Privacy Policy

This Privacy Policy explains how Nutri Plan ("we", "us"), operated by ФОП Анастасія Федорак, collects, uses, and protects your information when you use the Nutri Plan mobile app and website (the "Service").

Nutri Plan is a nutrition and wellness tracking tool. Much of the data you enter is personal and health-related, so we keep this policy specific about what we collect and why.

1. Information we collect

We collect only what is needed to run the Service:

Account information: your email address and name, provided when you sign up or when you sign in with Google or Apple.
Nutrition data you enter: food diary entries, meals, meal plans, and nutrition goals.
Body measurements you enter: such as weight and related metrics.
Journal data: mood, emotions, hunger levels, and free-text reflections you record.
Cycle tracking data: menstrual cycle dates, flow, and symptoms. This is sensitive reproductive-health information and is treated with extra care.
Photos you upload: images you attach to meals, journal entries, or your profile picture. With your permission, these are taken with your camera or chosen from your photo library, stored in our cloud storage, and shown back to you in the app.
Apple Health data (iOS only): with your explicit permission, we read workout/activity data from Apple Health to pre-fill your training check-in. This data is read-only — we never write to Apple Health — and is used only for that feature.
Preferences: such as your language choice.
Technical data: authentication tokens needed to keep you signed in, stored securely on your device.

2. How we use your information

We use your information to:

Provide, operate, and maintain the Service and the features you use.
Estimate the nutritional content of foods you log (see "AI processing" below).
Save your data so it is available across your devices.
Respond to your support requests.

3. What we do not do

We do not sell your personal data.
We do not use your data for advertising, and we do not track you across other apps or websites.
We do not use your Apple Health data, cycle data, or other health data for marketing or advertising.

4. AI processing

To estimate nutrient values, descriptions of the foods you log may be sent to Google’s Gemini AI service for analysis. These estimates are approximate and are returned to the Service to display to you. We do not send your account identity to the AI provider beyond what is necessary to perform the estimation.

5. Third-party services we rely on

We use a small number of trusted providers ("sub-processors") to run the Service:

Auth0 (Okta): authentication and sign-in.
Google and Apple: social sign-in, if you choose to use it.
Google Gemini: AI nutrient estimation, as described above.
Oracle Cloud Infrastructure: hosting of the Service and its database in the United Kingdom (London).
USDA FoodData Central and translation services (e.g. DeepL): used to build our reference food database. These process public reference data, not your personal information.

6. How your data is shared

We share your information only with the sub-processors listed above, as needed to operate the Service, and where required by law. We do not share your health or cycle data with any party for advertising or marketing.

7. Data retention and deletion

We keep your data for as long as your account exists. You can delete your account at any time from within the app (Account settings → Delete account). Deleting your account removes your personal data from the Service, subject to any limited retention required by law.

8. Your rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate data — most of which you can edit directly in the app.
Export your data, where the app provides an export feature.
Delete your data by deleting your account.
Contact us with any privacy request at anastasiia.fedorak@gmail.com.

9. Security

We protect your data in transit using HTTPS encryption, store authentication tokens in your device’s secure storage, and restrict access to the systems that hold your data. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

10. Children

Nutri Plan is not intended for children under the age of 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so we can remove it.