NutriGuide Privacy Policy

Effective date: July 29, 2026

NutriGuide ("we", "our", or "the app") is an AI-powered nutrition companion. This policy explains what data the app collects, how it is used, who it is shared with, and your rights under privacy regulations including the GDPR (EU) and FADP (Switzerland).

1. Data Controller

The Data Controller responsible for your personal data is Ceralp, an independent developer operating from Switzerland, with developer registration in Türkiye. You can contact us regarding your privacy at: kyoutoryuu@gmail.com.

2. Information We Collect

NutriGuide collects the following information that you voluntarily provide during onboarding and in your profile:

• Identity: display name, email address
• Health-related preferences: dietary style, food allergies and restrictions, fitness goal
• Body statistics: weight, height, age, sex, body type, daily activity level, exercise frequency, weight goal and target rate
• Nutrition activity: food entries you log (name, brand, macros, meal, timestamp) and any custom nutrition targets
• Chat activity: messages you send to the AI nutrition assistant

Health, identity, and nutrition data are stored entirely on your device using encrypted storage (Android EncryptedSharedPreferences, backed by the Android Keystore, or the iOS secure enclave). We do not maintain a user account system and we do not store this data on our servers.

3. AI Chat Service and Data Sent to Anthropic

When you use the AI chat feature, the following information is transmitted through our secured proxy to a third-party AI service (Anthropic's Claude API) to generate a response:

• Your current chat message and up to the last 10 turns of conversation history in the current session
• A short profile summary derived from the fields you provided: display name (only if you set a non-default name), primary goal, dietary style, allergies, and physical stats (weight, height, daily activity, exercise, body type)
• Only if you turn on AI Coach History Access in Settings: a summary of your recent daily nutrition totals (the date plus calories, protein, carbs, and fat for up to the last 7 days). While this setting is off, none of your food-log data is sent.

Your age, sex, and email address are not transmitted to Anthropic. Your food-log data is transmitted only when you enable AI Coach History Access, and then only as the aggregated daily totals described above — never individual food entries. The profile summary is capped in length and sanitized before it leaves your device.

Retention: Anthropic retains API data for a maximum of 30 days for trust and safety purposes before deletion. They do not use API inputs or outputs to train their models.

4. Legal Basis for Processing (EEA/Swiss Users)

Under the GDPR and FADP, we process your data under the following legal bases:

• Contractual Necessity: Transmitting your chat prompts to Anthropic to provide the core AI features of the app.
• Consent: Serving personalized advertisements via Google AdMob. You can withdraw this consent at any time via the privacy settings.
• Legitimate Interest: Using Firebase App Check to secure our backend APIs against abuse.

5. Backend Security (Firebase App Check)

Our chat and food-search proxies are protected by Firebase App Check. Each request from the app carries a short-lived attestation token that proves it originated from a genuine, unmodified NutriGuide install. App Check collects necessary technical metrics to verify request integrity but does not collect additional personal profile data.

6. Advertising

NutriGuide uses Google AdMob to display advertisements. AdMob may collect and use device identifiers, IP addresses, and usage data to serve ads. For users in the European Economic Area (EEA), UK, and Switzerland, a consent dialog is shown before any tracking SDKs are initialized. If you deny consent, you will receive non-personalized ads that do not track you.

7. Data Sharing and International Transfers

We do not sell, trade, or rent your personal information. Data is shared only with the third-party processors listed below:

• Anthropic (Claude API) — chat messages and the profile summary.
• Google (AdMob and Firebase App Check) — device-level identifiers for ad serving; short-lived attestation tokens for security.
• USDA FoodData Central & Open Food Facts — food-search queries and barcode numbers.

International Transfers: Google and Anthropic operate servers in the United States. Your data is transferred outside the EEA and Switzerland. These transfers are protected by standard contractual clauses (SCCs) and adequate data protection frameworks approved by the European Commission and Swiss authorities.

8. Data Storage and Security

All personal, health, and nutrition data is stored locally on your device. Sensitive fields are held in encrypted storage. No user accounts are created and no personal data is transmitted to our servers. Uninstalling the app permanently deletes all locally stored data.

9. Your Rights

Under GDPR and FADP, you have the right to access, rectify, restrict, or erase your personal data, as well as the right to data portability. Because we do not store your data on our servers, you hold all your data directly on your device. You can exercise your rights to access, edit, or erase your data directly within the app by modifying your profile or uninstalling the app.

You also have the Right to Lodge a Complaint with your local Data Protection Authority (e.g., the Swiss Federal Data Protection and Information Commissioner or your local EU supervisory authority) if you believe our processing violates privacy laws.

10. Children's Privacy

NutriGuide is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected by updating the effective date at the top of this page.

12. Contact

If you have questions about this privacy policy, contact us at: kyoutoryuu@gmail.com