Privacy Policy

1. Introduction

NutriFinder is an AI-powered iOS application that helps users discover nearby restaurants suited to their personal dietary goals, restrictions, and nutrition targets. The app combines real-time location data, AI-driven menu analysis, and personalised scoring to recommend what to order — before you walk in.

This Privacy Policy explains what information NutriFinder collects, how it is used, and the choices you have regarding your data. By using NutriFinder, you agree to the practices described in this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address through Supabase Authentication. This is used solely to identify your account and allow you to sign in across sessions and devices. We do not collect your name unless you choose to add it to your profile.

2.2 Location Data

NutriFinder requests access to your precise GPS location (when-in-use) to identify nearby restaurants and calculate distance-based fit scores. Location access is requested only while the app is actively in use and is never collected in the background. You may deny location permission at any time in iOS Settings, though this will disable the restaurant discovery feature.

2.3 Health and Nutrition Data

The following information is entered voluntarily by you and stored to personalise your experience:

• Dietary goal (e.g. lose weight, gain muscle, improve health, endurance, maintain)
• Dietary restrictions (e.g. keto, vegan, gluten-free, dairy-free, halal, high-protein)
• Daily calorie target and macro targets
• Meal logs including food items, calories, and macronutrients
• Body metrics if entered (e.g. weight, height — used only for goal calculation)

This data is stored securely in your Supabase account and is used exclusively to compute personalised restaurant fit scores and nutrition summaries. It is never used for advertising.

2.4 Usage Data

We collect information about how you use the app, including:

• Restaurants viewed and fit scores computed during your session
• Meals logged and nutritional summaries generated
• Features accessed within the app (e.g. AI scanner, restaurant discovery, social feed)

This data is used to improve the app experience and is not linked to advertising profiles.

2.5 Device Information

Standard technical information is collected, including:

• iOS version and device model
• App version
• Crash reports and error logs (used for debugging only)

3. How We Use Your Information

We use the information we collect for the following purposes:

• Restaurant discovery and scoring — your location and dietary profile are used to fetch nearby restaurants and compute a personalised fit score (0–100%) for each one.
• AI-powered menu analysis — menu content and your dietary profile are sent to the Google Gemini API to identify the best dishes, dishes to avoid, and personalised ordering tips. Only the menu text and your dietary goal/restrictions are transmitted — your name, email, and account ID are never sent to Gemini.
• Nutrition tracking — meal logs are stored and aggregated to display daily calorie and macro progress.
• Session sync — your data is synced across sessions and devices via Supabase.
• Subscription management — your purchase and entitlement status is managed by RevenueCat. We receive only entitlement status (active/inactive), not payment details.
• Service improvement — anonymised usage patterns help us identify and fix issues and prioritise features.

We do not sell, rent, or trade your personal data to any third parties for advertising, marketing, or commercial purposes.

4. Third-Party Services

NutriFinder integrates the following third-party services. Each service operates under its own privacy policy. We encourage you to review them:

Data shared with each service is limited to the minimum necessary for that service to function. For example, only menu text and dietary goal/restriction categories are sent to the Gemini API — no personally identifiable information is included in those requests.

5. Data Storage and Security

• Storage location: Your account data and nutrition logs are stored on Supabase servers. Supabase infrastructure is hosted on AWS and may be located in the EU or US depending on your project region.
• Authentication tokens: Session tokens are stored in the iOS Keychain — the most secure storage available on iOS — and are never stored in plain text or in UserDefaults.
• Transmission security: All communication between the app and our servers, and between the app and third-party APIs, is conducted over HTTPS/TLS. No data is transmitted over unencrypted connections.
• Passwords: NutriFinder does not store passwords. Password authentication is handled entirely by Supabase Auth, which uses industry-standard hashing. We never have access to your password.
• Access controls: Your data is protected by row-level security (RLS) policies in Supabase, ensuring that each user can only access their own records.

6. Location Data

Location is accessed only in the when-in-use mode — NutriFinder never requests always-on background location access.

Your GPS coordinates are used to query the Google Places API for nearby restaurants and to calculate distance. Coordinates are transmitted only for this purpose and are not stored permanently on our servers.

Location data is not shared with advertisers or data brokers.

You can revoke location permission at any time by going to iOS Settings → Privacy & Security → Location Services → NutriFinder.

7. Your Rights

For All Users

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate information in your profile
• Delete your account and all associated data at any time from within the app (Settings → Delete Account) or by contacting us at support@nutrifinder.app
• Export your meal log and nutrition data upon request

Additional Rights for EU/EEA Users (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

• Right of access (Article 15): Request a copy of all personal data we hold about you.
• Right to rectification (Article 16): Request correction of inaccurate personal data.
• Right to erasure (Article 17): Request deletion of your personal data ("right to be forgotten").
• Right to data portability (Article 20): Request your data in a structured, machine-readable format.
• Right to object (Article 21): Object to certain types of processing, including profiling.
• Right to lodge a complaint: You have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@nutrifinder.app. We will respond within 30 days.

8. Children's Privacy

NutriFinder is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@nutrifinder.app and we will promptly delete that information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by:

• Displaying a notice within the app on your next launch, or
• Sending an email to the address associated with your account.

Continued use of NutriFinder after the effective date of any updated policy constitutes your acceptance of the changes. We encourage you to review this policy periodically.

The most recent version of this policy will always be available in the app and at the repository linked on the App Store listing.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:

• Email: support@nutrifinder.app
• App: NutriFinder
• Developer: Reda Layadi

We are committed to resolving any privacy concerns promptly and transparently.