Privacy Policy

1. Scope and jurisdiction

This Policy applies to all users of the Service, including individuals who use NutriFit for fitness, nutrition tracking, wellness management, coaching, or related purposes.

The primary governing law is the law of the United States and the State of Wyoming. Given the global nature of the Service, we also take into account applicable international data protection laws, including the EU General Data Protection Regulation (GDPR), where required.

For residents of Washington and Nevada, the separate Consumer Health Data Privacy Policy supplements this Policy.

2. Data we collect

• Account data: name, username, email address, phone number, password hash, user role.
• Profile data: country, city, profile photo/avatar, preferences, and records of the consents you have given, including the optional model improvement consent and its version.
• Health and wellness data you enter (special categories): body measurements (weight, body mass index, body fat percentage, lean mass, waist circumference, height), nutrition and hydration logs, workouts and activity, sleep, vital signs (blood pressure, heart rate, heart rate variability, oxygen saturation, blood glucose, body temperature), symptoms, supplement intake, mood, energy and stress levels, goals, and questionnaire answers.
• Files you upload: meal photos, laboratory reports and their images or PDF files, genetic reports, and other attachments you choose to add.
• Apple Health data: health and activity records imported from your iOS device after you grant permission, as described in section 3.
• Derived data: wellness scores, nutrition estimates, trends, flags, forecasts, and explanations calculated from the data above.
• Usage data: interactions with features, tasks, plans, comments, messages, and activity history.
• Technical data: IP address, device type, browser information, session identifiers, log files, cookies, and performance data.
• Payment-related data: payment status, transaction identifiers, and subscription information received from payment providers. We do not store full card or banking details.

3. Apple Health (HealthKit) data

On iOS, NutriFit can import data from Apple Health (HealthKit) only after you grant permission in the system dialog. The app requests read access only and never writes data back into Apple Health. We request only the categories that have a real feature behind them:

• Activity and workouts: steps; walking, running, cycling, swimming, wheelchair, downhill snow sports, cross-country skiing, paddle sports, rowing, and skating distances; active and resting energy burned; exercise, move, and stand time; workouts, workout routes, and workout effort score.
• Body measurements: body mass, body mass index, height, body fat percentage, lean body mass, waist circumference, body temperature.
• Heart and respiratory data: heart rate, resting heart rate, heart rate variability (SDNN), blood pressure (systolic and diastolic), oxygen saturation, irregular heart rhythm events, respiratory rate.
• Sleep and mental state: sleep analysis, mindful sessions, and State of Mind (iOS 18 and later).
• Nutrition and habits: dietary fiber, sugar, caffeine, water, blood glucose, and number of alcoholic beverages.
• Symptoms: the Apple Health symptom categories you record, such as headache, fatigue, nausea, dizziness, shortness of breath, chest tightness, mood changes, and sleep changes.

Purpose. HealthKit data is used solely to display your health timeline, to calculate wellness metrics, trends, and recommendations inside your account, and, where you explicitly request it, to produce the analyses described in section 4.

Restrictions. We do not use HealthKit data for advertising, marketing, retargeting, or building advertising profiles. We do not sell it and do not disclose it to data brokers, insurers, or employers. We do not use HealthKit data for any purpose other than health, fitness, and wellness features of the Service.

Disclosure. HealthKit data is disclosed only to: (a) a coach or consultant you have authorized inside NutriFit; (b) our infrastructure processors acting under contract; and (c) the AI provider described in section 4, and only for a request that you start and confirm.

Withdrawal.You can revoke access at any time in iOS Settings → Privacy & Security → Health → NutriFit. Revocation stops further import. Records already imported remain in your account until you delete them or delete your account as described in section 9.

4. Third-party AI processing

Several features rely on external AI models. The recipients are OpenRouter, Inc. (a routing gateway) and the AI model provider selected for the individual request. NutriFit does not train its own models on your personal data.

• Meal recognition: the meal photo you select, to recognize food and estimate nutrition.
• Laboratory report recognition: the laboratory files or images you select, to extract test values.
• Genetic report recognition: the genetic report file you select, to extract variants and findings.
• Wellness test and explanations: your questionnaire answers and a minimized wellness context, to produce the requested report.
• Insights and forecasts: a minimized summary of your metrics, which may include values imported from Apple Health, to produce the trends and explanations you request.

Explicit permission. Before data is transferred in such a flow, the app displays a disclosure that names the data, the purpose, and the recipients, and asks you to allow or cancel the transfer. If you cancel, the request is not sent. Declining does not affect the rest of the Service.

Provider restrictions. Our servers route AI requests only to provider endpoints marked Zero Data Retention and with provider-side data collection denied, so providers may not retain your content or use it for model training. If no such endpoint is available, the request fails instead of being sent to a less protective provider.

Accuracy. AI output can be inaccurate, is not medical advice, and must be reviewed before you save it or act on it.

Optional model improvement consent. This consent is off by default and can be enabled or withdrawn at any time in Settings → Privacy → Data management. If it is enabled when you delete your account, we may retain de-identified statistics — counts of observations per metric range — that contain no name, contact, exact date, location, photo, or free text, and that become usable only within cohorts of at least 100 contributors. Withdrawal is possible at any time before the anonymization runs.

5. Purposes and legal bases

We process personal data for the following purposes:

• providing and maintaining the Service and its functionality;
• personalization and improvement of user experience;
• communication, notifications, and customer support;
• security, fraud prevention, and abuse detection;
• legal compliance and responding to lawful requests;
• analytics, research, and product development.

Legal bases may include user consent, performance of a contract, compliance with legal obligations, and our legitimate interests, depending on the context and applicable law. Health and wellness data and the transfers described in sections 3 and 4 are processed on the basis of your explicit consent, which you can withdraw at any time.

6. Data sharing and cross-border transfers

• Service providers: cloud hosting and storage, email delivery, push notifications, error monitoring, and payment processors (such as Stripe, Apple App Store, Google Play), acting under data processing agreements.
• AI providers: OpenRouter and the routed model provider, only as described in section 4.
• Coaches and consultants: only those you select or authorize, and only the records made available within that relationship.
• Legal authorities: when required by law or valid legal process.

We do not sell personal data and do not share it with advertising networks or data brokers. Data may be transferred and processed outside your country of residence. We take reasonable measures to ensure appropriate safeguards for such transfers.

7. Security

We implement technical and organizational measures to protect personal data, including access controls, encryption in transit, session revocation, monitoring, and backups. Deleting an account requires recent re-authentication so that no one else can request it. However, no system is completely secure.

8. Data retention

• Account, health, and wellness records, and uploaded files: kept while your account exists, until you delete the individual records or delete the account.
• After a deletion request: permanently erased or irreversibly de-identified once the 30-day period described in section 9 ends.
• Billing, tax, and audit records: retained for the period required by applicable financial and legal obligations, even after account deletion.
• Security and technical logs: retained for a limited period necessary for security and compliance, and then deleted or de-identified.
• Shared correspondence (for example chats and support tickets) is preserved for the other participants, with your identifiers replaced by a non-reversible surrogate key.

9. Account and data deletion

You can delete your account and personal data directly in the app: Settings → Privacy → Data management → Delete account. For your protection, the request requires recent re-authentication. A public step-by-step guide is available at nutrifit.health/account-deletion.

• Immediately: the account is blocked and all active sessions are revoked, so sign-in is no longer possible.
• Within 30 days: the request can only be reversed by NutriFit Support after we verify that the account belongs to you.
• After 30 days:an automated process permanently deletes your account record, the content you own, and the files you uploaded, and irreversibly de-identifies records that cannot be deleted without destroying other people's data, by replacing your identifiers with a non-reversible surrogate key. The process then verifies that no residual reference to you remains.
• Confirmation: the request and its scheduled completion date are shown in the app immediately, and we send a confirmation email once the erasure is complete.
• Exceptions: billing, tax, and audit records required by law, and — if you enabled the optional consent described in section 4 — de-identified aggregates that can no longer be linked to you.

Deleting your NutriFit account does not cancel a subscription purchased through the App Store or Google Play. Cancel it in your Apple ID or Google Play subscription settings.

If you cannot access the app, write to office@nutrifit.company with the subject line “Data Deletion Request” and include your account email. We verify your identity, respond within 30 days, and run the same procedure.

10. Other rights and data export

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, as well as data portability and withdrawal of consent. Withdrawing consent does not affect processing carried out before the withdrawal.

Data Export: To request a copy of your personal data in a machine-readable format (CSV or JSON), contact us at office@nutrifit.company with the subject line “Data Export Request”. We will provide your data within 45 days in compliance with GDPR Article 20 (Right to Data Portability).

You also have the right to lodge a complaint with your competent data protection authority.

11. Cookies and similar technologies

We use cookies and similar technologies to operate and improve the Service. You can manage cookie preferences through your browser or device settings.

12. Children

The Service is not intended for children under the minimum age required by applicable law. We do not knowingly collect personal data from children without appropriate consent.

13. Processors and service providers

We work with trusted third-party service providers who process personal data on our behalf solely under our instructions and contractual obligations. The current categories are: cloud hosting and storage; email delivery and push notifications; error monitoring and diagnostics (Sentry); payments and subscriptions (Stripe, Apple App Store, Google Play); and AI processing (OpenRouter and the routed model provider) as described in section 4.

14. Policy changes

We may update this Privacy Policy from time to time. Changes take effect upon publication unless stated otherwise. Where applicable law requires it, we will request new consent before collecting additional categories of data or using existing data for materially different purposes.

15. Contact information

Company: Nutrifit LLC

Jurisdiction: United States (Wyoming)

Contact email: office@nutrifit.company