iOS is in development and has not shipped. The same NourishAI features are planned for iOS, including health integration through Apple HealthKit, advertising and paid subscriptions. References to iOS features describe the planned release.
1. Information We Collect
NourishAI ("we," "our," or "us") collects information you provide directly and data generated through your use of the service:
Meal & Nutrition Data: Meals you log, recipes, ingredients, calorie and macro goals, and meal photos you upload.
Health & Fitness Data: In the planned iOS app, connecting Apple HealthKit will let NourishAI read your daily step count to estimate calories burned. On Android, Health Connect can import and, where supported and authorized, receive records you create in NourishAI. Samsung Health can provide read-only weight, nutrition, water, workout, sleep, and step records for the categories you select and authorize.
Payment Data: Payment card details and billing information are collected and processed directly by Paddle (our payment processor). We do not store full payment card numbers.
Usage Data: Standard server logs (IP address, browser type, timestamps) for security and debugging. If you allow optional analytics, we also collect website and app screen visits, referring websites, approximate location, and browser/device information through Vercel Analytics. When enabled, Google Analytics also measures public website pages. The same consent choice covers completed signups and purchases, including signup method, plan, platform and, for web purchases when available, purchase value and currency.
2. How We Use Your Information
To provide personalized meal plans and nutrition tracking
To calculate BMI, calorie goals, and macro recommendations
To process subscription payments and manage your account
To display your public profile if you opt into public sharing
To send password reset emails and essential account notifications
To improve our AI meal recognition and recommendation models
We never sell your personal data. We never use your health data for advertising or marketing purposes.
3. Health Data (Apple HealthKit, Health Connect & Samsung Health)
Health records are accessed only after you select categories and grant the corresponding provider permissions. Apple HealthKit is planned for reading daily steps in the iOS release. On Android, Health Connect can import records and write supported NourishAI entries when you authorize those permissions. The Samsung Health Data SDK reads only the categories you select, such as weight, nutrition, water, workouts, sleep, and steps. Samsung Health access is read-only; NourishAI does not request exercise route or location data. Imported records are sent from your device to your signed-in NourishAI account over an encrypted connection for display and cross-device synchronization. This data is:
Stored on our servers to enable cross-device synchronization
Used for your diary, health histories, daily summaries, and calorie expenditure estimates
Never sold or used for advertising, and never shared with data brokers
Deleted from our servers when you delete your account
You can disconnect a provider in NourishAI or revoke its permission in the provider's settings. This stops future reads or synchronization; records already imported into NourishAI remain in your account until you remove them using available account controls or delete your account. Changes made in a source app do not necessarily delete an existing NourishAI copy. Health Connect also provides controls for its own stored records. For details about Samsung Health access and your choices, read our Samsung Health data consent.
4. AI Processing & Third-Party Services
We use the following third-party services to operate NourishAI:
DeepSeek AI & Google AI: Meal photos and food descriptions are sent to AI providers for food recognition, nutritional estimation, and meal planning. Data sent includes images you upload and text descriptions of your meals. These providers process data solely for generating responses and do not retain your data for model training.
Paddle: Payment processing for subscriptions. Paddle receives your email, payment method, and transaction amount. See Paddle's Privacy Policy.
Neon (PostgreSQL): Database hosting for all application data.
Cloudflare R2: Image storage for profile photos and meal images you upload.
Vercel Analytics: With your permission, we measure visits to selected website and app screens without analytics cookies. We also count completed signups and purchases with signup method, plan and platform information. A short-lived first-party signup marker carries the completed signup across a redirect, and local browser storage helps prevent duplicate conversion reports. Dynamic account IDs, meal IDs, dates, page URL query strings and fragments are removed before collection. We do not send account identifiers or health records as analytics events. See Vercel's Web Analytics privacy information.
Google Analytics: With your permission, we measure visits to public website pages and completed website signups and purchases using analytics cookies. Purchase reports use a hashed transaction reference, plan and, when available, value and currency. We do not send payment card details. We do not send account identifiers, health records, search terms, or URL query strings to Analytics. Account pages and the native app are excluded, and Google advertising features are disabled. See how Google uses information from sites that use its services.
Appaloo: When enabled, free accounts may see banner ads in our Android app, with advertising also planned for the iOS release. Appaloo reports ad views and clicks to operate its ad exchange. NourishAI does not send your account details, meals, or health records to Appaloo. See Appaloo's Privacy Policy.
5. Data Sharing & Public Profiles
Your profile is private by default. If you choose to make your profile public, the following information may be visible to other users: name, age, gender, fitness goal, BMI, calorie goal, country, profile photo, and meal diary.
You can switch your profile to private at any time from Profile Settings. Previously public data may remain in search engine caches until they refresh.
6. Data Retention & Deletion
We retain your data for as long as your account is active. You can delete your account at any time from Profile Settings, which permanently removes all your data including meals, step logs, weight logs, favorites, and AI-generated content.
You may also request a copy of your data or request deletion by contacting us at the email below. We respond to all data requests within 30 days.
7. Children's Privacy
NourishAI is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
Access the personal data we hold about you
Correct inaccurate data
Delete your data
Export your data in a portable format
Withdraw consent for optional data processing
Object to or restrict certain processing
To exercise these rights, use the self-service tools in the app or contact us.
Optional analytics stays off until you allow it. One consent choice controls Vercel Analytics and Google Analytics in this browser or app. You can decline or change your analytics choice below at any time. Withdrawing permission stops further collection and removes this website's analytics cookies and conversion duplicate protection storage from your browser. Events that occur without permission are discarded rather than reported after you give permission later.
9. Security
We use industry-standard measures including TLS encryption for data in transit, PBKDF2-SHA256 password hashing with per-user salts, and parameterized database queries. However, no electronic transmission or storage is 100% secure.
10. Changes to This Policy
We will notify you of material changes via email or in-app notice. Continued use after changes take effect constitutes acceptance.
11. Contact Us
For privacy-related inquiries or to exercise your data rights, contact us at: