# NutriScore — Privacy Policy
_Last updated: 16 June 2026_
This privacy policy explains how the **NutriScore** mobile app ("NutriScore", "we", "us", "our") handles information when you use the app on iOS or Android. We've kept it short and plain-English on purpose.
## 1. Who we are
NutriScore is operated by the publisher of the app, contactable at the email address in section 11. References to "the app" mean the NutriScore mobile application available on the Apple App Store and Google Play.
## 2. The short version
- We do **not** sell your personal information.
- We do **not** show third-party advertising.
- Your food journal and personal goals live **on your device**.
- When you scan a meal, the photo (and only the photo) is sent to Google's Gemini AI to be analysed, then discarded.
- Purchases are handled by Apple, Google, and RevenueCat.
## 3. What information we process
### 3.1 Data you provide
- **Onboarding answers** — your goal, dietary preferences, optional name, height, weight, and age. Stored locally on your device.
- **Food log entries** — meals you save, including the scanned image, AI-generated nutrition values, grade, and meal type. Stored locally on your device.
### 3.2 Data created when you use the app
- **Camera frames** — used in real time to scan barcodes or meal photos. Frames are not stored or transmitted by us. When you choose to scan, a single still image is captured.
- **Photo library access** — only invoked when you tap to pick a meal photo. We read the image you select and nothing else.
- **Local notification preferences** — whether daily reminders are enabled and at what times. Stored on device only.
### 3.3 Data processed by third parties on our behalf
- **Scanned meal images** — sent to Google's Gemini API for nutrition analysis. We do not retain the image after we receive the analysis result. Google's processing is governed by its own terms; see section 5.
- **Subscription / purchase status** — handled via RevenueCat and the underlying Apple App Store or Google Play billing systems. We receive an opaque customer identifier and your current subscription tier; we do not see your payment card.
### 3.4 What we do NOT collect
- We do not collect contacts, microphone audio, location, motion, browsing data, advertising IDs, or analytics about app usage.
## 4. How we use the information
- **Provide the core feature** — scan, score, and log food.
- **Personalise** — show calorie and macro targets based on your onboarding inputs.
- **Unlock premium features** — verify your active subscription via RevenueCat.
- **Send reminders** — only the local notifications you opted into; nothing is sent to a server.
We do not use your data for advertising, profiling, or any purpose other than running the app for you.
## 5. Third parties we share data with
| Recipient | What it sees | Why | Their policy |
|---|---|---|---|
| Google (Gemini AI) | The single meal photo you submit for analysis | To return nutrition values, grade, and ingredient insight | `https://ai.google.dev/gemini-api/terms` and `https://policies.google.com/privacy` |
| RevenueCat | Anonymous customer ID, app version, purchase events | To verify your subscription state across devices | `https://www.revenuecat.com/privacy` |
| Apple / Google (App Store / Play Billing) | Your purchase transaction | To process the subscription | Apple and Google's respective policies |
We do not transfer your personal data to any other third party.
## 6. Where data is stored
- **On your device** — food journal, settings, onboarding answers, notification preferences.
- **In Google's infrastructure** — meal images are processed in transit by the Gemini API. Per Google's terms, these requests are not used to train Google's models for the Gemini API tier we use.
- **In RevenueCat / Apple / Google** — subscription metadata only.
If you delete the app, the local data on your device is removed by the operating system.
## 7. Retention
- Local data: kept until you delete the app or clear it from the app's settings.
- Meal images sent to the Gemini API: not retained by us; subject to Google's own retention windows.
- Subscription records: retained by RevenueCat and the app stores for the period required by their billing and legal obligations.
## 8. Your rights
Depending on where you live (GDPR/UK GDPR/CCPA and similar), you have the right to:
- Access the data we hold about you.
- Correct or delete it.
- Object to or restrict certain processing.
- Withdraw consent at any time.
- Lodge a complaint with your local data protection authority.
Because the bulk of your data lives on your device, the simplest exercise of these rights is deleting the app. For requests touching anything outside your device (e.g. RevenueCat customer records), email us using the address in section 11 and we'll respond within 30 days.
## 9. Children
NutriScore is not directed at children under 13 (under 16 in the EEA where applicable). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
## 10. Security
We use HTTPS for all network traffic and rely on the operating system's secure storage for local data. No method of transmission or storage is 100% secure, but we follow industry-standard practices to protect what we do process.
## 11. Contact
Questions, deletion requests, or rights requests:
**[your-email@example.com]**
We'll respond as quickly as we can — typically within a few business days.
## 12. Changes to this policy
If we update this policy in a meaningful way, we'll change the "Last updated" date at the top and, for material changes, surface a notice inside the app. Continued use after the change means you accept the updated policy.
---
### App Store / Play Console summary (for reference)
For the Apple privacy nutrition label and Google Play Data Safety form:
- **Data linked to user:** Purchases (subscription status via RevenueCat) — *for app functionality*.
- **Data not linked to user:** Photos taken in-app (sent to Gemini for analysis, not retained by us) — *for app functionality*.
- **Data not collected:** Contact info, location, browsing, advertising data, analytics, audio, contacts, identifiers used for tracking.
- **Tracking:** None. We do not track you across other apps or websites.