Privacy Policy for Nourish Nutrition Tracker

Effective Date: January 1, 2025
Last Updated: February 1, 2026

Introduction

Nourish Nutrition Tracker ("we," "our," or "us") is committed to protecting your privacy through a privacy-by-design approach. This Privacy Policy explains our data practices when you use our mobile application ("App"). Simply put: your personal health data stays on your device. Your food logs, recipes, weight, and nutrition data are stored only on your device and optionally in your personal iCloud account for group features. We collect minimal technical data (anonymous device tokens for API security) as described below. Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the App.

Information We Collect

Personal Health Data - Stored Locally

Important: We do not collect or have access to your personal health information. All nutrition data you enter into the app (food logs, recipes, weight, goals) remains on your device. If you join groups, only the summary data you choose to share syncs to your personal iCloud account.

Data You Store Locally

The following information is stored locally on your device and optionally synced to your personal iCloud account:

• Profile Information: Username, age, gender, height, weight, and activity level
• Health Goals: Daily calorie targets, macronutrient goals (protein, carbohydrates, fat)
• Nutrition Data: Food items logged, meal information, serving sizes, and nutritional intake
• Health Metrics: Water intake logs, weight tracking data, and progress measurements
• App Preferences: Theme settings, notification preferences, and sync settings

Anonymous Usage Analytics

We use TelemetryDeck, a privacy-focused analytics service, to collect anonymous usage data. This helps us understand how features are used and improve the app. This data:

• Contains no personal information, user IDs, or device identifiers
• Cannot be traced back to individual users
• Does not include any of your food logs, nutrition data, or health information
• Is aggregated and used only for product improvement
• Is GDPR compliant and does not require consent

Examples of anonymous data collected: feature usage counts (e.g., "barcode scan used"), app launch counts, and general performance metrics. We never collect what you eat, your goals, or any personal health data.

Camera Access

Our App may request access to:

• Camera: For barcode scanning, AI-powered food recognition, and taking profile photos

Note on Photo Selection: When selecting photos from your library (for AI food analysis or profile photos), we use Apple's modern photo picker which does not require access to your full photo library. You select specific photos to share, and we never see your other photos.

HealthKit Integration

If you enable HealthKit sync, the App can read and write health data:

• Read: Weight, body fat percentage, active energy burned, and water intake from Apple Health
• Write: Nutrition data (calories, protein, carbs, fat), weight, and water intake to Apple Health

HealthKit data stays within Apple's secure health ecosystem. We do not transmit HealthKit data to our servers. You can enable or disable specific sync options in the app settings.

Device Authentication

To secure our API and prevent abuse, we use Apple's App Attest to verify your device. This creates an anonymous device token that:

• Is not linked to your name, email, or Apple ID
• Cannot identify you personally
• Automatically expires after 90 days of inactivity
• Is stored securely on our servers (Upstash Redis)

This protects all users by ensuring only legitimate app installations can access our services.

AI Food Recognition

When you use the AI food recognition feature, your food photos are:

• Processed securely: Images are sent to our secure API server which forwards them to AI providers (Google Gemini or OpenAI) for food identification
• Not stored on our servers: Images are processed in real-time and not retained after analysis
• Stored locally: Food photos you log are saved only on your device (and your iCloud if sync is enabled)
• Never shared: Your food photos are never used for training AI models, advertising, or shared with third parties

Note: AI providers process images according to their privacy policies. We use enterprise-grade API access which ensures your data is not used for model training.

How Your Data is Used

Since we don't collect your data, we cannot and do not use your personal information. Your data is used only by the app on your device for:

Local App Functionality

• Calculate personalized calorie and macronutrient goals on your device
• Track and analyze your nutrition intake and progress locally
• Provide personalized health insights using local calculations
• Sync your data to your personal iCloud account (if you enable this feature)

What We Don't Do

• We do not analyze your personal health or nutrition data
• We do not send personalized communications based on your data
• We do not profile users or create analytics from personal information
• We do not sell or share your data with advertisers
• App updates and support are provided without accessing your personal data

Data Storage and Sync

Local Storage

• All your nutrition and health data is primarily stored locally on your device
• Data is encrypted and secured using industry-standard methods
• No personal data is transmitted to external servers for storage

iCloud Sync for Groups (Optional)

• If you use group features (accountability groups, sharing progress), group-related data syncs to your personal iCloud account
• What syncs: Group memberships, shared daily summaries (only the progress metrics you choose to share), and group invitations
• What does NOT sync: Your personal food logs, recipes, and detailed nutrition data remain only on your device
• We use Apple's CloudKit framework for secure, encrypted synchronization
• Only you can access your synced data through your Apple ID
• We cannot access your iCloud data - it remains under your control

Information Sharing and Disclosure

We do not and cannot share your personal information because we do not have access to it.

No Data Sharing

• We do not collect, store, or have access to your personal data
• We cannot share what we do not possess
• Your data remains exclusively under your control

Apple iCloud (Optional)

• If you use group features, related data is stored in your personal Apple iCloud account
• This is governed by Apple's privacy policy, not ours
• We have no access to your iCloud data - it belongs entirely to you
• You can leave groups at any time to stop syncing

Third-Party AI Providers

• AI food analysis is powered by Google Gemini or OpenAI, depending on availability
• Food photos are sent securely for analysis and are not stored by us
• AI providers may retain data according to their own privacy policies (typically 30 days for API logs)
• We use enterprise API access which ensures your data is not used for model training

Analytics Provider

• We use TelemetryDeck, a privacy-focused analytics service based in the EU
• TelemetryDeck is GDPR compliant and collects no personal data
• No cookies, no user tracking, no personal identifiers are used

Your Privacy Rights and Choices

Access and Control

• View Data: Access all your personal data through the app's profile and settings sections
• Edit Information: Update your profile, goals, and preferences at any time
• Delete Data: Remove individual entries or clear all app data. See our data deletion guide for complete instructions.
• Export Data: View and export your nutrition logs and progress data

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: nourish@navbytes.io
Subject Line: "Privacy Policy Inquiry - Nourish App"

Response Time: We will respond to privacy inquiries within 30 days of receipt.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated Privacy Policy within the App and updating the "Last Updated" date at the top of this policy.