Privacy Policy

Effective Date: April 25, 2026

1. Introduction and Scope

This Privacy Policy ("Privacy Policy") along with the Terms of Service constitutes an agreement between you and Nutrical Labs, LLC ("Nutrical," "we," "us," or "our") concerning the access and use of our website, progressive web app, barcode scanner, AI camera, and related services (collectively, the "Service"). Please read it carefully. Your privacy is important to us.

Consent: By accessing the Service, you consent to this Privacy Policy and the collection and use of information as described below.

2. Information We Collect Directly

We only collect the Personal Information you explicitly consent to provide to us:

• Identifiers: Name, email address, profile picture, and authentication tokens (e.g., via Google Sign-In) necessary for account creation.
• Health and Demographic Data: Biological sex, age, height, weight, activity levels, and dietary goals. This data is considered sensitive and is strictly required to provide nutritional functionality.
• User Activity: Meal inputs, water logs, weight logs, custom recipes, barcode scans, and AI camera submissions (food photos).

3. Payment Information

Nutrical does not collect or maintain your full credit card details. Premium subscriptions and billing are managed securely by our third-party payment processor (Stripe). We only receive transaction statuses and basic subscription tiers from our processor.

4. Information Collected Automatically and Cookies

Cookies and Local Storage: Nutrical uses strictly necessary cookies and local storage (such as localStorage and IndexedDB) required to make the Service function. These keep you logged in, cache your nutritional data for offline functionality, and remember user interface preferences (like Dark Mode).

No Advertising: Nutrical does not display advertising and does not use third-party advertising or ad-tracking services. We set no advertising cookies and share no data with ad networks.

Log Files: We collect necessary anonymous technical information (such as basic device type, app version, and crash data) to ensure the service functions and to fix technical issues.

5. How We Use Your Information

We use your data only for legitimate interests and to fulfill our Services to you:

• To authenticate you and personalize your nutrition dashboard.
• To calculate macronutrient/micronutrient goals.
• To analyze barcodes and food photos to return accurate nutritional estimates.
• To communicate with you regarding security alerts, account updates, and support inquiries.
• To enforce our Terms of Service and maintain platform security.

6. Data Sharing and Disclosure

We never sell your personal data. Your data is shared only under the following strict circumstances:

• Service Providers: Authorized service providers like Google (Firebase for secure database and hosting), Stripe (billing), and AI inference providers. They are contractually bound to safeguard your data.
• AI Partners: When you use the AI Camera, the image data is transmitted securely to our AI partner strictly for food identification. We follow data minimization principles; images are not retained long-term or used to train public AI models without consent.
• Legal Requirements: If explicitly required by law, subpoena, or to protect the safety and rights of Nutrical and its users.

7. Data Security and Retention

We implement robust organizational, technical, and physical security measures, including HTTPS encryption in transit and AES-256 encryption at rest. We retain your personal data only as long as your account is active. Upon account deletion, your personal data is purged or irrevocably anonymized within a reasonable timeframe (typically 30 days).

8. Your Privacy Rights (GDPR & CCPA/CPRA)

Regardless of where you reside, we grant you the right to control your data:

• Right to Access & Portability: Request a structured copy of your personal data.
• Right to Rectification: Update or correct your data within the app.
• Right to Erasure: Delete your account and associated personal data at any time.
• Right to Restrict Processing: You may withdraw consent for processing health data by deleting your account.

To exercise these rights, email us at [email protected].

9. Children's Privacy

Our Services are intended for individuals 16 years of age and older. We do not knowingly collect data from children under 16 without parental consent. If we learn we have collected such data erroneously, it will be deleted immediately.

10. Contact Us

For questions or concerns regarding your privacy, please contact us at [email protected].