Privacy policy
Last updated: September 30, 2026
This policy explains what personal data NUTRIX AI collects, why, and what your rights are. Because NUTRIX works with health information, we collect only what the service needs. We never sell your data and never show ads.
1. Who is responsible
NUTRIX AI (nutrix-ai.com) is responsible for your personal data. For any question or request about your data, write to support@nutrix-ai.com.
2. What we collect
- Account: your name, email address, and your password stored only as a secure hash — or your Google account identifier if you sign in with Google.
- Health and lifestyle answers: sex, age, height, weight, goal and target weight, activity, exercise, diets, allergies, food preferences, and health screening answers (for example pregnancy, medical conditions, medication or a history of eating disorders).
- What you log: meals, water, weight, body measurements, habits, progress photos and meal photos you scan.
- Your conversations with the AI coach.
- Settings and device data: language, time zone, theme and, if you turn them on, push notification subscriptions.
- Security data: IP address (to prevent abuse) and records of sign-ins and security-related actions.
3. Why we use it
- To provide the service: calculate your targets, build meal plans, recipes and shopping lists, and send the reminders and tips you chose.
- To personalise the AI coach and meal analysis while respecting your allergies, diets and health answers.
- To keep accounts and the service secure.
- To handle payments if you subscribe to a paid plan.
We do not sell your data, use it for advertising, or share it with data brokers.
4. Legal bases
- Performing our contract with you (GDPR art. 6(1)(b)) for your account and the service.
- Your explicit consent (art. 9(2)(a)) for health data, given when you create your account. You can withdraw it at any time by deleting the data or your account.
- Our legitimate interest in keeping the service secure (art. 6(1)(f)).
- Legal obligations, for example keeping invoices (art. 6(1)(c)).
5. AI features
When you use the coach, “Can I eat this?” or meal photo analysis, your message or photo and the profile details needed to answer (such as allergies, diets and targets) are sent to our AI provider, Anthropic, to generate the reply. Anthropic processes this data on our behalf and, under its commercial terms, does not use it to train its models.
AI answers are informational and can be wrong. Always check ingredients and labels, especially for allergies.
6. Service providers
We use trusted providers who process data only on our instructions:
- Vercel — hosting (servers in Frankfurt, EU).
- Neon — database (EU).
- Anthropic — AI features (United States).
- Google — sign-in, only if you choose “Continue with Google”.
- Resend — password reset emails.
- Apple, Google and Mozilla push services — delivering notifications you turned on (the content is encrypted).
- Stripe — payments, only if you subscribe.
- Cloudflare — domain name and network.
- Open Food Facts — when you scan a barcode, only the barcode number is sent.
7. Transfers outside the EU
Some providers are located in the United States. These transfers are protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
8. How long we keep data
We keep your data while your account exists. When you delete your account, your data and photos are deleted immediately and permanently. Copies may remain in our database provider's encrypted backups for a short period before being overwritten. We keep only an anonymous record that a deletion took place.
9. Your rights
- Access and portability: Settings → “Download my data” gives you a copy of everything we hold.
- Correction: change your answers and settings in the app at any time.
- Deletion: Settings → “Delete my account” erases your account and data.
- Withdraw consent, object to or restrict processing: write to support@nutrix-ai.com.
- You can also complain to your data protection authority (in France, the CNIL).
10. Cookies
We only use cookies that the service needs to work: keeping you signed in, remembering your language, and securing sign-in with Google. We use no advertising or tracking cookies.
11. Security
Passwords are hashed, connections are encrypted, photos are stored privately and only you can see them, and access to data is restricted and logged.
12. Age
NUTRIX AI is for adults aged 18 and over. We do not knowingly collect data from minors.
13. Changes
If we make significant changes to this policy, we will tell you in the app before they apply.