NutriFlux
Back to NutriFlux

Privacy Policy

Effective date: 24 August 2026 (version 1.0)

This Privacy Policy explains how NutriFlux ("NutriFlux", "we", "us" or "our"), operated by [NUTRIFLUX LEGAL OPERATOR NAME], collects, uses, stores, shares and protects personal data when you use the NutriFlux mobile application, website and related services.

Registered address: [REGISTERED BUSINESS ADDRESS]
Privacy contact: [PRIVACY EMAIL]
Support contact: [SUPPORT EMAIL]
Website: [PRODUCTION WEBSITE URL]

1. Scope

This policy applies to the NutriFlux mobile app, NutriFlux website, Kiro AI companion, meal-planning and tracking features, camera-assisted food features, community features, challenges, notifications, support and early-access forms.

NutriFlux is currently intended for people aged 18 and over.

2. Data we collect

Account and contact data

Profile, nutrition and health-related data

Health-related information can be sensitive personal data. We limit its use to the purposes described in this policy and apply additional safeguards appropriate to that sensitivity.

Meal and activity data

Photos and camera data

If you use camera or photo-library features, we process the images you select or capture to provide the requested feature — meal recognition, food logging or a community post. Photos shared to Community are stored to display the post; NutriFlux does not require unrelated camera or photo access.

Kiro and AI data

When you use Kiro, we may process your prompts and messages, Kiro's responses, relevant profile/meal-plan/preference context used to answer your request, safety and moderation signals (including any response you report), and technical generation metadata. Kiro is not a medical professional and is not intended to make medical diagnoses or treatment decisions.

Community content

If you use Community, we process captions and images you choose to publish, likes and follows, and — once you post — your acceptance of the Terms and Community Guidelines. We also process reports, blocks and moderation records when those controls are used.

Device, notification and technical data

Device and platform information, app version, push-notification token, and request metadata needed for security and service delivery.

Product analytics

This version of NutriFlux does not collect product analytics. No analytics SDK is included in the app, and no behavioural usage data is gathered or shared for analytics purposes. If we introduce product analytics in a future version, we will update this policy and ask for your consent first.

Diagnostics

Crash and performance diagnostics are collected to keep the app reliable. This is a separate purpose from product analytics, and is the only automatic technical collection NutriFlux performs.

Purchases and subscription data

If paid features are offered, NutriFlux and its app-store or subscription provider may process purchase status, subscription entitlement and transaction metadata. NutriFlux does not receive your full payment-card details from Apple or Google billing. Paid subscriptions are not enabled at this time.

Feedback, support and waitlist data

We process support requests, issue reports and feedback needed to respond to you. If you join our early-access list, we process your email address to send launch updates; you can unsubscribe at any time.

3. How we use personal data

To create and secure accounts; provide meal planning, tracking and Kiro features; provide Community and challenges; send requested notifications; provide data export and account deletion; provide support; detect abuse and secure the service; measure and improve reliability; manage AI cost and misuse controls; comply with legal obligations; and send early-access updates where permitted.

We do not sell personal data. We do not use health data for targeted advertising.

4. Legal bases and consent

Depending on the purpose, our basis includes providing the service you requested, your consent, our legitimate interests in securing and improving NutriFlux, compliance with legal obligations, and protection of vital interests. We obtain consent where required — including for sensitive health-related data, optional personalisation and direct marketing. Where we rely on consent, you can withdraw it through the relevant in-app setting or by contacting us.

5. Service providers

NutriFlux uses Supabase (database, authentication, storage), OpenAI (Kiro AI generation), Google Cloud Vision (camera meal recognition), Expo (push notifications), Sentry (crash/performance diagnostics), Resend (transactional email), Cloudflare Turnstile (bot protection on signup and the waitlist), and Apple/Google (app distribution). This version includes no analytics provider and no subscription or advertising provider. Providers process data only for the services we engage them to provide, under appropriate contractual and security safeguards.

6. International processing

Some service providers may process data outside Nigeria. Where personal data is transferred internationally, we use transfer mechanisms and safeguards required by applicable law.

7. Retention

[LAUNCH TEAM: replace this section with the verified production retention schedule before public launch — see docs/LAUNCH-BUSINESS-INFO-REQUIRED.md.] As a working target: active account/profile/meal data is kept while your account is active; Kiro chat history until you clear it or delete your account; community posts until you delete them or they are removed through moderation; deleted-account data is targeted for deletion or de-identification within 30 days, with backups expiring within 90 days.

8. Account deletion

You can delete your account inside the app from Settings › Privacy & Terms › Delete account. You can also request deletion without the app at nutriflux.org/delete-account.

When an account is deleted, we delete or irreversibly de-identify the data associated with it, except where a limited record must be retained for a legitimate legal, security, fraud-prevention or dispute purpose. Deleting your NutriFlux account does not automatically cancel an Apple or Google subscription — cancel that separately through your store account.

9. Your privacy rights

Subject to applicable law, you may have the right to access, correct, delete, restrict or object to processing of your personal data, withdraw consent, request portability, and complain to the Nigeria Data Protection Commission or another competent authority. NutriFlux also provides in-product controls for data export, Kiro history deletion, personalisation choices and account deletion. To exercise a right, contact [PRIVACY EMAIL]; we may need to verify your identity first.

10. Children

NutriFlux is intended for people aged 18 and over. If NutriFlux later offers the service to people under 18, we will first implement the age-verification and parental/guardian consent required by applicable law and update this policy before doing so.

11. Security

We use reasonable technical and organisational safeguards, including access controls, authenticated APIs, server-side secret management, database access rules and restricted administrative access. No system is perfectly secure; if we become aware of a personal-data breach, we will assess and respond to it under applicable law.

12. Your choices

You can disable Kiro personalisation, clear Kiro chat history, manage notification preferences, remove your own community content, export your data and delete your account — all from Settings. Camera and photo-library access can also be managed from your device settings.

13. Changes to this policy

We may update this policy when NutriFlux changes or legal requirements change. We will post the updated version here with a new effective date and, where required, provide additional notice.

14. Contact and complaints

Data controller / operator: [NUTRIFLUX LEGAL OPERATOR NAME]
Registered address: [REGISTERED BUSINESS ADDRESS]
Privacy: [PRIVACY EMAIL]
Support: [SUPPORT EMAIL]

If you believe we have not handled your personal data appropriately, contact us first so we can investigate. You may also lodge a complaint with the Nigeria Data Protection Commission.