NutriVibe, operated as an Individual ("Company", "we", "us", or "our"), operates the NutriVibe mobile application and related online properties (collectively, the "Service"). This Privacy Policy explains how we collect, use, store, and disclose your Personal Data when you use the Service and describes the choices you have. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Definitions

• Service — our websites, mobile applications, and related offerings operated by NutriVibe.
• Personal Data — data about a living individual who can be identified from that data or from that data combined with other information in our possession.
• Usage Data — data collected automatically, either generated by use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
• Cookies — small files stored on your device (computer or mobile device).
• Data Controller — a natural or legal person who determines the purposes and manner in which personal data are processed.
• Data Processors (or Service Providers) — any natural or legal person who processes data on behalf of the Data Controller.
• Data Subject — any living individual who is the subject of Personal Data.
• User — the individual using our Service, corresponding to the Data Subject.

2. Information Collection and Use

We collect several types of information to provide and improve the Service.

Personal Data: while using the Service, we may ask you to provide personally identifiable information such as your email address, first name, and last name.

Nutrition, wellness, and app content: we process and store data you enter or generate in NutriVibe—such as food and water logging, search and barcode lookups, body metrics and goals, saved recipes, notification preferences, and related profile fields—on our systems so the Service can sync, show your history, and provide the features you use. This is linked to your account. For Apple Health and Google Health Connect, see Section 8 below: we do not upload those on-device health readings to our servers.

Device Data: when you access the Service via a mobile device, we may collect device data including camera usage (pictures), IP address, browser type, browser version, pages visited, time and date of your visit, time spent on pages, unique device identifiers, and other diagnostic data.

Usage Data: we collect information on how the Service is accessed and used, including IP address, pages visited, time and date of visits, and other diagnostic data.

3. Use of Data

NutriVibe uses the collected data for various purposes:

• To provide and maintain the Service.
• To notify you about changes to the Service.
• To allow you to participate in interactive features when you choose to do so.
• To provide customer care and support.
• To provide analysis or valuable information so we can improve the Service.
• To monitor the usage of the Service.
• To detect, prevent, and address technical issues.
• To provide you with news, special offers, and general information about similar goods and services, unless you have opted out.

4. Retention of Data

NutriVibe will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, including to comply with legal obligations, resolve disputes, and enforce our agreements.

Usage Data is generally retained for a shorter period, except when used to strengthen security or improve the Service, or when we are legally required to retain it longer.

5. Transfer of Data

Your information, including Personal Data, may be transferred to and maintained on computers located outside your state, province, country, or other governmental jurisdiction where data protection laws may differ.

If you are located outside Austria and choose to provide information to us, please note that we transfer and process data in Austria, Vienna.

Your consent to this Privacy Policy, followed by your submission of information, represents your agreement to that transfer.

NutriVibe will take all reasonably necessary steps to ensure your data is treated securely and no transfer of Personal Data will take place to an organization or country unless adequate controls are in place.

6. Disclosure of Data

NutriVibe may disclose your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation.
• Protect and defend the rights or property of NutriVibe.
• Prevent or investigate possible wrongdoing in connection with the Service.
• Protect the personal safety of users of the Service or the public.
• Protect against legal liability.

7. Security of Data

The security of your data is important to us. While we strive to use commercially acceptable means to protect your Personal Data, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Health and activity data (Apple Health and Google Health Connect)

With your permission, NutriVibe can read information from Apple Health (HealthKit) on iOS and from Google Health Connect on Android, such as your step count and active energy (active calories) burned. We use that information only in the app to show your activity next to your nutrition data and to support figures such as net calorie balance, where the app displays them.

We do not use information read from HealthKit or Health Connect for marketing, advertising, or use-based data mining, and we do not sell, rent, or license that health or activity data to third parties or data brokers.

This data is processed on your device to display in NutriVibe. We do not upload HealthKit or Health Connect health or activity readings to NutriVibe’s servers. You can grant or revoke access at any time in your device settings (iOS: Settings → Privacy & Security → Health; Android: the Health Connect app and system permissions for NutriVibe).

9. Service Providers

We may employ third-party companies and individuals to facilitate our Service, provide the Service on our behalf, perform Service-related services, or assist us in analyzing how the Service is used. These third parties have access to your Personal Data only to perform tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Authentication — Clerk is an authentication and user management platform that handles sign-up, sign-in, multi-factor authentication, and session management. Clerk may collect your email address, phone number, name, profile photo, IP address, device identifiers, and authentication metadata. Privacy policy: https://clerk.com/legal/privacy

Cloud, Hosting & Infrastructure — We use Expo (EAS) to build and distribute our mobile application; Expo may process build artifacts and app metadata (https://expo.dev/privacy). We use Sevalla for cloud infrastructure and hosting (https://kinsta.com/legal/privacy-policy).

Push Notifications — We use Expo Push Notification service to send you meal and hydration reminders. When you grant notification permission, your device push token is sent to Expo's servers to deliver notifications. You can disable notifications at any time in your device Settings. Privacy policy: https://expo.dev/privacy

Apple Health (HealthKit) and Google Health Connect — For how we use data read on your device, see Section 8 above. Apple: https://www.apple.com/legal/privacy/ · Google (Health Connect): https://policies.google.com/privacy

Payments — We may use third-party payment processors for paid products or services. We do not store or collect your payment card details; that information is provided directly to our payment processors, who adhere to PCI-DSS standards.

Email Marketing — We may use your Personal Data to send newsletters, marketing materials, and other information of interest. You may opt out at any time by following the unsubscribe link in any email or contacting us.

10. Other Third-Party Services

Spoonacular — Recipe search and recipe detail in the app use the spoonacular food API. When you search for recipes or request recipe details, your search text or a recipe identifier is sent to spoonacular through our servers to return content and related nutrition data. This is not used to build an advertising profile. Privacy policy: https://spoonacular.com/food-api/privacy

Open Food Facts — We may use Open Food Facts as a supplementary open-source food database. Only search queries or barcodes are transmitted; no personal data is shared. Privacy policy: https://world.openfoodfacts.org/privacy

OpenAI — AI-powered nutrition insights and meal image analysis are provided by OpenAI. When you use the AI assistant or upload a meal photo, the food context or selected image is sent to OpenAI's API. We do not intentionally include personal profile data in these requests. Privacy policy: https://openai.com/policies/privacy-policy

RevenueCat — Subscription and in-app purchase entitlements are managed by RevenueCat. RevenueCat receives a user identifier and subscription status from Apple to manage your access across devices. Privacy policy: https://www.revenuecat.com/privacy

We encourage you to review the privacy policies of these third-party service providers to understand how they handle your data.

11. Links to Other Sites

Our Service may contain links to other sites not operated by us. If you click a third-party link, you will be directed to that site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

12. Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under 13. If you are a parent or guardian and believe your child has provided us with Personal Data, please contact us. If we become aware we have collected such data without verified parental consent, we will take steps to remove it from our servers.

13. General Data Protection Regulation (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. NutriVibe aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

You have the following rights: right to access, right to rectification, right to erasure, right to restrict processing, right to object to processing, and right to data portability.

If you make a request, we have one month to respond. To exercise these rights, contact us at: contact@taherzobeidi.com.

We may process Personal Data under the following conditions: Consent, Performance of a contract, Legal obligations, Vital interests, or Legitimate interests.

14. California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, the CCPA/CPRA grants you specific rights, including: Right to Know, Right to Delete, Right to Correct, Right to Opt-Out of Sale/Sharing, Right to Limit Use of Sensitive Data, and Right to Non-Discrimination.

NutriVibe has collected the following categories of personal information within the last twelve (12) months: Category A — Identifiers (name, email address); Category F — Internet or other network activity (interaction with our Service).

We do not sell personal information. To exercise your CCPA/CPRA rights, contact us at contact@taherzobeidi.com. We will verify your identity and respond within 45 days (or 90 days with a valid extension).

15. CalOPPA

In accordance with the California Online Privacy Protection Act (CalOPPA): users can visit our site anonymously; our Privacy Policy link is accessible from our home page; you will be notified of any Privacy Policy changes on this page; and you can change your personal information by emailing us at contact@taherzobeidi.com.

We honor Do Not Track (DNT) signals and do not plant cookies or use advertising when a DNT mechanism is in place. We do not allow third-party behavioral tracking.

16. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically. Changes are effective when posted.

17. Contact Us

By email: contact@taherzobeidi.com

By visiting: https://taherzobeidi.com/apps/nutrivibe/contact