App privacy policy

Who we are

NutriHygiene is a Pakistan-focused nutrition and calorie-accountability app. This policy explains how the mobile app handles personal data. For the marketing site, waitlist, and calculators, see the website privacy policy.

What we collect

Account. Name, email, and sign-in identifiers from Google Sign-In (or email authentication). We store a profile photo if you add one.

Health and goals. Age or date of birth, sex, height, weight logs, activity level, diet type, allergies, medical conditions you choose to record, sleep/wake times, calorie and macro targets, and goal history. This is used to personalise plans and accountability — not to diagnose or treat any condition.

Meals and activity. Foods you search, log, favourite, or describe; portions; water logs; optional exercise you enter; and, on Android, daily step counts if you connect Health Connect. We do not read heart rate, sleep, workouts, or other Health Connect records.

AI chat (Brio). Messages you send and replies we generate, plus optional approximate location if you grant location permission (used as chat context, such as local food). Flagged replies are stored so we can review them.

Device and diagnostics. Push-notification tokens, app version, and crash reports (which may include a user id and email when you are signed in). Approximate city if you set it on your profile or grant location permission.

Purchases. Subscription status is processed by Google Play Billing / Apple In-App Purchase and RevenueCat. We receive entitlement state, not your full card number.

How we use it

To create and secure your account; calculate calorie and macro targets; log meals, water, and activity; send reminders you opted into; personalise Brio and tips; process subscriptions; fix crashes; and comply with law. We do not sell personal data or use it to build advertising profiles.

Android Health Connect

If you connect Health Connect, we read today's step count only. Steps are stored with your account and used to adjust today's calorie target. You can disconnect in Settings → Connected apps, or revoke access in Health Connect / Android settings. The in-app Health data screen explains this in more detail.

AI-generated content

Brio is an AI nutrition assistant. Replies are generated by a language model using your message and, when you allow it, relevant profile context. Output can be wrong. It is not medical advice. If a reply is offensive, harmful, or misleading, use the in-app flag on that message — you do not have to leave the app or send email.

Who processes data for us

• Google — Sign-In, Play Billing, Firebase Cloud Messaging, Health Connect on Android
• Apple — Sign-In / In-App Purchase on iOS, where used
• RevenueCat — subscription entitlements
• Sentry — crash and error reports
• Language-model providers we configure for Brio (for example OpenAI or similar) — chat text needed to generate a reply
• Our hosting and PostgreSQL database for the app backend

These processors receive only what they need to provide that service.

Retention and deletion

We keep your account and log data while your account is active. Settings → Delete account closes your account immediately and signs you out on every device. If you no longer have the app, you can ask us through the account deletion page instead.

After 30 days we permanently delete your profile, weight history, logged meals and meal plans, favourites, water logs, step counts, exercise entries, goals, achievements, engagement and health-insight records, notification tokens, and Brio chat history. Your account record itself is anonymised at the same point: name, email, username, profile photo, bio, and phone number are cleared.

Three things outlast that window:

• Subscription and payment records — tax and accounting rules require us to keep them.
• A history of email-address changes — kept for account security and fraud checks.
• Your calorie-event history — kept, but attached only to the anonymised account record described above, so it is no longer linked to your name or email.

Deleting your account does not cancel a Google Play subscription — see the deletion page for how to cancel that separately.

Your choices

• Notification preferences, including quiet hours, in Settings
• Health Connect disconnect / OS permission revoke (Android)
• Location permission in OS settings
• Delete account in Settings

Children

The app is intended for adults 18 and over. We do not knowingly collect data from children.

Not a medical device

NutriHygiene is general nutrition education and calorie tracking. It is not a medical device, diagnosis, or treatment. Read the medical disclaimer.

Changes

We will update this page when practices change. The date above is the current version.

Contact

Privacy questions: the contact page. Related: app terms, website privacy.