Privacy Policy

1. Introduction

This Privacy Policy explains how Nutrido (“we,” “our,” or “us”) collects, uses, stores, and protects information when you use the Nutrido mobile application, our website nutrido.io, and related services.

We aim to keep this policy clear and understandable. Section 7 explains how our website uses cookies and analytics.

2. Information We Collect

2.1 Information You Provide

• Meal data: meals, ingredients, nutrition entries, notes, and meal history you create in the app
• Goals and preferences: daily targets, profile details, settings, language choices, and similar app preferences
• Photos: meal photos you capture or upload for analysis
• App account: when you first open Nutrido, the app automatically creates an anonymous account with a random identifier so your data can be stored securely in the cloud
• Account information: if you choose to sign in, we may receive account details such as your Apple account identifier and, where available, your name or email address
• Support communications: information you send us when you contact support

2.2 Information Collected Automatically

• Device and app information: device type, operating system, app version, and similar technical details
• Diagnostics and analytics: crash reports, performance information, and app usage data that help us improve Nutrido
• Notification data: a push notification token if you enable notifications
• Attribution data: limited advertising attribution data where supported by your device settings and applicable law
• Referral data: if you install Nutrido through a creator's referral link, the referral code from that link and a few install details, linked to your app account (see section 6)

2.3 Information We Do Not Intentionally Collect

• Precise location data
• Your contacts or address book
• Messages or content from other apps
• Biometric identifiers

3. How We Use Your Information

• Provide meal logging, nutrition tracking, dashboard, history, and statistics features
• Analyze meal photos and ingredient inputs with AI-powered services
• Store, sync, and back up your data in our cloud services, and restore it on a new device if you link Sign in with Apple
• Personalize the app based on your goals, preferences, and language
• Maintain security, prevent abuse, and troubleshoot issues
• Improve the app through analytics, crash reporting, and product development
• Send notifications if you choose to receive them
• Manage subscriptions, purchases, and account-related requests

4. How Your Data Is Stored

4.1 Where Your Data Is Stored

You do not need to sign in to use Nutrido. If you link Sign in with Apple, you can restore your data after reinstalling the app or on a new device. Without a linked account, your data may not be recoverable once you delete or reset the app.

4.2 AI Processing

When you use AI-powered meal analysis or ingredient lookup, we send the relevant image or text input to trusted AI service providers so they can generate nutrition results for you.

• Meal photos and ingredient text are processed to return analysis results
• We use secure transmission methods
• These features may require an internet connection

4.3 Security

• We use reasonable technical and organizational measures to protect personal data
• Data sent over the internet is protected with encryption in transit where supported
• Access to cloud-stored data is restricted to authorized systems and service providers
• No system can be guaranteed to be 100% secure, but we work to reduce risk and protect your information

5. Sharing and Service Providers

We do not sell your personal data.

We may share information only when needed to run Nutrido, comply with the law, or protect users and our services.

• AI providers: to analyze meal photos and ingredient requests
• Cloud and infrastructure providers: to store and sync your data and to support account features, restore, notifications, analytics, and app reliability
• Subscription and payment providers: such as Apple, Google, and RevenueCat to manage purchases and subscriptions
• Analytics, crash, and attribution providers: to understand app performance and marketing effectiveness
• Legal or safety reasons: if required by law or reasonably necessary to protect rights, safety, or security

Examples of providers we may use include OpenAI, Google Firebase, Apple, Google Play, RevenueCat, and attribution partners such as TikTok where applicable.

6. Creator Referrals (Affiliate Program)

Nutrido runs an affiliate program at affiliate.nutrido.io that rewards creators who recommend the app. If you install Nutrido through a creator's referral link, we use a small amount of data to credit that creator:

• Android: when you open the app after installing it, the app checks the referral information that Google Play keeps for your install (the Google Play Install Referrer). It sends something to our affiliate service only if that information holds a Nutrido referral code.
• iPhone: the invite page on go.nutrido.io copies an invite link to your clipboard when you tap its App Store button. When you first set up the app, it asks iOS whether your clipboard probably holds a web link, without seeing what it is; only then does it offer an invite step. Only if you tap Paste there does it read your clipboard, once, and it keeps the content only if it is a Nutrido invite link. The app does not read your clipboard otherwise.
• What the app sends: the referral code, a sign-in token for your app account and a few technical details such as the app version, install time and language. Our affiliate service reads only your account's user ID from the token and stores it only in hashed form.
• Purchases: for all app users, not only referred ones, the app links your purchases to your app account's user ID at our subscription provider, RevenueCat, which reports each purchase event (such as purchases, renewals, cancellations and refunds) to our affiliate service. We use this to find purchases that came from a referral, calculate and correct commissions, and report the app's revenue. Once a referral is matched, the app also adds a referral ID to your RevenueCat record.
• What creators see: totals of clicks and installs and, for each purchase credited to them, the date, product, store and amount with a short customer code. They never see your name, email address, account IDs, meals, photos or other app data.
• What we don't do: we don't use your advertising ID or device fingerprinting to match referrals. If a referral can't be matched exactly, it simply isn't counted.

We process this data based on our legitimate interests in running the affiliate program, paying creators correctly, preventing fraud and reporting our revenue, and to meet our tax duties where records support commission payments. We keep referral and purchase records for as long as tax law requires and commission claims can be raised (generally up to about six years); the raw purchase reports from RevenueCat are generally blanked after 90 days. The affiliate program's Privacy Notice explains the details, including how long each record is kept.

7. Our Website, Cookies and Analytics

This section covers our website, nutrido.io, including its calculators and blog.

7.1 What We Collect on the Website

• Server logs: like any website, our hosting provider (Hostinger) processes technical data such as your IP address, browser type, the page requested and the time of the request, so that the site can be delivered and kept secure.
• Calculators: the numbers you enter in our calculators, such as your age, height and weight, are processed in your browser and are not sent to us. If you allow analytics, we only record that a calculator was used and the options you picked (such as sex, activity level, goal and units), never your measurements or results.
• Emails: if you email us, we use your email address and message to reply to you.

7.2 Cookies and Similar Technologies

We keep a few small items in your browser. Strictly necessary items are always on, because the site needs them to work and to remember choices you make. Analytics cookies are set only if you allow them.

7.3 Google Analytics

If you allow analytics, we use Google Analytics 4, provided by Google Ireland Limited and Google LLC (“Google”), to understand how visitors use the site: pages viewed, how visitors arrived, clicks on buttons and links (such as the app store badges), and approximate location, device, browser and language.

• We have turned off Google signals and ad personalization, so this data is not used for advertising.
• Google Analytics 4 does not log or store IP addresses.
• User-level analytics data is deleted automatically after no more than 14 months. Aggregated reports that don't identify you may be kept longer.
• Google may process data in the United States. Google LLC is certified under the EU–U.S. Data Privacy Framework, which the European Commission recognizes as providing an adequate level of protection.

Learn more in the Google Privacy Policy and in how Google uses information from sites that use its services.

7.4 Legal Bases and Withdrawing Consent

We set analytics cookies only with your consent (Art. 6(1)(a) GDPR, together with the ePrivacy rules of your country, such as Section 25 TDDDG in Germany). Strictly necessary storage doesn't need consent; we use it based on our legitimate interest in running a working, secure website (Art. 6(1)(f) GDPR).

You can change or withdraw your consent at any time, with effect for the future, through Cookie settings at the bottom of every page. When you withdraw it, analytics stops right away and we delete the Google Analytics cookies on this site. We ask again after 6 months, or sooner if we change how we use cookies.

7.5 Privacy Signals

• Global Privacy Control (GPC): if your browser sends a GPC signal, we treat it as a refusal of analytics cookies and as a request to opt out of the sale or sharing of your personal information, and we don't show the cookie banner.
• Do Not Track: there is no agreed standard for responding to Do Not Track signals, so we don't respond to them. Analytics runs only if you opt in, whatever your browser sends.
• Browser settings: you can also block or delete cookies and site data in your browser at any time.

7.6 Notice for U.S. Residents

Through the website we collect the categories of personal information described in this section: identifiers (such as an IP address or a random cookie ID), internet activity (such as pages viewed and clicks) and approximate location, for the purposes described above. We do not sell your personal information, share it for cross-context behavioral advertising, or use it for targeted advertising. Depending on where you live, you may have the right to know about, access, correct and delete your personal information and to opt out; to use these rights, email info@nutrido.io. We won't treat you differently for using them.

8. Your Rights and Choices

8.1 In-App Controls

• Access and review: view your meals, history, goals, and settings inside the app
• Edit: update meals, nutrition information, and preferences at any time
• Export: export your data from the app where this feature is available
• Delete items: remove individual meals or other saved content
• Reset All Data: clear app data from within the app
• Delete Account: if you use account-based features, you can request account deletion from within the app where available, or contact us for help

8.2 Device Permissions

• You can manage camera and photo permissions in your device settings
• You can enable or disable notifications in your device settings
• You can manage tracking-related permissions through your device privacy settings where supported

8.3 GDPR Rights

If you are in the EEA, UK, or another region with similar rights, you may have the right to:

• request access to your personal data
• request correction of inaccurate data
• request deletion of your personal data
• request restriction of processing
• object to certain processing
• receive a copy of your data in a portable format where applicable
• withdraw consent where processing is based on consent
• lodge a complaint with your local data protection authority

9. Legal Bases for Processing

Where GDPR applies, we generally process personal data on one or more of the following legal bases:

• Performance of a contract: to provide Nutrido and the features you use
• Consent: when you choose optional features such as notifications or certain permissions, or allow analytics cookies on our website
• Legitimate interests: to secure, improve, and support the app, provided those interests are not overridden by your rights
• Legal obligations: where we must comply with applicable law

10. Data Retention

• Cloud data: your meals, photos, goals, and settings are kept while your account exists, unless you ask us to delete them sooner
• Reset and deletion: resetting the app clears the data on your device and starts you over with a new, empty account. To have your cloud data deleted, contact us at info@nutrido.io; if you linked Sign in with Apple, you can also delete your account in the app
• Support records: may be retained for a reasonable period to handle requests and protect our services
• Analytics and diagnostics: may be retained for a limited period to improve stability, security, and performance

11. International Data Transfers

Some of our service providers may process data outside your country, including outside the EEA or UK. When this happens, we take steps intended to provide appropriate safeguards under applicable law.

12. Children's Privacy

Nutrido is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal data to us, please contact us so we can review and take appropriate action.

13. Health and Wellness Disclaimer

Nutrido is a nutrition and wellness tool for informational purposes only. It is not a medical service, medical device, or substitute for professional advice from a doctor, dietitian, or other qualified healthcare professional.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you through the app, on our website, or by updating the date at the top of this page.