This Privacy Policy explains how NutriAssistant AI ("NutriAssistant", "we", "our", "us") collects, uses, stores, and protects personal information when you use our mobile application, website, and related services (collectively, the "Service").

1. Scope and Controller

NutriAssistant is the data controller for personal data processed through the Service, except where another party acts as an independent controller under applicable law. This Policy applies to all users of the Service.

2. Categories of Data We Collect

Depending on the features you use, we may process: (a) account data (name, email, authentication provider identifiers), (b) profile data (age, gender, height, weight, target weight, activity level and similar wellness inputs), (c) nutrition input data (meal photos, notes, calorie targets, plan preferences), (d) in-app purchase/credit data, and (e) technical and usage data (device/app diagnostics, push token, error logs, feature interaction events).

3. Purposes of Processing

We process personal data to: provide core app functions; authenticate users; generate AI-based nutrition analysis and meal plans; manage credits and purchases; sync and secure user data; send service-related notifications; detect abuse and ensure platform integrity; and comply with legal obligations.

4. Legal Bases

Where required by law, we rely on one or more legal bases: contract performance (to deliver requested features), legitimate interests (security, fraud prevention, service improvement), legal compliance (tax, accounting, legal claims), and consent (where specifically requested, such as optional permissions or marketing communications).

5. AI Processing and Important Disclaimer

Meal analysis and planning features may use third-party AI systems and produce probabilistic outputs. Results are informational estimates and may contain inaccuracies. The Service does not provide medical diagnosis or treatment. You should consult qualified professionals before making clinical or high-impact health decisions.

6. Data Sharing

We do not sell personal data. We may share data with vetted service providers strictly to operate the Service (for example, cloud database, authentication, analytics, notifications, and AI providers), under contractual confidentiality and security obligations. We may also disclose data when required by law, court order, or to protect rights, safety, or security.

7. International Transfers

Your data may be processed in countries other than your own. Where legally required, we implement appropriate transfer safeguards (such as standard contractual clauses or equivalent mechanisms) to protect personal data across jurisdictions.

8. Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, including service delivery, dispute resolution, security investigations, and legal/tax compliance. Retention periods vary by data category and legal requirements.

9. Security Measures

We apply technical and organizational safeguards including encrypted transport, access controls, authentication checks, scoped permissions, and monitoring. While no system is absolutely secure, we continuously improve our security posture and incident response processes.

10. Your Rights

Subject to applicable law, you may have rights to access, correct, delete, restrict processing, object to certain processing, and request data portability. You may also withdraw consent where consent is the legal basis. We may require identity verification before fulfilling requests.

11. Children and Sensitive Data

The Service is not directed to children under the minimum age required by applicable law. We do not knowingly collect children's personal data. If you believe such data was submitted, contact us so we can investigate and take appropriate action.

12. Account Deletion

You can request deletion of your account and associated profile data from within the app (where available) or by contacting us. Certain records may be retained where legally required or strictly necessary for fraud prevention, accounting, or legal defense.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date and, where appropriate, via in-app notice.

14. Contact

For privacy requests or questions, contact: sun.the.developer@gmail.com