Privacy Policy

Last updated: 4 October 2026

In short

Nutrios processes your information so you can track your nutrition and activity. We never sell your data. The app shows ads, served through Google AdMob, which uses your device's advertising ID. Your nutrition, weight, step and other health data is NOT sent to the ad network and ads are not selected based on it. Apart from advertising, the app contains no analytics or behaviour-tracking tools. You can permanently delete your account from inside the app at any time.

What we process

• Profile: age, gender, height, weight, activity level, goal, diet type, foods you dislike or are allergic to. • Daily records: what you ate, calorie and macro totals, water intake, step count, mood selections. • Usage: your weekly plan, favourite foods, quiz results, notification preferences. • Community (if you use it): your posts, comments and likes. • Technical: the session token that identifies your account. • Account: the email address verified by the provider when you use "Sign in with Google" or "Sign in with Apple" (the Apple relay address if you chose to hide your email). It is stored to identify your account and show it in the app. Sign-in is matched by Google's permanent account id, NOT by the email — so you keep access even if you change your email address. Your profile picture is not stored on our server. Your name is not kept in your account record; it is stored only if you post or comment in the COMMUNITY, alongside that post, so it can be shown next to it. If you never use the community, your name appears nowhere on our servers. • Subscription: which plan you bought and when it expires. We do NOT see your payment details (card number etc.) — the App Store or Google Play takes the payment and only tells us whether this account is subscribed. We do NOT collect phone numbers or location data.

Health data

Your weight, steps and nutrition information count as health data and are protected accordingly. Step data comes either from your phone's step sensor or, if you allow it, from Health Connect / Apple Health. This data is used only to build your own tracking screens and is never shared with third parties.

Food photos and AI

When you use "Scan with Camera", the photo you take is sent through our server to Anthropic's Claude vision model so the food can be recognised. The photo is processed only for recognition and is not stored on our servers against your account. The recognised food name and nutrition values are saved to your log; the photo itself stays on your phone only and is deleted at the end of the day. If you never use this feature, no photo of yours ever leaves the device.

Where it is stored, and for how long

Your data is stored in the database on the server we operate, and partly on your phone. It is kept for as long as your account exists. When you delete your account, every record on the server is permanently removed — no archive or backup copy is retained.

Third-party services

• Anthropic (Claude) — meal photo recognition (described above). Only the photo is sent; your name, email or account details are not. • OpenAI — the AI coach and recipe planner. Your nutrition goals, calorie/macro status, allergies and disliked foods are sent; no identifying information (name, email, account id) is shared. • Google AdMob — in-app advertising. Your device's advertising ID and general device information go to Google; your nutrition and health data does not. • Google — only to verify your identity if you use "Sign in with Google". • Apple — only to verify your identity if you use "Sign in with Apple". If you choose to hide your email, we only see Apple's relay address. When you delete your account, the app's access to your Apple ID is also revoked on Apple's side. • RevenueCat — verifying and managing subscription status. Only a NUMBER representing your account and the purchase receipt from the store are sent; your name, email, nutrition and health data are NOT. • App Store / Google Play Billing — subscription purchase, renewal and cancellation. Payment is handled entirely by Apple or Google; your card details never reach us at any point. You can cancel your subscription any time from your Play Store account. The Anthropic and OpenAI calls all go through our server; your app never talks to those two services directly, and if you do not use those features no data is sent to them at all. The ad network is the exception: AdMob runs directly inside the app. Barcode lookup is FULLY LOCAL: it runs against an offline database on our server and no request leaves it. Barcode product data was sourced in bulk from Open Food Facts and is used under the ODbL licence.

Advertising and tracking

The app shows ads served through Google AdMob. AdMob uses your device's advertising ID and general device/connection information to select ads and to avoid showing you the same ad repeatedly. Your health and nutrition data is NOT sent to the ad network: what you eat, your calories, weight, step count, allergies and goals never reach Google, and ads are not selected based on them. You can reset your advertising ID or turn off personalised ads in your phone's settings: on Android, Settings → Google → Ads. If you connect from the European Economic Area, your advertising preferences are requested on a separate consent screen and you can change your choice at any time. With an active Premium subscription no ads are shown at all. Apart from advertising, the app contains no analytics or behaviour-tracking tools. Only if the app hits an unexpected error, it sends a technical diagnostic record that does NOT include your identity to our own server, solely to fix the problem. Your data is never sold.

Children

Nutrios is not intended for users under the age of 13. If we learn that we have collected information from someone under 13, we delete the record. Because the app is not directed at children, its ads are not classified as child-directed content either.

Legal basis, transfers and your rights

Data controller: Hüseyin Karakoç, Türkiye. Contact: Krkctech@gmail.com Legal basis: data needed to run your account and tracking screens is processed to perform our contract with you (GDPR Art. 6(1)(b), KVKK Art. 5(2)(c)). Health data such as weight, steps and nutrition is processed only on the basis of your explicit consent (GDPR Art. 9(2)(a), KVKK Art. 6). If you connect from the European Economic Area, your advertising preferences are requested on a separate consent screen. You can withdraw consent at any time by turning off the Health Connect / Apple Health permission or by deleting your account. International transfers: our server is located in Germany (EU). If you use the AI features, the relevant data is transferred to Anthropic and OpenAI in the United States; advertising and sign-in data to Google or Apple; subscription status to RevenueCat. These transfers are made under the providers' data processing agreements and the European Commission's Standard Contractual Clauses. Your rights: you have the right to access, correct and erase your data, to restrict or object to its processing, to receive it in a portable format and to withdraw your consent. You don't have to wait for us to erase it: go to Menu → Delete Account. This permanently removes your data both from the server and from your phone, and cannot be undone. For any other request, write to Krkctech@gmail.com; we reply within 30 days at the latest. Right to complain: you can lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or, in the EU, with the data protection authority of your country of residence.

Contact

For privacy questions or data deletion requests you can write to us: Krkctech@gmail.com If this policy changes we will update this page and change the date above.

About this website

This marketing site uses no cookies and no third-party analytics tools. To understand how the site is used, anonymous usage records such as which sections were seen and which buttons were pressed are kept on our own server only. Your IP address is not stored; a one-way hash that changes every day is used to tell visits on the same day apart. These records are deleted after 90 days. The language you pick is kept in your own browser storage only. The email address you type into the early-access form is stored only if you tick the consent box, and is used solely to tell you when the app is released. The address is kept on our own server; it is never shared with third parties, never used for advertising and never sold. The list is deleted once that announcement has been sent. To leave earlier or to have your address deleted, just write to Krkctech@gmail.com.