Privacy Policy
Last updated: August 26, 2025
NutriMate ("we", "our", "us") provides an AI‑powered nutrition service. This Privacy Policy explains how we collect, use, disclose, and protect your information.
This policy applies to information collected through our website, web app, and mobile apps, and in connection with our services.
Account and contact: name, email, password, country/region.
Profile and health: age, height, weight, dietary preferences/restrictions, goals, activity level, and other information you input. This may include sensitive personal data.
App usage: prompts, preferences, interactions, generated outputs, logs, device and app identifiers, IP address, timestamps.
Device and technical: device type, OS, browser, language, crash data, diagnostics, performance.
Payment: we receive limited payment metadata from our payment processors or app stores (e.g., subscription status, last 4 digits, transaction IDs). We do not store full card details.
Communications: support requests, feedback, and survey responses.
Cookies and similar: cookies, local storage, SDKs, and analytics beacons to remember settings and measure usage.
- Provide and operate the Service, including generating meal plans and recipes.
- Personalize content and recommendations.
- Enforce quotas, prevent abuse, and ensure security.
- Analyze performance and improve features and model quality.
- Process payments, subscriptions, and communications.
- Comply with legal obligations and resolve disputes.
- With your consent, send marketing or product updates (you can opt out).
Your inputs and outputs may be processed by our models and approved third‑party AI providers to provide the Service. We require providers to protect your data and use it only to deliver the contracted services.
We do not sell your personal data. We may share information with:
Service providers: hosting, AI inference, analytics, crash reporting, email, customer support, and payment processors, under confidentiality and data processing obligations.
Compliance and safety: if required by law, regulation, legal process, or to protect rights, security, and integrity.
Business transfers: in connection with a merger, acquisition, or asset sale, subject to continued protection of your data.
Aggregated or de‑identified data: we may share insights that do not identify you.
We may process and store data in countries other than yours. We implement appropriate safeguards consistent with applicable law.
We retain personal data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.
If you delete your account, we delete or anonymize personal data within a reasonable period (typically 30–90 days), except where retention is required by law or legitimate business purposes (e.g., fraud prevention, accounting).
Access and correction: you can view and update profile data in settings or by contacting us.
Deletion: you can request account and data deletion. Some data may be retained as required by law or for legitimate purposes.
Portability: upon request, we can provide a copy of your core personal data in a commonly used format.
Opt‑out: you can opt out of marketing emails via unsubscribe; essential service emails will still be sent.
Cookies/SDKs: manage via your browser or device settings; some features may not function without them.
India: We handle personal data in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023, and rules made thereunder.
EEA/UK (if applicable): Where GDPR applies, our legal bases include consent (for certain health and marketing data), contract (to provide the Service), legitimate interests (security, analytics, improvements), and legal obligation. You may have rights to object, restrict, and lodge a complaint with your supervisory authority.
California (if applicable): We do not sell or share personal information as defined by the CCPA/CPRA. You have rights to know, delete, correct, and limit use of sensitive personal information, subject to exceptions.
We use administrative, technical, and organizational measures to protect your data, including encryption in transit and at rest for core data, access controls, and monitoring.
No method of transmission or storage is 100% secure; we cannot guarantee absolute security. We will notify you of data incidents as required by law.
The Service is not intended for individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us to delete it.
The Service may link to third‑party sites or be distributed via app stores. Their privacy practices apply to your use on those platforms.
Data controller: NutriMate (contact details below).
Contact: ikmhemanthkumar@gmail.com
Address: 327, 3rd Cross, A Block, RK Nagar, Mysore – 570022, India
We may update this Privacy Policy. Material changes will be notified via the App or email. Continued use after updates indicates acceptance.
Email us with your request from the email associated with your account. We may need to verify your identity before acting on requests.