The short version: we collect the minimum needed to grade your food and sync your history. Your health profile lives on your device and is only stored on our servers if you sign in, so it can follow you across devices. We never sell your health data. The nutrication.app website shows ads from Google AdSense, which set cookies (details in section 8); the iOS and Android apps are ad-free. You can delete everything with one button in the app (You tab → "Delete my account & data").
1. What we collect
Without an account. You can use Nutrication without signing in. In that case we use a random device identifier (not your name, email, or advertising ID) to enforce free-tier daily limits and keep your scan history available on that device.
With an account (optional). If you sign in, we collect your email address (used for passwordless one-time login codes) and associate the following with your account so it syncs across devices:
- Scan history — the products, meals, and menus you scanned, with their grades.
- Your health profile — the goals, conditions, allergens, preferences, and targets you enter in the You tab. The app works entirely from the on-device copy; the server stores it verbatim only so your other devices can load it. We do not mine, analyze, or share it.
Stays on your device. Your daily-plate calendar (logged foods, workouts, day notes, and planned events) is stored only on your device and is not uploaded to our servers.
Photos. Photos of nutrition labels, meals, recipes, and menus are sent to our server and processed by Google's Gemini AI to read their contents. We do not keep the photos after scoring — only the resulting text/nutrition data is stored as part of your scan history. No name or email travels with the image.
Payments. On the web, subscriptions are processed by Stripe; in the iOS/Android apps by Apple / Google (via RevenueCat). We never see or store your card number — we store only a customer reference and your subscription status.
Crash & error reporting. When the app hits a bug, a stack trace and device model are sent to Sentry so we can fix it. If you're signed in, your user ID and email may be attached so we can correlate reports; scan photos and health-profile contents are never included.
2. How we use it
- To grade foods and personalize results for the conditions and goals you chose — personalization runs on your device.
- To generate meal suggestions: when you use "What should I eat?", relevant profile fields (concerns, allergens, preferences, targets) are sent with that request to compute suggestions, and are not used for anything else.
- To sync your history and profile across devices when signed in.
- To enforce fair-use limits and operate subscriptions.
- To fix bugs and keep the service running.
We do not sell or rent your data. The website (nutrication.app) carries Google AdSense ads — see section 8 for what that involves and how to opt out; the mobile apps carry no ads or marketing trackers at all.
3. Who processes data for us
We use a small set of infrastructure providers, each receiving only what's needed for their job: Supabase (database & authentication), Fly.io (API hosting), Cloudflare (web hosting), Upstash (rate-limit and subscription caches), Google Gemini (AI photo & text analysis), Open Food Facts (public product database — barcode lookups only), Stripe / Apple / Google / RevenueCat (payments), Resend (login-code emails), and Sentry (crash reporting).
4. Your health data, specifically
Anything you enter about your health (conditions, medications, doctor's notes, body metrics) is optional, used only to tune your own grades and suggestions, never shared with or sold to anyone, and deletable at any time. Nutrication is not a medical service and the data is not shared with healthcare providers or insurers.
5. Deleting your data
In the app: You tab → Delete my account & data. This permanently removes your server-side scans, calendar entries, profile, saved menus, and your account itself, and wipes the app's on-device storage. You can also email us (address below) and we'll do it manually.
6. Retention & security
Data is kept while your account is active and deleted when you delete it. Transport is encrypted (HTTPS) and data is stored with access controls on the providers listed above.
7. Children
Nutrication is not directed at children under 13, and we don't knowingly collect their data.
8. Advertising & cookies (website only)
The nutrication.app website displays ads served by Google AdSense. The mobile apps show no ads.
- Cookies & identifiers. Google and its advertising partners use cookies and similar identifiers to serve ads and measure their performance. Depending on your settings and location, these may be used for personalized or non-personalized advertising.
- What ad partners receive. Standard web request data (such as IP address, browser/device type, and the page you're viewing). We never pass your email, health profile, or scan contents to ad partners.
- Your controls. You can manage or opt out of personalized advertising at Google My Ad Center and aboutads.info/choices. In the EEA, UK, and Switzerland we present a consent choice before non-essential ad cookies are set; you can change it anytime from the website.
- Google's own handling of this data is described in the Google Privacy & Terms — "How Google uses information from sites that use our services."
9. Changes & contact
If this policy changes materially, we'll update the date above and note it in the app. Questions or requests: [email protected].