Privacy Notice

1. Personal data we collect

Account data: your first name, email address and login credentials.

Wellness data you enter: meals and meal photos, mood, energy and physical-signal check-ins, notes, health preferences (diet, allergies, goals, medical conditions you choose to record), and pantry items and recipes.

Communication data: messages you send us for support, and your notification and reminder preferences.

Technical data: app usage and interactions, device identifiers, push notification tokens, IP address and performance/diagnostic data.

2. Why we use it, and our legal basis

To create and run your account and provide NourishIQ (performance of our contract with you).

To generate your personalised insights, recipes and weekly recommendations from your own entries, and to send the reminders you request (performance of our contract).

To keep the service secure and prevent fraud and abuse, and to improve app performance and reliability (our legitimate interests).

To respond to support requests (performance of our contract or our legitimate interests).

To send optional marketing or product updates, where we do so (your consent, withdrawable at any time).

To meet legal, accounting and tax obligations (legal obligation).

Health-related details you choose to record are only used to produce your insights and to keep suggestions safe for you; we do not use them for advertising.

3. What we do not do

We do not sell your personal data, do not share it with healthcare providers, do not integrate with medical records, and do not use it for advertising or profiling unrelated to the app. NourishIQ does not store or process protected health information (PHI) as defined under HIPAA.

4. Who we share it with

Service providers and subprocessors who host our database and files, deliver our emails and push notifications, and provide the AI processing used to generate your insights. They act on our instructions.

Stripe, our payment partner and Merchant of Record, for the sale of NourishIQ+, subscription management, payments, invoicing and tax compliance. Stripe collects and processes payment details directly; we never see your card number.

Professional advisers (such as legal and accounting) where needed, and authorities where required by law.

5. International transfers

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. How long we keep it

We keep your account and wellness data for as long as your account is active. If you delete your account, your data is deleted. Records we must keep for legal, tax or accounting reasons are retained for the period the law requires, then deleted or anonymised.

7. Your rights

Depending on where you live, you may ask for access to your data, correction, deletion, restriction of processing, portability, or to object to processing, and you may withdraw consent at any time. You can export or delete your data yourself from the app's settings.

To exercise a right, email privacy@nourishiq.app. We respond within one month. If you are in the UK or EEA you can also complain to your data protection supervisory authority.

8. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and per-user database rules so only you can read your own entries. No system is completely secure, but we work to protect your data and to respond quickly if something goes wrong.

9. Cookies and similar technologies

We use essential cookies and local browser storage to keep you signed in and remember app preferences. We do not use advertising cookies. Our checkout provider, Stripe, sets cookies needed to process your purchase. You can clear or block cookies in your browser settings, though signing in may stop working.

10. Children

NourishIQ is not intended for anyone under 13, and we do not knowingly collect data from children. If you believe a child has created an account, contact privacy@nourishiq.app.

11. Changes to this notice

We may update this notice from time to time; the date above shows when it last changed.