Privacy Notice

1. Personal data we collect

Account data: your first name, email address and login credentials.

Wellness data you enter: meals and meal photos, mood, energy and physical-signal check-ins, notes, health preferences (diet, allergies, goals, digestive and wellness considerations you choose to record), and pantry items and recipes.

Communication data: messages you send us for support, and your notification and reminder preferences.

Technical data: app usage and interactions, device identifiers, push notification tokens, IP address and performance/diagnostic data.

Referral and fraud-prevention data: if you arrive through a partner link, your browser stores the link for up to 30 days. If you sign up with a partner link or code, we record which partner referred you, whether it was a link or code, when you signed up, the deadline for a first payment, and the date of your first payment. To spot abuse such as many accounts from one network or device, we also store two one-way codes (hashes) made from your network (IP) address and from basic device details. We do not store your raw IP address or device details in our referral records. These hashes are pseudonymized, not anonymous: while kept, they are linked to your account. They become eligible for deletion 120 days after you signed up through the partner and are permanently cleared during our next routine clean-up.

After the hashes are deleted, your referral record still links your account to the referring partner, with the source, dates and any fraud flag set during review, and the related commission records remain. We keep these for accounting, tax and fraud-prevention purposes. Our hosting provider may briefly process IP addresses in its own network and security logs; we do not control or copy those logs into our app.

2. Why we use it, and our legal basis

To create and run your account and provide NourishIQ (performance of our contract with you).

To generate your personalised insights, recipes and weekly recommendations from your own entries, and to send the reminders you request (performance of our contract).

To keep the service secure and prevent fraud and abuse, and to improve app performance and reliability (our legitimate interests).

To respond to support requests (performance of our contract or our legitimate interests).

To send optional marketing or product updates, where we do so (your consent, withdrawable at any time).

To meet legal, accounting and tax obligations (legal obligation).

Health-related details you choose to record are only used to produce your insights and to keep suggestions safe for you; we do not use them for advertising.

3. What we do not do

We do not sell your personal data, do not share it with healthcare providers, do not integrate with medical records, and do not use it for advertising or profiling unrelated to the app. NourishIQ does not store or process protected health information (PHI) as defined under HIPAA.

4. Who we share it with

Service providers and subprocessors who host our database and files, deliver our emails and push notifications, and provide the AI processing used to generate your insights. They act on our instructions.

Stripe, our payment partner and Merchant of Record, for the sale of NourishIQ+, subscription management, payments, invoicing and tax compliance. Stripe collects and processes payment details directly; we never see your card number.

Referral partners see only totals (such as number of referrals and commission amounts). We do not give them your name, email, meals, check-ins, notes or other wellness entries.

Professional advisers (such as legal and accounting) where needed, and authorities where required by law.

5. International transfers

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. How long we keep it

We keep your account and wellness data for as long as your account is active. If you delete your account, your data is deleted, except referral records linking your account to a referring partner, and commission records, which we keep for accounting, tax and fraud-prevention purposes. Other records we must keep for legal, tax or accounting reasons are retained for the period the law requires, then deleted or anonymised.

7. Your rights

Depending on where you live, you may ask for access to your data, correction, deletion, restriction of processing, portability, or to object to processing, and you may withdraw consent at any time. You can export or delete your data yourself from the app's settings.

The Professional Summary and Questions for My Provider features create a PDF or CSV inside your browser and save it to your device. NourishIQ does not email, upload, host or share these reports with partners, providers or anyone else. If you share a report, you do so yourself.

To exercise a right, email privacy@nourishiq.app. We respond within one month. If you are in the UK or EEA you can also complain to your data protection supervisory authority.

8. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and per-user database rules so only you can read your own entries. No system is completely secure, but we work to protect your data and to respond quickly if something goes wrong.

9. Cookies and similar technologies

We use essential cookies and local browser storage to keep you signed in and remember app preferences. We do not use advertising cookies. Our checkout provider, Stripe, sets cookies needed to process your purchase. You can clear or block cookies in your browser settings, though signing in may stop working.

10. Children

NourishIQ is not intended for anyone under 13, and we do not knowingly collect data from children. If you believe a child has created an account, contact privacy@nourishiq.app.

11. Changes to this notice

We may update this notice from time to time; the date above shows when it last changed.