Privacy Policy

This Privacy Policy explains how Nutricious, operated by Digital Propulsion LLC, accesses, uses, stores, shares, retains, and deletes user information. It applies to the Nutricious website, account features, and Sign in with Google.

Information you provide

Nutricious stores information you enter directly, including your name, email address, username, password, PIN, weight entries, workout logs, nutrition records, generated meal descriptions, meal notes, account names, balances, bills, and similar app content. Meal photos submitted for analysis are not stored by Nutricious after processing finishes.

Information from Google sign-in

If you choose Sign in with Google, Nutricious receives your Google account identifier, verified email address, and profile name. Nutricious uses this data only to authenticate you, create or connect your Nutricious account, display your account identity, and secure access to the service. The Google account identifier is stored as a one-way keyed hash; the email address and name are encrypted at rest. Nutricious does not request access to Google Drive, Gmail, Calendar, Contacts, Photos, or other Google product data, and it does not store Google access or refresh tokens.

Google identity data is not sold, used for advertising, used to determine creditworthiness, or shared with OpenAI. Nutricious's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Information collected automatically

When the public homepage or sign-in page is visited, Nutricious records the page viewed, visit time, and IP address for security, abuse prevention, and basic first-party traffic measurement. Nutricious may send the IP address to ipwho.is to obtain an approximate city, region, and country. This information is visible only to the restricted developer account and is not used for advertising or linked to Google identity data in the app database.

How information is used

Nutricious uses information to operate the app, authenticate users, maintain accounts, provide requested features, prevent abuse, diagnose reliability problems, and respond to support or legal requests. Personal information is not sold or used for targeted advertising.

Third-party processing

Nutricious uses Google Identity Services for authentication. When you deliberately use the nutrition analysis feature, the meal images, ingredients, serving details, and notes submitted for that analysis are sent to OpenAI. Nutricious discards submitted meal images after processing and retains only the generated meal description and nutrition results. Nutricious uses ipwho.is for the approximate IP-location lookup described above. These providers process data under their own terms and privacy policies. Nutricious may also disclose information when required by law, to protect users or the service, or as part of a business transfer with legally required notice or consent.

Cookies and session storage

Nutricious uses an HTTP-only, same-site session cookie to keep you signed in. In production, the cookie is transmitted only over HTTPS. It is used for authentication and account security, not advertising. A theme preference may be stored locally in your browser and is not sent to Google.

Data retention and deletion

Account data is retained while your account is active. IP-based page-view events and cached approximate locations are automatically deleted after 30 days; aggregate page-view counts may be retained without account identifiers. Authentication sessions expire after 30 days.

You can delete your account from Account Settings by typing DELETE and confirming. This immediately removes your profile, Google account link, sessions, weight entries, workouts, saved meal descriptions, nutrition records, and stored financial records from the active database. You can also follow the data deletion instructions. Information may be retained only when required by law or necessary to address security or fraud, and only for that purpose.

Security

Nutricious uses technical safeguards designed to protect stored data, including encrypted storage for sensitive profile fields, hashed credentials, and server-side session handling. No system can guarantee absolute security.

Children's privacy

Nutricious is not directed to children under 13, and the service should not be used by anyone who is not legally permitted to provide personal information under applicable law.

Contact

For privacy questions, access requests, or deletion help, email juan@digitalpropulsion.io.

Changes to this policy

This Privacy Policy may be updated as the service or legal requirements change. The updated date will be posted here, and material changes to Google user-data practices will be disclosed in the app before the new use begins so affected users can provide any required consent.