App privacy policy

Who we are

NutriHygiene is a nutrition app owned and operated by M/S PROGRASEC (Office No. 2, GM Plaza, Second Floor, Opposite Alfatah Backside, Beside Quetta Cafe, Kohinoor, Faisalabad Madina Town, Pakistan). This policy explains how the mobile app handles personal data. The customer summary is the privacy policy. For the marketing site, see the website privacy policy.

What we collect

Account. Name and email from Google Sign-In, or, on iOS, from Sign in with Apple when that sign-in completes. If you sign in with Google, we may store the profile photo Google provides. We also store a profile photo if you choose one yourself. The app does not offer an email-and-password account, and it does not email a verification code or a password-reset code.

Health and goals. Age or date of birth, sex, height, weight logs, activity level, diet type, allergies, medical conditions you choose to record, sleep and wake times, calorie and macro targets, and goal history. We use this to calculate estimates and to run accountability. We do not use it to diagnose or treat any condition. We do not currently send this profile to a language model to write a health insight.

Meals, water, and activity. Foods you search, log, favourite, or save; portions; water logs and containers you create; a photo if you add one to a custom food; exercise you enter; and daily step totals if you connect Apple Health or Health Connect. We do not read heart rate, sleep, workouts, or other records from Apple Health or Health Connect.

Joint Goals.If you invite someone, or accept an invite, we store the goal, membership, and progress snapshots. While the goal is active, the other person can see your name, profile photo, goal progress, current weight, target weight, streak, meals logged, and calorie figures for the goal (including today's calories against your target). They do not see your full meal diary, your support messages, or your medical conditions through this feature. The app does not currently apply per-item privacy switches, so you cannot hide one of those figures while the goal stays active. You can leave the goal, which ends it for both of you.

Support.If you write to us in Help & Support, we store the message and any screenshot you attach, so we can reply.

Location. If you set a city on your profile, or you allow the app to detect it, we store an approximate place name (city and country), not a precise GPS track.

Device and diagnostics. Push-notification tokens, app version, and device platform. Product analytics and crash reporting are described below.

Purchases. The free app does not require a payment. If you buy 14-day nutrition care, Safepay processes the one-time charge (card, JazzCash, and EasyPaisa through Safepay) for M/S PROGRASEC. We receive the amount, currency, status, and a transaction reference. We do not store your card, JazzCash, or EasyPaisa details.

How we use it

To create and secure your account; calculate calorie and macro targets; log meals, water, and activity; show a Joint Goal to the person you invited; send reminders you opted into; reply to support messages; fix crashes; and comply with law. We do not sell personal data or use it to build advertising profiles.

Apple Health and Health Connect

If you connect Apple Health (iOS) or Health Connect (Android), we read today's step count only. On iOS we may refresh that count in the background, about hourly, so the daily total stays current. We store one step total per day with your account and use it to estimate calorie burn and to adjust today's food target. We do not write steps or any other data back to Apple Health or Health Connect.

You can disconnect in Settings → Connected apps, or revoke access in the iOS Settings app or in Health Connect. The in-app Health data screen explains the same limits.

Analytics and crash reporting

PostHog (product analytics). We send usage events to PostHog. An event can include your user id, name, and email; screens you open; food-search text, shortened to 64 characters; calories, weight, water, and step counts you log; and the app version and device platform. We use this to understand how the app is used and to fix problems. We do not use it for advertising.

Crash reports and session replay. The app sends crash and error reports, and session recordings, to error-monitoring software that we operate ourselves. That software is GlitchTip. The app delivers the reports through a Sentry-compatible interface. The reports are stored on our server. We do not send them to Sentry. If you are signed in, a report can include your user id and email, and it may include your IP address. We record about one in ten ordinary sessions, and sessions in which the app hits an error. A recording can show the screens you were on, which may include health and meal information.

Who processes data for us

• Google — Sign-In, Firebase Cloud Messaging, and Health Connect on Android
• Apple — Apple Health and Sign in with Apple on iOS
• PostHog — product analytics
• GlitchTip, which we host ourselves — crash reports and session recordings. These are not sent to Sentry
• Our hosting, database, and file storage for the app

These processors receive only what they need to provide that service.

Retention and deletion

We keep your account and log data while your account is active. Settings → Delete account closes your account immediately and signs you out on every device. An active Joint Goal ends at that moment, and your name and photo are hidden from the other person. If you no longer have the app, you can ask us through the account deletion page.

Closing the account does not erase every row that minute. A daily job, at 02:00 UTC, permanently deletes data that has been closed for 30 days. Removal therefore happens after 30 days, and it can fall a short time after the 30th day if the job runs later that day.

After that job runs we permanently delete your profile, weight history, meal plans and logged-meal rows, favourites, water logs and containers, step totals, exercise entries, goals, achievements, engagement and health-insight records, notification tokens, and support messages and the screenshots attached to them. We then anonymise the account profile: your name is replaced with a generic label, and your email on that profile is replaced with an address that is not yours and cannot receive mail. We clear the username, the link to your profile photo, bio, and phone number.

A separate sign-in record may still hold the email address from your Google or Apple sign-in, marked inactive so the account cannot be used. We do not use that address to contact you after the account is closed.

Deleting your profile photo yourself removes the image file at once. If you delete the account instead, the job removes the link to the photo. It does not delete the image file from storage.

The following are not removed by that job:

• A history of email addresses used on the account, including the addresses themselves — kept for account security and fraud checks, and not used to contact you after closure.
• Calorie events — kept, and attached only to the anonymised account. A calorie event includes the calories, macronutrients, and the name of the food as logged. It is no longer tied to the name and email on your account profile.
• Custom foods you created, including a photo if you added one — these may remain attached to the anonymised account.
• Joint Goal progress snapshots — these may include weight, streak, meals logged, and calorie figures from while the goal was active. They stay attached to the anonymised account. The live goal itself has already ended.

None of the retained records is used to rebuild your profile, to contact you, or for advertising.

Copies already sent to PostHog and GlitchTip are not part of that job. Deleting your account does not delete them.

PostHog.The app sends product analytics to PostHog's EU service. PostHog keeps the events and the person details attached to them: user id, name, and email, plus food-search text and the calorie, weight, water, and step figures described above. Those copies stay until PostHog's retention for our project removes them, or until we delete that person in PostHog. We do not currently delete the PostHog person when you delete your account.

GlitchTip.Crash reports and session recordings stay on the GlitchTip server we operate until that system's own retention removes them. We do not currently delete those reports or recordings when you delete your account. A recording can still show screens that included health and meal information.

You can remove some data without closing the account. A water log or a water container you created is hidden at once and permanently deleted by the same daily job once it has been deleted for 30 days. A logged meal, or a single item in it, is removed from your plan at once; the plan row is permanently deleted on that same 30-day schedule. The calorie event for that meal is kept, as described above, and is not shown in the app. Removing your profile photo deletes the file at once. Details are on the account deletion page.

If you sign up again with the same email within 30 days, the account comes back as a fresh start. Previous meals, weights, and goals are not restored. That new sign-up discards the rows that were waiting out the 30 days. Email-address history and calorie events are still kept. After the anonymisation job has run, the old account cannot be reactivated.

Your choices

• Notification preferences, including quiet hours, in Settings
• Disconnect Apple Health or Health Connect in Settings → Connected apps, or revoke the permission in the system settings
• Location permission in the system settings
• Leave a Joint Goal, which ends it for both people
• Delete your profile photo, a logged meal, or a water entry
• Delete the account in Settings

Children

The app is intended for adults 18 and over. We do not knowingly collect data from children.

Not a medical device

NutriHygiene is general nutrition education and calorie tracking. It is not a medical device, diagnosis, or treatment. Read the medical disclaimer.

Changes

We will update this page when our practices change. The date above is the current version.

Contact

Privacy questions: the contact page. Related: app terms, website privacy, delete your account.