Privacy Policy

Nutrigate ("we", "us") runs nutrigate.app from the United Kingdom and is the data controller for the personal data described here. Contact: hello@nutrigate.app.

• Your email address, to create your account and send sign-in links. No passwords exist here.
• What you log: foods, portions, targets, streaks and profile settings. A food diary can say a lot about you, and we treat it that way: it is used to run the product for you, nothing else.
• Voice notes, if you use voice logging: the audio is turned into text to log your food and is not stored after processing.
• Billing status: Stripe processes payments and tells us your subscription state. Card numbers never touch our servers.
• Anonymous visit stats: which public pages are read and which link brought a visitor here. Uniques are counted with a hash that rotates daily and cannot be traced back to you; no cookies are involved.
• Ad measurement, only with your consent: if you accept ad cookies, the X pixel runs, an ad click id is kept for 30 days, and key steps (sign-up, trial, payment) are reported to X, with your email protected by one-way hashing, so we can tell whether ads are worth running.
• Session replay, only with your consent: if you accept optional cookies, Microsoft Clarity records how visits unfold — taps, scrolling, where people get stuck — on our public pages, sign-in and the app. Inside the app, every piece of text is masked on your device before the recording is sent, and the email you type at sign-in is masked the same way, so replays never contain your food diary or anything that identifies you.

• Running the service and billing: performance of our contract with you.
• Security, abuse prevention and anonymous statistics: our legitimate interests.
• Ad cookies, ad measurement and session replay: your consent, which you can withdraw anytime below.
• Tax and accounting records: legal obligation.

Everything device-side that Nutrigate uses, and how long it lives. Withdrawing your choice stops new tracking immediately; cookies X already set expire on their own or can be cleared in your browser.

Browsers sending the Global Privacy Control signal are treated as a standing no: the banner never appears and no ad tracking runs.

A small set of processors, each doing one job: Supabase (accounts and database), Stripe (payments), Vercel (hosting, and routing AI requests to model providers, who receive the food text or audio being parsed but nothing that identifies you to advertisers), and USDA FoodData Central (we look up foods by name; nothing personal is sent). With your consent, X receives the ad measurement described above and Microsoft (Clarity) hosts the session replays, masked as described above. We do not sell personal data and there are no data brokers involved.

Some of these providers process data in the United States. Where that happens, the transfer is covered by recognised safeguards such as the UK IDTA or standard contractual clauses.

Account data lives while your account does. Delete your account any time from the account sheet in the app (or email us) and your logs are erased straight away. Billing records stay as long as tax law requires. Anonymous visit stats contain nothing personal and are kept for trend history.

Under UK GDPR you can ask for a copy of your data, correct it, delete it, take it with you, object to processing, and withdraw consent at any time (the cookie button above does exactly that). Email hello@nutrigate.app and we will sort it. You can also complain to the ICO at ico.org.uk, or to your local data protection authority.

Nutrigate is not directed at children and is for people aged 16 and over.

If this policy changes in a way that matters, we will flag it in the app or by email. The date at the top always tells you when it last moved. The terms that go with this policy are at nutrigate.app/terms.