid subscriptions (Pro and Premium). All payment transactions are processed by Apple (App Store) or Google (Google Play) — we never receive or store your payment card details.
Subscription status is verified through RevenueCat, which receives your anonymised device identifier and purchase receipt from the app store to confirm your entitlements. RevenueCat does not receive your name, email, or health data.
For subscription management, cancellations, and refunds, please use your device's subscription management settings:
Refund requests are handled by Apple or Google according to their respective refund policies.
We use PostHog to understand how the app is used in aggregate — for example, which features are most popular or where users encounter difficulties. PostHog collects anonymised event data (e.g., "user opened scan screen") along with device type and app version. It does not receive your name, email, or food/health data. You can opt out of analytics tracking in the app's Settings → Privacy.
We use Sentry to automatically detect and diagnose crashes. When the app crashes, Sentry collects a stack trace, device model, OS version, and app state information at the time of the crash. No personal health or food data is included in crash reports. This helps us fix bugs faster and improve stability for all users.
The app requests access to these device capabilities for the following specific purposes:
These permissions are optional. The app will function without them, but some features will be unavailable. You can revoke permissions at any time in your device Settings.
| Data Type | Retention Period |
|---|---|
| Food logs, weight, and nutrition data | Kept until you delete them or your account |
| Account information (email, profile) | Kept until account deletion |
| AI coach conversations | 30 days from the date of the message, then automatically deleted |
| Anonymised analytics events (PostHog) | Up to 1 year |
| Crash reports (Sentry) | 90 days |
| Subscription records (RevenueCat) | For the duration required by applicable law (typically 7 years for billing records) |
| Backup copies | Deleted within 30 days of account deletion |
You can delete all your data at any time by going to Settings → Account → Delete Account in the app, or by emailing privacy@nutrivaai.com. Account deletion is permanent and irreversible.
We take the security of your data seriously:
Despite our best efforts, no method of data transmission or storage is 100% secure. If you discover a security vulnerability, please report it to security@nutrivaai.com.
Nutriva AI is available globally. If you are located outside the United States, your data may be transferred to and processed in the United States or other countries where our service providers operate. We rely on the following safeguards for such transfers:
Nutriva AI is not directed at children under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at privacy@nutrivaai.com and we will delete it promptly.
Regardless of where you live, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at privacy@nutrivaai.com. We will respond within 30 days. Alternatively, you can delete your account directly from the app under Settings → Account → Delete Account.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
To submit a CCPA request, email privacy@nutrivaai.com with the subject line "CCPA Request". We will verify your identity before processing the request.
If you are located in the European Union or European Economic Area, you have rights under the General Data Protection Regulation (GDPR):
You also have the right to lodge a complaint with your national Data Protection Authority (DPA). A list of EU DPAs is available at edpb.europa.eu.
To exercise your GDPR rights, contact us at privacy@nutrivaai.com.
With your permission, Nutriva AI may send you push notifications for:
Push notification permissions are requested at app launch. You can disable notifications at any time in your device's Settings → Notifications → Nutriva AI. Disabling notifications will not affect core app functionality.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. When we make material changes, we will:
We encourage you to review this policy periodically. Continued use of the app after changes take effect constitutes your acceptance of the updated policy.
If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:
We aim to respond to all privacy requests within 30 days. For complex requests, we may extend this period by up to 2 additional months and will notify you of any extension.