Privacy Policy

1. Information We Collect

NourishAI ("we," "our," or "us") collects information you provide directly and data generated through your use of the service:

• Account Data: Name, email address, and optional profile details (age, gender, height, weight, fitness goals, country, profile photo).
• Meal & Nutrition Data: Meals you log, recipes, ingredients, calorie and macro goals, and meal photos you upload.
• Health & Fitness Data: If you connect Apple HealthKit (iOS) or Health Connect (Android), we read your daily step count to estimate calories burned. We never read or access any other health data beyond step counts.
• Payment Data: Payment card details and billing information are collected and processed directly by Paddle (our payment processor). We do not store full payment card numbers.
• Usage Data: Standard server logs (IP address, browser type, timestamps) for security and debugging.

2. How We Use Your Information

• To provide personalized meal plans and nutrition tracking
• To calculate BMI, calorie goals, and macro recommendations
• To process subscription payments and manage your account
• To display your public profile if you opt into public sharing
• To send password reset emails and essential account notifications
• To improve our AI meal recognition and recommendation models

We never sell your personal data. We never use your health data for advertising or marketing purposes.

3. Health Data (Apple HealthKit & Android Health Connect)

Step count data is read from your device's health store only when you explicitly grant permission. This data is:

• Stored on our servers to enable cross-device synchronization
• Used solely to display step counts and estimate calorie expenditure
• Never shared with third parties, advertisers, or data brokers
• Deleted immediately if you revoke permission or delete your account

You can disconnect HealthKit or Health Connect at any time through your device settings or the app's profile page.

4. AI Processing & Third-Party Services

We use the following third-party services to operate NourishAI:

• DeepSeek AI & Google AI: Meal photos and food descriptions are sent to AI providers for food recognition, nutritional estimation, and meal planning. Data sent includes images you upload and text descriptions of your meals. These providers process data solely for generating responses and do not retain your data for model training.
• Paddle: Payment processing for subscriptions. Paddle receives your email, payment method, and transaction amount. See Paddle's Privacy Policy.
• Neon (PostgreSQL): Database hosting for all application data.
• Cloudflare R2: Image storage for profile photos and meal images you upload.

5. Data Sharing & Public Profiles

Your profile is private by default. If you choose to make your profile public, the following information may be visible to other users: name, age, gender, fitness goal, BMI, calorie goal, country, profile photo, and meal diary.

You can switch your profile to private at any time from Profile Settings. Previously public data may remain in search engine caches until they refresh.

6. Data Retention & Deletion

We retain your data for as long as your account is active. You can delete your account at any time from Profile Settings, which permanently removes all your data including meals, step logs, weight logs, favorites, and AI-generated content.

You may also request a copy of your data or request deletion by contacting us at the email below. We respond to all data requests within 30 days.

7. Children's Privacy

NourishAI is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data
• Export your data in a portable format
• Withdraw consent for optional data processing
• Object to or restrict certain processing

To exercise these rights, use the self-service tools in the app or contact us.

9. Security

We use industry-standard measures including TLS encryption for data in transit, bcrypt (PBKDF2) password hashing with per-user salts, and parameterized database queries. However, no electronic transmission or storage is 100% secure.

10. Changes to This Policy

We will notify you of material changes via email or in-app notice. Continued use after changes take effect constitutes acceptance.

11. Contact Us

For privacy-related inquiries or to exercise your data rights, contact us at:

📧 privacy@nourish.ai