🥗 NourishFlow AI - Privacy Policy

Last Updated: May 7, 2026

1. Introduction

NourishFlow AI ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.

2. Information We Collect

2.1 Account Information

Email Address: Used for account creation, authentication, and communication
User ID: Unique identifier for your account
Profile Data: Name, fitness level, activity level, health goals

2.2 Health & Fitness Data

Health Metrics: Blood sugar readings, blood pressure, heart rate
Nutrition Logs: Calories, macros (protein, carbs, fat), water intake
Workout Data: Exercise routines, completion rates, fitness progress
Health Conditions: Self-reported conditions (e.g., diabetes, high blood pressure)
Dietary Preferences: Allergies, dietary restrictions, fitness goals

2.3 Location Information

Precise Location: Used for delivery address geocoding and location-based recommendations
Coarse Location: Used to show nearby stores and restaurants
Default Address: Saved delivery addresses with coordinates

2.4 Payment Information

Payment Method: Processed securely through Stripe (we do not store full card numbers)
Purchase History: Subscription status, order history, transaction amounts
Billing Address: Associated with payment methods

2.5 Order & Delivery Information

Phone Number: For delivery coordination and order updates
Delivery Address: Full street address for order fulfillment
Order Details: Items purchased, quantities, prices, delivery instructions

2.6 Photos & Media

Meal Photos: Images of food for nutrition analysis and tracking
Progress Photos: Before/after transformation images (stored privately)

2.7 Usage & Activity Data

Search History: Recipe searches, food queries, workout searches
Product Interaction: Taps, clicks, scrolling behavior, feature usage
App Usage: Session duration, features accessed, engagement metrics

2.8 Technical & Diagnostic Data

Device Information: Device type, operating system, app version
Crash Data: Error logs, crash reports for debugging
Performance Data: App launch time, load times, hang rate
Log Data: Server logs, API request/response metadata

3. How We Use Your Information

Service Delivery: Provide personalized nutrition, workout, and meal recommendations
Account Management: Authenticate users, manage subscriptions, process payments
Order Fulfillment: Coordinate food delivery, communicate with delivery partners
Personalization: Tailor content based on health profile, goals, and preferences
Health Tracking: Log and visualize health metrics over time
AI Features: Generate recipes, workouts, and nutrition insights using AI
Customer Support: Respond to inquiries, resolve issues, provide assistance
App Improvement: Analyze usage patterns, fix bugs, optimize performance
Communication: Send order updates, subscription notifications, feature announcements
Compliance: Meet legal obligations, enforce terms, protect rights

4. Data Sharing & Disclosure

We share data with trusted service providers: Stripe (payment processing), DoorDash (delivery), Instacart (grocery links), YouTube (video content), Base44 (hosting), OpenStreetMap (location services).

We may disclose information if required by law or to protect our rights, prevent fraud, or ensure user safety.

We do NOT sell your personal information, share health data with advertisers, or share data with data brokers.

5. Data Retention

We retain your information as long as necessary to provide the Service and comply with legal obligations.

Account Data: Retained while account is active + 3 years after deletion
Health Logs: Retained indefinitely (user can delete anytime)
Order Data: Retained for 7 years for tax compliance
Usage Data: Retained for 2 years for analytics

6. Data Security

We implement industry-standard security measures including HTTPS/TLS encryption, secure storage in iOS Keychain, PCI-DSS compliant payment processing via Stripe, role-based access controls, and regular security audits.

7. Your Rights & Choices

Access & Portability: Request a copy of your personal data
Correction: Update inaccurate or incomplete information
Deletion: Delete your account and associated data
Opt-Out: Disable push notifications or toggle off health tracking features

8. Children's Privacy

NourishFlow AI is not intended for children under 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children.

9. Health & Medical Disclaimer

NourishFlow AI is NOT a medical device and does NOT provide medical advice. All health data is for personal tracking only. Always consult qualified healthcare providers for medical decisions.

10. International Data Transfers

Your information may be transferred globally. We ensure appropriate safeguards including Standard Contractual Clauses (SCCs) and GDPR-compliant data processing agreements.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted within the app with the "Last Updated" date. Significant changes will be communicated via email or in-app notification.

12. Contact Us

For privacy-related questions, contact us at info@nourishflow.com.

13. California Privacy Rights (CCPA/CPRA)

California residents have the right to know, delete, and opt-out of sale or sharing of personal information. We do not sell data. Contact us at info@nourishflow.com.

14. European Economic Area (GDPR)

If you are in the EEA, you have the right to know the legal basis for processing, withdraw consent, and complain to your local data protection authority.

Data Controller: NourishFlow AI

Legal Basis: Account data (contract), Health data (explicit consent), Usage data (legitimate interest)

15. Apple App Store Data Types

Category	Data Types	Linked to You?	Used for Tracking?
Contact Info	Email, Phone, Address	Yes	No
Health & Fitness	Health metrics, Fitness data	Yes	No
Financial Info	Payment info, Purchase history	Yes	No
Location	Precise, Coarse location	Yes	No
User Content	Photos, Search history	Yes	No
Identifiers	User ID, Device ID	Yes	No
Usage Data	Product interaction, Other usage	Yes	No
Diagnostics	Crash, Performance data	Yes	No

None of this data is used for tracking purposes.