I. Entity Responsible
The entity responsible for the processing of your personal information is NutriPal (“NutriPal”, “we”, “us”), the operator of the NutriPal mobile app and the website at nutripal.io. You can reach us at support@nutripal.io (see also Section XIII below).
II. Personal Information Collected and Used, Processing Purposes and Legal Bases
Account information. When you create a NutriPal account, you sign in with your phone number. Your number is verified and your sign-in is managed through Firebase Authentication (a Google service). We also store the profile details you choose to provide, such as your name and profile photo. Purpose: creating and securing your account and providing the app. Legal basis: performance of our agreement with you.
App data you create. The food and nutrition entries you log in the app — for example meals, foods and related notes — are saved to your account in our backend database so you can view and track them over time. Purpose: providing the app's core logging and tracking features. Legal basis: performance of our agreement with you.
Website information. If you subscribe to our newsletter, we collect your name and email address. If you use the contact form on this website, we collect your name, email address, subject and the message you send. Purposes: sending the newsletter and replying to your message. Legal bases: your consent (newsletter — you can withdraw it at any time) and our legitimate interest in responding to enquiries.
Technical information. Like most online services, our systems receive basic technical information needed to operate and secure the service, such as device type, app version and connection details. Purpose: operating, maintaining and securing the app and website. Legal basis: our legitimate interests in running a safe and reliable service.
Email. Account-related and transactional email is sent through our email provider, Resend. Legal basis: performance of our agreement with you and our legitimate interests in communicating about the service.
III. Information Sharing and Disclosure
We do not sell your personal information. We share information only with the service providers that run NutriPal:
- Google / Firebase — phone-number sign-in and authentication.
- MongoDB Atlas — hosting of the app's database, where your account and log data are stored.
- Resend — delivery of account and transactional email.
We may also disclose information if required to do so by law, or to protect the rights, safety and security of NutriPal and its users.
IV. How Long We Store Your Information
We keep your account information and app data for as long as your account is active, so the service can work as described above. Newsletter subscription data is kept until you unsubscribe or ask us to remove it, and contact-form messages are kept for as long as needed to handle your enquiry. When you ask us to delete your account, we delete the associated data as described in the Account and Data Deletion section below. Some records may be kept for a limited period where the law requires it, or where needed for security and legal purposes.
V. Your Rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain uses of it. In particular:
- Deletion: you may request deletion of your NutriPal account and the data associated with it at any time — see the Account and Data Deletion section below for exactly how.
- Access and correction: you may ask what personal information we hold about you and ask us to correct anything inaccurate.
- Newsletter: you may withdraw your consent and stop the newsletter at any time by contacting us.
To exercise any of these rights, email us at support@nutripal.io and we will respond within the time required by applicable law.
Account and Data Deletion
You can request deletion of your NutriPal account and the data associated with it at any time:
- Email support@nutripal.io with the subject “Account deletion request”.
- Send the request from, or clearly state, the phone number or email address associated with your account, so we can verify the request is yours.
We process deletion requests within 30 days. Once processed, your account, profile and nutrition logs are deleted from our systems, except for any limited records we are legally required to retain. Deleting the app from your phone does not by itself delete your account — please send a request as described above.
VI. Security
Data is transmitted over encrypted connections (HTTPS/TLS), access to our systems is restricted, and we use established providers with industry-standard security practices. No system is completely secure, but we work to protect your information against unauthorized access, loss or misuse.
VII. International Transfer
NutriPal's systems and service providers are located in the United States, where your information is stored and processed. If you use NutriPal from another country, your information will be transferred to and processed in the United States, and handled as described in this policy.
VIII. Our Policy Towards Children
NutriPal is not directed at children under the age of 13 (or the minimum age for consent in your country), and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us at support@nutripal.io and we will delete it.
IX. Phishing
We will never email or message you asking for your password, your sign-in verification code, or your payment details. If you receive a message claiming to be from NutriPal that asks for these, do not reply or click its links — it did not come from us. NutriPal only contacts you from the nutripal.io domain; if you are unsure about a message, contact us at support@nutripal.io.
X. Links to Other Sites
The app and this website may contain links to third-party websites and services. This policy does not apply to those sites, and we are not responsible for their privacy practices. We encourage you to read the privacy policy of any site you visit.
XI. Your Responsibilities for Protecting Your Data
You can help keep your account safe: keep your phone and sign-in details secure, never share your one-time verification codes with anyone, and sign out of your account on devices you no longer use. If you believe your account has been compromised, contact us as soon as possible at support@nutripal.io.
XII. Complaints
If you have a concern about how we handle your personal information, please contact us first at support@nutripal.io and we will do our best to resolve it. You also have the right to lodge a complaint with your local data protection or consumer privacy authority.
XIII. Contacting Us
For any privacy question, request or complaint, contact us at support@nutripal.io or through the contact page.
Changes to this policy
We may update this policy from time to time. When we do, we will post the revised version on this page and update the “Last updated” date above. Significant changes will be highlighted on this page.