Privacy Policy
How Nourity handles your personal data
The short version: we collect only what we need to run your journal. Your food and mood entries can reveal things about your health, so we only process them with your explicit consent. We never sell your data, never use it for advertising, and never share it with data brokers. You can export or delete everything from Settings at any time.
Who we are
Nourity is a personal food and mood journal for adults. It is run by [Company legal name], a company registered in [Country of registration] with company number [Company number], whose registered address is [Registered address]. We are the "controller" of your personal data, which means we decide how and why it is used.
We are registered with the UK Information Commissioner's Office (ICO) under registration number [ICO registration number].
Our representative in the European Union under Article 27 of the EU GDPR is [EU representative], [EU representative address]. You can contact them instead of us about anything in this policy.
For any privacy question or request, email hello@nourity.app.
This policy explains how we meet the UK GDPR, the Data Protection Act 2018 and the EU GDPR. If you live in the United States, please also read our Consumer Health Data Privacy Policy, which covers US state health-data laws.
What data we collect
Account details
- Your email address and name.
- The intention you choose during onboarding (for example "Notice what makes me feel good").
- Your timezone, so your days and charts line up with your local time.
Your journal (health data)
- Food entries: the free text you type to describe a meal, and the nutrition estimates our AI provider produces for it.
- Mood check-ins: your energy, mood and stomach comfort scores (each on a 1 to 5 scale).
- The date and time of each entry.
We treat all of your journal entries as health data ("special category data"), because together they can reveal information about your physical or mental health.
Consent records
- Your confirmation that you are 18 or over.
- Your explicit consent to us processing your health data, including when you gave it and which version of the wording you agreed to. If you withdraw consent, we record that too.
Sign-in and security
- One-time sign-in codes. We store these only in hashed (scrambled) form, and they expire after 10 minutes.
- Basic security and server logs, such as IP address, time of request and error details, used to keep the service secure and working.
Payments
- If you buy Premium, we store the Stripe customer ID, subscription ID and subscription status linked to your account. Payments are processed by Stripe. We never see or store your card details.
We do not collect your location, phone number, contacts, photos or social media profiles.
Why we use your data, and our legal basis
Data protection law requires us to have a "lawful basis" for each use of your data. Here is ours:
| What we do | Data used | Legal basis |
|---|---|---|
| Create and run your account, sign you in, provide the app | Email, name, intention, timezone, sign-in codes | Contract (UK/EU GDPR Art. 6(1)(b)) |
| Store your food and mood entries and show you your own patterns | Journal entries and timestamps | Contract (Art. 6(1)(b)) plus your explicit consent for health data (Art. 9(2)(a)) |
| Estimate the nutrients in a meal using AI, and (on Premium) suggest meal ideas | Meal text only | Contract (Art. 6(1)(b)) plus your explicit consent (Art. 9(2)(a)) |
| Take payments and manage your subscription | Email, Stripe IDs, subscription status | Contract (Art. 6(1)(b)) |
| Send service emails (sign-in codes, trial and renewal reminders, important changes) | Email, name | Contract (Art. 6(1)(b)) |
| Keep the service secure, prevent abuse and fix errors | Security and server logs | Legitimate interests in running a secure service (Art. 6(1)(f)) |
| Keep records of consent and of payments where the law requires | Consent records, payment records | Legal obligation (Art. 6(1)(c)) and legitimate interests in proving compliance (Art. 6(1)(f)) |
We don't use your data for advertising, we don't sell it, and we don't share it with data brokers. We don't use your journal to train AI models, and our AI provider doesn't either (see below). We don't make decisions about you that have legal or similarly significant effects based solely on automated processing.
Your health-data consent
During onboarding, we ask for your explicit consent, as a separate step that isn't bundled with our Terms, before we store any food or mood entries. You can withdraw that consent at any time in Settings → Consent → Withdraw consent. Withdrawing it is as easy as giving it.
When you withdraw consent, we stop processing your journal: you can't add new entries, and we stop using existing ones. You can then export your data or delete your account. Withdrawing consent doesn't affect anything we did before you withdrew it.
AI and your meal descriptions
When you log a meal, the text you type is sent to Anthropic's Claude API so it can estimate the meal's nutrients. If you're on Premium and ask for meal ideas, your most recent meal descriptions are sent to Anthropic for the same reason. We don't send your name, email or mood scores to Anthropic.
Anthropic acts as our processor. Its commercial terms say it may not train its models on content its business customers send through the API. Under its current policy, Anthropic deletes API inputs and outputs within 30 days by default, though it can keep them longer where needed to enforce its usage policies or comply with the law.
Nutrition values are AI estimates and can be wrong. Please don't rely on them for medical or dietary decisions.
Usage counts and product testing
We record simple events about how the app is used, such as "signed up", "logged a meal" or "started checkout", with the time and your account ID. These events never contain what you ate or how you felt. We use them to see whether Nourity is working for people and to fix problems.
Sometimes we test two versions of a screen, such as different wording on a button. If you're signed in, our server assigns you to one version based on your account ID; nothing extra is stored on your device. Our legal basis is our legitimate interest in improving the app. These records are deleted with your account. We never test anything that changes health information, prices, consent or how your data is handled.
Who we share data with
We use a small number of service providers ("processors") to run Nourity. They may only use your data to provide their service to us, under written contracts (data processing agreements).
| Provider | What they do | Data | Location |
|---|---|---|---|
| Render | Hosts the app, database and encrypted backups | All data we hold | United States |
| Cloudflare | Content delivery and security (protects the site from attacks) | Traffic passing to and from the site, including IP address | United States, with a global network |
| Anthropic | AI nutrition estimates and meal suggestions | Meal text only | United States |
| Resend | Sends sign-in codes and service emails | Email address, name, email content | United States |
| Stripe | Processes payments and manages subscriptions | Email, payment details you give Stripe, subscription status | United States and elsewhere |
Stripe also uses some payment data as an independent controller for its own legal and fraud-prevention duties, under the Stripe Privacy Policy. If Stripe later acts as the seller ("merchant of record") for our subscriptions, we'll update this policy to say so.
We may also disclose data if the law requires it, to protect people's safety, or as part of a sale or reorganization of our business (in which case the new owner must respect this policy). We would tell you before your data became subject to a different privacy policy.
International transfers
Our providers are based in the United States, so your data is transferred outside the UK and the European Economic Area. We protect those transfers in these ways:
- EU–US Data Privacy Framework (and its UK Extension): Render, Cloudflare, Stripe and Resend state that they are certified under it.
- Standard contractual clauses: where a provider isn't certified, or as a backup, we rely on the European Commission's standard contractual clauses and, for UK data, the UK International Data Transfer Addendum. Anthropic's data processing addendum uses these clauses.
You can ask us for more detail about these safeguards at hello@nourity.app.
How long we keep your data
- While your account exists: we keep your account details and journal so the app works.
- When you delete your account: we delete your account and all your entries straight away. Encrypted backups are kept for up to 14 days and then overwritten, so deleted data is gone from all our systems within 14 days.
- Inactive accounts: if you haven't signed in for 24 months, we'll email you a warning and then delete the account if you don't sign in. [Proposed policy — to be confirmed.]
- Sign-in codes: expire after 10 minutes.
- Security logs: kept for [Log retention period] and then deleted.
- Payment records: Stripe keeps transaction records for as long as tax and financial laws require, under its own policy.
How we protect your data
All traffic is encrypted with HTTPS. Sign-in uses one-time email codes, so there are no passwords to steal, and codes are stored hashed. Your session cookie is secure and can't be read by scripts. Access to production systems is limited to the people who need it. Backups are encrypted.
No system is perfectly secure. If a breach puts your rights at high risk, we'll tell you and the regulator as the law requires.
Your rights
Under UK and EU data protection law you have the right to:
- Access a copy of your data.
- Rectification: have inaccurate data corrected.
- Erasure: have your data deleted.
- Restriction: ask us to limit how we use your data.
- Portability: get your data in a machine-readable format.
- Object to processing based on our legitimate interests.
- Withdraw consent at any time, without affecting earlier processing.
Do it yourself in Settings
- Your data: download everything as JSON and CSV, free on every plan.
- Delete account: permanently deletes your account and all entries straight away (backups clear within 14 days). Any active subscription is cancelled.
- Consent → Withdraw consent: stops processing of your journal.
- Sign-in → Sign out on every device: ends every session on every device.
Or ask us
Email hello@nourity.app from the address linked to your account. We may need to confirm it's you. We'll respond within one month, which the law lets us extend by up to two further months for complex requests (we'll tell you if so). Requests are free unless they're clearly unfounded or excessive.
Complaints
If you're unhappy with how we've handled your data, please tell us first at hello@nourity.app. We'll acknowledge your complaint within 30 days, look into it and tell you the outcome.
You also have the right to complain to a regulator. In the UK, that's the Information Commissioner's Office (ICO). In the EU, you can complain to the data protection authority where you live or work; there's a list of EU authorities on the European Data Protection Board's website.
Age limit
Nourity is only for adults aged 18 or over. You confirm your age when you sign up. We don't knowingly collect data from anyone under 18. If you think someone under 18 has an account, tell us and we'll delete it.
Cookies
We use a single, strictly necessary cookie to keep you signed in and protect forms. We don't use analytics or advertising cookies. See our Cookie Notice.
Changes to this policy
We'll update this page when how we use data changes, and change the date at the top. If a change is significant, we'll email you before it takes effect. If a change needs your consent (for example, a new use of your health data), we'll ask for it and won't rely on you simply continuing to use Nourity.