Privacy Policy

1. Scope

This Privacy Policy explains how Nourish ("Nourish," "we," or "us") handles information when you use the Nourish iOS app or visit nourishhealth.app. Nourish is a wellness service, not a medical provider or medical device.

2. Information We Collect

Depending on how you use Nourish, we collect:

• Account information: your account identifier, name, email address, and sign-in method.
• Profile and wellness information: age or birth date, gender, height, weight, activity level, goals, symptoms, dietary restrictions, measurement preferences, nutrition targets, and notification or Apple Health connection preferences.
• Content you provide: meal photos and descriptions, food and nutrition logs, water logs, reactions, recipe content, favourites, and support messages.
• Subscription information: product, entitlement, renewal, trial, and transaction-status information from Apple and RevenueCat. We do not receive your full payment-card details.
• Optional product analytics: if you opt in, events such as opening the app, viewing the paywall, starting or completing a purchase, and using app features. Signed-in events use a pseudonymous account identifier. Nourish does not add meal names, scores, reactions, symptoms, email addresses, or Apple Health data as analytics event properties.
• Optional diagnostics: if you opt in, crash, performance, device, operating system, and technical diagnostic information. Release diagnostics use a hashed account identifier and are configured not to include screenshots, view hierarchies, or default personal information.
• Website usage: basic visit and performance information collected through Vercel Analytics when you use this website.

3. Apple Health

If you choose to connect Apple Health, the current version of Nourish reads and calculates supported sleep and stress-related values on your device. Current v2 code does not upload those Apple Health values to Nourish servers or AI providers. We store only your account-level choice to enable or disable those connections.

Earlier versions of Nourish may have used summarized Apple-Health-derived values when generating insights. Historical provider logs or cached outputs may therefore be subject to the retention practices described below. We do not sell Apple Health data or use it for advertising.

4. AI Processing

Nourish uses Google's Gemini models and Anthropic's Claude models, depending on service configuration and availability. To provide meal identification, scoring, recipe generation, and coaching, we may send a meal photo or description together with relevant dietary restrictions, goals, symptoms, and inferred trigger or friendly foods to an AI provider. Daily and weekly coaching may also include age, gender selection, activity level, fiber target, logged meal names and scores, nutrition totals, restriction or trigger flags, and water logs. We do not send your name, email address, account identifier, or Apple Health values for current v2 AI features. AI results are estimates and can be wrong.

Nourish asks for explicit, versioned permission before any of this personal data is sent to an AI provider. You may decline and continue using ordinary logging, or withdraw permission later under Settings → Privacy & AI. Withdrawal stops future requests but cannot recall a request already sent. Provider processing and retention are governed by the applicable service terms and the operating settings used for Nourish's provider accounts. Additional retention information appears below.

5. How We Use Information

• Provide authentication, sync, meal analysis, insights, and recipes
• Personalize nutrition targets and app recommendations
• Process subscriptions and restore purchase access
• Operate offline sync, account migration, and customer support
• Measure product use and improve reliability and security
• Comply with legal obligations and enforce our Terms of Service

6. Service Providers and Sharing

We share information only as needed to operate Nourish, comply with law, protect users and the service, or complete a business transfer. Our main service providers are:

• Clerk for account authentication
• Convex for backend functions, database, and file storage
• Apple and RevenueCat for subscriptions and entitlements
• PostHog for product analytics, only after you opt in
• Sentry for crash and performance diagnostics, only after you opt in
• Google and Anthropic for the AI processing described above, only after explicit AI permission
• Vercel for website hosting and website analytics

We do not sell personal information, use health information for targeted advertising, or share health information with data brokers.

7. Data Retention

We retain account and user content while your account is active and as needed to provide the service. After deletion, some records may remain for a limited period in backups, security logs, migration suppression records, or service-provider systems. Purchase, fraud, security, tax, and legal-compliance records may be retained when required. We use de-identified or aggregated information where practical and ask service providers to delete or restrict personal information when applicable. Retention can vary by record and legal obligation.

8. Deleting Your Account

You can start account deletion in the app from Settings → Delete Account. You must be online so Nourish can record and complete the deletion safely. The process deletes your Nourish profile and user content, removes your Nourish sign-in, and clears account-scoped data from the device. If an upstream deletion step needs help, the app will tell you and preserve a protected recovery state until it is resolved.

Deleting your Nourish account does not cancel an Apple subscription. Manage or cancel billing in Apple's subscription settings first. You may also need to revoke Nourish under Sign in with Apple settings.

9. Your Choices and Rights

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing of your personal information. You can edit many profile settings in the app and can request an export or processor-level deletion review by contacting support. You can separately grant or withdraw AI sharing and optional app diagnostics under Settings → Privacy & AI. You can change notification and Apple Health permissions in iOS Settings.

To make a request, email support@nourishhealth.app. We may need to verify that you control the account.

10. Security and International Processing

We use reasonable technical and organizational safeguards, including encrypted network connections and account-scoped access controls. No system is completely secure. Nourish and its providers may process information in countries other than your own, where privacy laws may differ.

11. Children

Nourish is not directed to children under 13. If you believe a child provided personal information without appropriate authorization, contact us so we can review and delete it.

12. Changes and Contact

We may update this policy as the service or law changes. We will post the updated policy here and change the date above. For privacy or support questions, email support@nourishhealth.app.