NutriLog AI: Consumer Health Data Privacy Policy
This policy is for residents of Washington State, Nevada and other US states whose laws protect "consumer health data", meaning personal information that identifies your past, present or future physical health. It is a supplement to our Privacy Policy, which covers everything else. NutriLog AI is provided by Logakrishnan N, 40, Union Bank Colony, 5th Street, New Vilangudi, Madurai, Tamil Nadu 625018, India.
1. Consumer health data we collect, and why
| Category | Why we collect it |
|---|---|
| Body measurements: weight, height, age, sex, and your weight history | To calculate your calorie and macro targets and show your progress |
| Goals: lose, maintain or gain weight, pace, target weight, and whether a clinician set it | To plan your targets, and to apply our safety rules (no weight-loss plan below a healthy weight) |
| Food and nutrition you log, water, fasting sessions, workouts | To track your day against your targets, streaks and history |
| Health Connect data, only if you connect it: steps, active energy, exercise sessions, heart rate, resting heart rate, sleep | To show your energy balance and activity in the app |
| Food photos you choose to scan | To estimate the meal's nutrition; the photo is not stored on our servers |
| Diet preference (for example vegetarian) | To tailor food estimates and suggestions |
We do not collect precise location, and we do not collect data about reproductive or sexual health, gender-affirming care, or genetic or biometric data.
2. Where it comes from
From you, when you type or log it in the app; from Android Health Connect, only if you grant permission; and from your camera or gallery when you scan a meal. We do not buy health data or receive it from data brokers.
3. Who receives it
We do not sell consumer health data and never will. We share it only with service providers that process it on our behalf and under contract:
- Google (Gemini API): the inputs described in section 4 of the Privacy Policy, to produce an AI answer you asked for, only while AI Data Sharing is on.
- MongoDB Atlas: storage of your account and logs.
- Vercel: hosting of the service that receives and returns your data.
- Resend: delivery of the weekly summary email, which contains your week's average calories, days logged and weight change. Stop it from the link in any summary email.
Firebase Crashlytics and Google Play Billing receive no consumer health data. We have no affiliates. We may disclose data if the law requires it; we will tell you unless the law forbids that.
4. Your consent
Collecting this data is necessary to provide the app you asked for. You also give your explicit consent to it, separately, when you accept the Terms. Sharing with Google Gemini happens only after you turn on AI Data Sharing, which is our request for your consent to that sharing; you can turn it off at any time in Profile → Privacy.
5. Your rights, and how to use them
- Know and access. Confirm whether we hold your consumer health data and get a copy of it, together with the list of the third parties above: Profile → Privacy → Download my data, or write to us.
- Withdraw consent. Turn off AI Data Sharing or Health Connect access at any time. Withdrawing consent to the core processing means deleting your account.
- Delete. Profile → Privacy → Delete Account & Data deletes it immediately, and we pass the deletion to our service providers. See How to delete your account.
You can also make any of these requests by email to support@nutrilogai.com. We respond within 45 days (we may extend that once by 45 days when reasonably necessary, and will tell you why). We do not charge for requests, and we will not treat you differently for making one.
Appeals. If we decline a request, you can appeal by replying to our answer or writing to the same address with "Appeal" in the subject. We decide an appeal within 45 days and explain the decision in writing. If the appeal is denied, you can contact your state Attorney General (in Washington: atg.wa.gov/file-complaint).
6. Changes
We will update the effective date above whenever this policy changes, and ask for your consent again before using consumer health data for a new purpose.