Privacy policy

In brief. NutriSee is a food and weight diary. We store what you log so the app works and stays in sync when you sign in again. Meal photos and typed descriptions are analysed by Google’s Gemini models under terms that forbid Google from training on your content. We run no analytics or advertising software, we never sell data, and you can delete your account and everything in it from the app at any time.

1. Who we are

NutriSee is operated by Igor Lobanov, an independent developer based in Baku, Azerbaijan (“we”, “us”). We are the controller of your personal data under the EU General Data Protection Regulation (GDPR) and the UK GDPR.

• Email: support@nutrisee.app
• Postal address: [TODO: postal address, the same one shown in the App Store and Google Play listings]

This policy covers the NutriSee app for iOS and Android and the website nutrisee.app. It forms part of our Terms of use.

2. What we collect

Account. Your email address and a hashed password, or the identifier Apple or Google gives us when you sign in with them. Apple may give us a relay address instead of your real one. We also keep the date your account was created, when you last signed in, and the tokens that keep you signed in.

Profile and plan. What you enter during onboarding to build your plan: your goal (lose, maintain or gain), the reasons you picked for tracking, birth date, sex, height, current weight, target weight or maintenance range, pace, activity level, the obstacles you said get in the way of tracking, and your preferred units. We use these to calculate your calorie and macro targets. Target changes are stored with their dates, so earlier days keep the target you had at the time.

Diary. Food entries with their ingredients, portions, calories and macros, the descriptions you type, barcode lookups, saved and recent meals, and dated weight measurements.

Photos. The meal photos you submit for analysis. The app reduces them in size before upload, and we strip camera metadata such as location when they arrive.

Subscription. Whether you have an active NutriSee Pro subscription, which plan, and when it renews. Apple or Google take payment. We never see your card details.

Support. Anything you send us by email, including attachments.

Technical. Server request logs containing your IP address, the time of the request, the app version and a sanitised error message if something failed. Logs never contain photos, food entries, emails or passwords.

We do not collect your location beyond what an IP address implies, your contacts, advertising identifiers, or your activity in other apps or websites. The app contains no analytics, advertising or crash-reporting software.

Weight, food intake, birth date, sex and meal photos can reveal information about your health. We treat all of it as sensitive data and process it only with your explicit consent, as explained in section 4.

3. How we use your data

• To run the service. Analysing your photos and descriptions, keeping your diary, calculating targets and progress, and restoring everything when you sign in on another device.
• To manage your subscription together with the app store you bought it from and our subscription processor.
• To send transactional email: sign-in codes, password resets, security alerts and notices about changes to our terms. We do not send marketing email.
• To answer support requests.
• To keep the service secure: rate limiting, detecting abuse, and preventing free-trial fraud.
• To comply with the law and to establish, exercise or defend legal claims.
• To improve the service using de-identified, aggregated statistics, for example how often estimates are corrected. Section 7 explains the limits we place on this.

We do not use your data for advertising, profiling, or automated decisions with legal or similarly significant effects.

4. Legal bases

If you are in the European Economic Area, Switzerland or the United Kingdom, this is the legal basis for each kind of processing.

Processing	Legal basis
Creating your account, keeping your diary, analysing photos and descriptions, syncing, managing your subscription	Performance of our contract with you (Article 6(1)(b))
Health-related data: weight, food intake, targets, birth date, sex, meal photos	Your explicit consent (Article 9(2)(a)), given when you create your account. You withdraw it by deleting your account.
Security, abuse prevention, server logs, answering support	Our legitimate interest in running a safe and reliable service (Article 6(1)(f))
Legal notices, keeping records the law requires	Legal obligation (Article 6(1)(c))
Any future use of identifiable content to improve models	A separate consent that we will ask for first (Articles 6(1)(a) and 9(2)(a))

5. Who processes your data

We use a small number of service providers. Each acts on our instructions under a data-processing agreement and may not use your data for its own purposes.

• Google (Gemini API) analyses meal photos and typed descriptions. We send the image or text together with our instructions and nothing that identifies you. We use Google’s paid API tier, under which Google does not use your content to train or improve its models and keeps it only briefly to detect abuse. Google processes this data in the United States and other countries.
• DigitalOcean hosts our servers, database and photo storage in its European Union data centres. DigitalOcean is a United States company certified under the EU-US Data Privacy Framework, and its data-processing agreement includes the standard contractual clauses.
• Cloudflare sits in front of our servers and the website. It routes and protects the traffic, so it sees your IP address and request metadata and may keep them briefly to detect attacks. It processes this in its data centres around the world under its own data-processing agreement.
• RevenueCat keeps track of subscriptions. It receives your account identifier, device platform and app version, country and locale, and the purchase receipt or token from the store. It does not receive your email, name or diary.
• Apple and Google take payment through the App Store and Google Play and, if you choose, sign you in. Their own privacy policies apply to those services.
• Fastmail delivers our transactional email. Fastmail Pty Ltd is an Australian company that processes mail in the Netherlands and the United States, with support access from Australia; its data-processing agreement incorporates the standard contractual clauses. Fastmail receives only your email address and the messages we send you.
• Open Food Facts. We keep a local copy of this open product database for barcode and search lookups. Your searches are answered from our copy, and nothing about you is sent to Open Food Facts.

We do not sell personal data, share it with advertisers or data brokers, or use third-party analytics.

We may disclose data when the law requires it, to protect our rights or someone’s safety, or to a successor if NutriSee changes hands. In that case this policy continues to apply and we will tell you.

6. Where your data is stored

Your data is stored on servers in the European Union. The operator is based in Azerbaijan and may access data from there to run the service, answer support and handle abuse. Google processes analysis requests in the United States and other countries.

Where data leaves the EEA or the UK, these are the safeguards. Google, Apple, Cloudflare and DigitalOcean are certified under the EU-US Data Privacy Framework and its UK extension. RevenueCat’s data-processing agreement incorporates the European Commission’s standard contractual clauses, the UK addendum and the Swiss amendments. Your data is stored in DigitalOcean’s European Union data centres; any access by DigitalOcean staff from the United States is covered by the framework above. Fastmail’s data-processing agreement likewise incorporates the standard contractual clauses for mail processed outside the EU. Azerbaijan has no EU adequacy decision; the GDPR applies in full to everything the operator does with your data, and the same technical and organisational safeguards apply wherever it is accessed from. You can ask us for a copy of the relevant clauses.

7. Photos, AI analysis and training

Analysis is automated. The model estimates the ingredients and portions on your plate or in your description. You review the result, correct anything that is wrong, and nothing is added to your diary until you confirm it. The estimate is not a decision about you; it is a suggestion you accept or change.

Photos are stored privately with a small thumbnail. We use them only to show you your entry, to run or re-run analysis when you ask, and for support or abuse investigations. Staff access to photos is limited and every access is logged.

We do not use your photos, descriptions or diary to train or fine-tune machine-learning models, ours or anyone else’s. If we ever want to:

• identifiable content will only be used with your separate opt-in consent, which you can withdraw at any time;
• de-identified content, with no link to your account, no metadata and no faces, will only be used after we have announced it in the app and on this page at least 14 days in advance, with a way to object.

8. How long we keep it

Data	Kept for
Account, profile, diary, weights, saved meals	As long as your account exists
Meal photos	As long as the entry or saved meal they belong to exists, then deleted within 7 days
Photos from uploads that never became an entry	7 days
Unfinished uploads	1 hour
Server logs	30 days
Backups	30 days, then overwritten
Support emails	12 months after the last message

Section 9 explains what happens when you delete your account.

9. Deleting your account

Go to Settings → Account → Delete account in the app. You will be asked to sign in again to confirm. Deletion is immediate. There is no grace period and no way to undo it.

An automated job then deletes your account, profile, diary, weights, saved meals, photos and sessions, and removes your email address from our systems. The following remain:

• a hashed version of your account identifiers for 30 days, so that a deleted account cannot be used to repeat free trials or evade a ban;
• store billing records in redacted form for 7 days, plus whatever Apple, Google and RevenueCat keep under their own rules;
• a record that an account existed and when it was deleted, holding only an internal ID;
• records of any staff access to your data, kept for 12 months for accountability;
• copies in backups, which expire within 30 days.

Deleting your account does not cancel your subscription. Cancel it in your App Store or Google Play settings first.

You can also ask us to delete your account by emailing support@nutrisee.app from the address on the account.

10. Security

Data travels over encrypted connections. Passwords are hashed with argon2id and are never stored in clear text. Sign-in tokens are short-lived. Photos sit in private storage with no public links. Access by staff is limited to what support and abuse handling require, and every access is logged.

On your phone, NutriSee keeps a local copy of your data in an encrypted store (AES-256). The key lives in the iOS Keychain or Android Keystore. Both the data and the key are included in your device’s backups, so a restored phone can read its data. Those backups are run by Apple or Google under their own terms.

No system is perfectly secure. If a breach affects you, we will tell you and the relevant authority as the law requires.

11. Your rights

You can:

• access the data we hold about you and receive a copy in a machine-readable format;
• correct it. Most of it you can edit in the app;
• delete it, in the app or by email;
• restrict or object to processing based on our legitimate interests;
• withdraw consent at any time, which does not affect processing that already happened;
• complain to a supervisory authority. In the EEA that is the authority in your country; in the UK it is the Information Commissioner’s Office.

To exercise a right, email support@nutrisee.app from the address on your account, or ask us to verify you another way. We answer within one month. For complex requests we may take up to two further months and will tell you if so. Requests are free unless they are clearly excessive. If we refuse a request we will explain why and you can appeal by replying to our answer.

12. Children

NutriSee is for adults. You must be 18 or older to create an account. We do not knowingly collect data from anyone younger. If you believe a minor has an account, email us and we will delete it.

13. Additional information for United States residents

We honour the rights in section 11 for everyone, wherever they live. We do not sell personal data, share it for targeted advertising, or use it for profiling that produces legal or similarly significant effects, and we will never treat you differently for exercising a right. You may use an authorised agent to make a request; we will ask the agent for proof of your permission.

Washington residents. This section is our Consumer Health Data Privacy Policy under Washington’s My Health My Data Act. The consumer health data we collect is your weight, food intake, calorie and macro targets, birth date, sex and meal photos. It comes from you. We collect and use it for the purposes in section 3 and share it only with the processors in section 5, for those purposes. We do not sell it, and we have no affiliates. You can access it, delete it and withdraw your consent as described in sections 9 and 11, and you can appeal a decision by replying to our response. We answer within 45 days.

14. The website

nutrisee.app sets no cookies, uses no analytics, and loads fonts and images from its own domain. It is served by Cloudflare, which processes request data (IP address, page requested, time, browser) to deliver and protect the site under its own privacy policy. We keep no web logs of our own.

15. Changes to this policy

If we make a material change, we will email you and show a notice in the app at least 14 days before it takes effect. Smaller changes, such as clarifications, take effect when posted. The date at the top of this page shows the current version, and you can ask us for earlier versions.

16. Contact

Questions about this policy or your data: support@nutrisee.app. Our postal address is in section 1.