Privacy Policy
Effective and last updated: October 1, 2026
1. Who this policy covers
This policy explains how the NutriVeya mobile application and its supporting website and API handle information. By using NutriVeya, you acknowledge the practices described here.
2. Information we process
| Information | Purpose and location |
|---|---|
| Account email, name, and sign-in provider identifier | Received from Sign in with Apple or Google Sign-In and stored on the NutriVeya backend to create your account, authenticate you, prevent duplicate accounts, and support account deletion. |
| Age, sex, height, weight, goal, target date, diet, and activity preferences | Stored on the NutriVeya backend, linked to your account, so your targets and personalization follow you to a new device or reinstall. |
| Meal photos you take or choose | Sent to the NutriVeya backend, where an image-analysis service identifies foods and estimates nutrition. Photos and the resulting meal entries are stored with your meal history, linked to your account, until you delete the entry or your account. |
| Meals, ingredients, portions, and water you log | Stored on the NutriVeya backend, linked to your account, so your history and daily totals are available on every device you sign in on. |
| Apple Health data you authorize | Read only after permission is granted and processed locally to update targets and health summaries. NutriVeya does not send this data to its backend or use it for advertising. |
| Walking location, route, and step data | Collected only while you use walk tracking and stored locally on your device. Routes can be shared or exported only when you choose. |
| Saved meal plans and reminder settings | Stored locally to show saved plans and schedule meal reminders. The public meal-plan catalog and its images are delivered by the backend. |
| Subscription and purchase status | Your NutriVeya Pro purchases are processed by Apple. Our subscription partner RevenueCat receives the App Store receipt and an anonymous app user identifier to verify your entitlement; we store the resulting entitlement status with your account. We never see your payment card details. |
| Device advertising identifier (IDFA) and app events | Used only if you allow tracking in the App Tracking Transparency prompt. Our attribution partner AppsFlyer receives your device identifier and app events (first open, onboarding completed, trial started, subscription purchased, with price and currency) so we can measure which advertising campaigns, for example on TikTok, led to installs and subscriptions. If you decline, we rely on Apple's privacy-preserving SKAdNetwork, which reports campaign results without identifying you. |
| Rewarded ads (free plan only) | If you choose to watch an optional ad to earn an extra photo scan, Google AdMob shows the ad and may collect your device advertising identifier (only if you allowed tracking), approximate location derived from your IP address, and ad interaction data to deliver, measure and, where you consented, personalize ads. In the EEA, UK and Switzerland, Google's consent form asks for your choice first. We send AdMob only an anonymous account identifier so we can credit the extra scan to you. NutriVeya Pro subscribers never see ads. |
| Technical request information | The hosting provider may temporarily process IP address, request time, device/browser metadata, and error information for security and reliability. |
3. Permissions
NutriVeya asks only for permissions connected to features you choose: the camera and photo library for meal scanning, Apple Health for authorized health categories, location for walk tracking, notifications for meal reminders, and App Tracking Transparency for advertising measurement. You can change any of these at any time in iOS Settings; tracking can be withdrawn under Settings → Privacy & Security → Tracking. Some features will stop working if their permission is disabled, but declining tracking never limits the app.
4. How information is used
- Authenticate accounts using Sign in with Apple or Google Sign-In.
- Recognize foods in your meal photos and calculate nutrition, hydration, activity, and progress information.
- Keep your goals and meal history in sync across your devices.
- Deliver meal plans, meal pictures, and scheduled reminders.
- Verify and restore NutriVeya Pro subscriptions.
- Measure the effectiveness of our advertising campaigns (only with your tracking permission, or in aggregate through SKAdNetwork).
- Protect the service, diagnose errors, and prevent misuse.
- Respond to support, privacy, or account-deletion requests.
5. Sharing and third parties
We do not sell personal information. Information is shared only with service providers acting on our behalf, each under its own privacy terms:
- Infrastructure providers that host the API, database, and stored meal photos.
- Apple and Google when you select their sign-in service, and Apple for subscription billing.
- RevenueCat for subscription verification (privacy policy).
- AppsFlyer for advertising attribution (privacy policy). AppsFlyer may pass install and conversion events to the advertising network that showed you an ad, such as TikTok, so that network can measure its campaigns.
- Google AdMob for optional rewarded ads on the free plan (how Google uses information from apps that use its services). You can reset or limit your advertising identifier in your device settings and change your ad-consent choice from the app's consent form.
Apple Health information is subject to Apple HealthKit protections and is never disclosed to advertising platforms, attribution partners, or data brokers. Meal photos and health details are never used for advertising, and are never shared with Google AdMob.
6. Retention and account deletion
Account records, goals, meal history, and meal photos are retained while your account is active. You can delete individual meal entries at any time, and you can permanently delete your account inside NutriVeya under Profile → Account → Delete account permanently. This removes the account, linked sign-in records, goals, meal history, and photos from the backend and clears NutriVeya data from that device. Attribution partners retain campaign data according to their own retention periods. Information that must be kept to comply with law may be retained only for the required period.
7. Security
We use reasonable administrative and technical measures intended to protect information, including HTTPS encryption in transit, authenticated API access, and restricted database access. No internet or storage system can be guaranteed completely secure.
8. Children
NutriVeya is not directed to children under 13. If you believe a child provided personal information without appropriate consent, contact us so the information can be removed.
9. International use and your rights
Information may be processed in the country where the NutriVeya infrastructure provider operates. Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent (for example, tracking permission) at any time. To exercise these rights, use the in-app controls or contact us below.
10. Changes
We may update this policy when the application or legal requirements change. The effective date above will be updated, and material changes will be communicated as appropriate.
11. Contact
For privacy questions or requests, email [email protected] or visit the NutriVeya support page.