Privacy Notice

1. Controller

The controller of your data is Pablo Costanzo, operator of NutriLog. Contact: [email protected].

2. Data we process

Account: name, email and profile picture from your Google account, and language.

Data you enter: profile (age, height, weight, activity level), goals, meals and drinks (with photos if you upload them), physical activity, body measurements and AI chat messages. This is health-related data: we process it only to provide the service and with your consent by using it.

Payments: we never see or store your card details; Paddle processes them. We receive from Paddle the purchase confirmation and the pack bought.

2 bis. Approximate location and weather

To adjust your hydration target to the heat, we use your IP address to estimate your city (with the ipwho.is service) and look up the day's maximum temperature in that area (with Open-Meteo). Only the IP and the approximate coordinates of the city are sent to those services.

We do not store your IP or your coordinates: our database keeps only the city name and the maximum temperature of each day. We do not use GPS or ask for location permissions.

3. What we use it for

To show you your logs, goals, charts and tips, calculate badges, enable groups, manage your token balance and keep the service secure. We do not sell your data or use it for advertising.

4. Who we share it with

Google (sign-in). ipwho.is and Open-Meteo (approximate city and weather, see above). OpenAI: when you use AI, we send the text, photo or context needed for that request to generate the answer. Paddle (payments). Our server hosting provider. Members of a group see what you share in that group (for example your name, day summary and photos you mark as shared).

Some of these providers may be located in other countries; their own data-protection safeguards apply.

4 bis. Sharing your day with a group

By default your day is private. Inside each group you can switch on sharing of your full day (daily goals and rings, charts, food and drinks with their photos, activity and the next meal) and choose whether only the group creator or all members can see it. You can switch it off at any time and it stops being visible; leaving the group does the same.

Whoever has access can also ask the AI about your data: in that case your profile, measurements and what you logged in the last 30 days are sent to OpenAI, and the person asking pays the tokens. The asker's conversations stay in their own account, not yours.

5. Retention

We keep your data while you have an account. If you ask for deletion, we delete your personal data except what we must keep for legal obligations (for example payment records, which Paddle keeps).

6. Your rights

You can request access, rectification, deletion, portability or objection by writing to [email protected]. You can also edit or delete your logs in the app. If you believe your rights were not respected, you can complain to the data-protection authority in your country.

7. Cookies

We use essential cookies to keep your session and remember your language. We do not use advertising cookies. Paddle checkout may use Paddle's own cookies.

8. Security and changes

We protect data with an encrypted connection (HTTPS) and restricted access. If we update this notice, we will change the update date.