Privacy policy.

About this policy

This policy covers NutriGo for iOS and Android and this showcase website. The app is in development. Some features require a configured service and your permission before they are available.

Information you choose to provide

• Account: your Apple or Google sign-in identifier, email and available profile information. NutriGo does not receive your Apple or Google password.
• Nutrition and progress: food and water logs, portions, recipes, fridge ingredients, preferences, targets, check-ins, and measurements. Profile information such as age, height, weight and activity is used for the features you choose.
• Community: your handle, display name, bio, chosen photo, friendships, circles, shared posts, reactions and reports. Your diary is not automatically shared. Nutrition appears in a post only when you explicitly include it.
• Device settings: account-bound device identifiers, push tokens, notification preferences and pending sync actions support notifications and cross-device reliability.

Health, camera and microphone access

Health access is optional. With permission, NutriGo reads the supported measurements you select from Apple Health or Health Connect. A separate water-sync choice allows new NutriGo water entries to be written to your health service. You can pause syncing in the app and change permissions in your device settings.

Camera and photo access supports scanning, food review, profile photos and posts. Microphone access supports optional voice input. Granting a device permission does not automatically publish a photo or a health record.

Health information is used for your requested tracking features, not for advertising, marketing profiles, or sale to data brokers.

Where data goes

Local-only records stay on your device until you choose to import them into an account. Account features use Google Firebase Authentication, Cloud Firestore, Cloud Storage and Cloud Functions for identity, private records, uploaded media and processing. Firebase Cloud Messaging delivers optional notifications; Apple’s push service participates on iOS. App Check and service logs help protect the service from abuse.

Food searches and barcodes are sent to the configured nutrition provider, currently USDA FoodData Central. Recipe discovery uses a catalogue sourced from MedlinePlus. Supported restaurant lookup, when configured, sends your chosen restaurant, search and territory to Nutritionix. These searches do not send your full health profile to the food provider.

Optional AI assistance, when enabled, sends the selected image or text to Google Vertex AI only after the in-app consent step. NutriGo processes those requests without saving the input image as a food record automatically. You review any suggestion before logging it. Provider processing is subject to that provider’s terms; AI output is not a verified nutrition fact.

Service providers may process information outside your country. Data is transmitted using encrypted connections, and account access is checked on the server. No system can guarantee absolute security.

Sharing and community

Posts are shared with the friends or circle audience you select. Access is rechecked when posts and media are requested. Blocking, removing a friendship or revoking a post restricts future access, but cannot recall screenshots or copies already viewed. The developer may access reported content and related account information to investigate abuse and support requests.

NutriGo does not sell personal information and does not include advertising or advertising trackers. Information may also be disclosed when necessary to comply with legal obligations or protect users and the service.

Retention and deletion

Account records are kept while needed to provide your account and requested features. Editing or deleting an individual record can leave a sync marker so older devices cannot restore it. Deactivating an account preserves its records; permanent account deletion removes the account and its associated stored records and media.

An opaque revoked-device marker can remain after deletion to reject delayed device actions. It contains no account ID or health profile. Operational security logs are retained separately under the hosting provider’s configured retention. Support emails are retained while needed to handle the request and document its resolution; contact us to request their deletion. Any legally required retention will be explained when it applies.

You can export account records in Settings, delete an account in the app, or use our account-deletion request page. Removing the app alone does not delete a cloud account. Manage retained Apple Health or Health Connect records within those services.

Your choices

You can change notification consent, health permissions, community visibility and sharing choices. Contact ygshuh@gmail.com to request access, correction or deletion, or to raise a privacy concern. We may need to verify account ownership. Rights and response requirements depend on your location.

NutriGo is not designed for young children. Age and health context limit some planning and AI features. If a child has provided information without appropriate permission, contact us so we can investigate and remove it where required.

This website and changes

This showcase uses GitHub Pages, which may collect technical request information such as IP addresses for hosting and security. The page itself has no sign-up form, advertising or analytics scripts. Clicking an email link opens your own email service.

We update this policy when data practices change and show the latest date here. Material changes requiring consent will be presented in the app before the affected processing.