Privacy policy

1. What we collect

The NutriLife app collects only what you enter yourself:

• Name
• Age (the app stores it as an approximate date of birth), sex, height, current and target weight
• Physical activity level, nutrition goal and meals per day
• Dietary restrictions and allergens, disliked foods and food rules
• Daily or weekly food budget
• Progress entries (weight) that you record by hand
• Water entries, meals you mark as eaten, favourite recipes, and the products you mark as already at home
• Dishes you put together yourself: name, products with weights and steps
• Reminder settings
• An optional health and lifestyle questionnaire in Settings: whether you have a chronic condition (yes/no) with a free-text note, habits (smoking, alcohol), stress level and waist circumference

Filling in the health questionnaire is up to you. Those answers are kept on the device as reference information and do not affect the calorie, protein, fat and carbohydrate figures. Only two answers reach the meal plan: if the waist circumference is half your height or more, the plan offers fibre-rich dishes more often; if you smoke, it offers dishes rich in vitamin C more often.

Inside the app we use no advertising trackers. The only thing the app sends automatically is a crash report if the app crashes. It sends anonymous usage statistics only if you have agreed to it (see below).

This website runs Cloudflare Web Analytics, which counts page views without cookies and without a persistent user identifier. Details are in the cookie policy.

2. Where the data is stored

All of your data is stored on your device alone. NutriLife does not send it to a server, does not sync it between devices and does not keep it in the cloud.

Crash reports. If the app crashes, it sends a crash report to Sentry (Functional Software, Inc.); the data is stored in the EU. The report contains only the error description, the stack trace, the phone model, the system and app versions, and the names of the screens you opened before the crash. Your name, weight, meals, questionnaire answers, IP address or user ID are never in the report. Reports are used only to fix bugs and are kept for up to 90 days. You can turn them off in Settings → “Crash reports”.

Usage statistics. They stay off until you agree, either on the app’s first screen or in Settings → “Usage statistics”. If you agree, the app sends short events to PostHog (PostHog, Inc.): which screen was opened, that onboarding was finished, that a plan was created, a meal marked as eaten, a meal swapped, a grocery item ticked, a dish of your own created (without its name or contents) or a partner’s site opened. The data is stored in the EU. Each event carries a random installation ID that is not linked to you, the app version, the system and its version, and the phone’s language and time zone. Your name, weight, age, goal, restrictions, budget, dish names, questionnaire answers or IP address are never included, and we keep no profiles of people. The statistics are used only to understand which features are used and where onboarding is hard. You can turn them off at any time in the same place, and the app then sends nothing more.

Reminders. They stay off until you turn them on in Settings. The app then asks for notification permission and schedules them on the device itself. Reminders are not sent from a server and need no device identifier. You can turn them off in the same place or in your phone's notification settings.

Backup. Only when you ask, the app creates a file with your data: profile, plan, shopping list, weight and water entries, meal marks, favourite recipes, the products marked as at home and your own dishes. You choose where to save or send it in the system Share sheet. If you keep the file in cloud storage or send it through a messenger, that service's rules apply to it. We never receive the file. Restoring reads only the file you pick yourself.

3. How the data is used

What is collected is used only to run the app: building your personal meal plan, calculating calories and macronutrients, generating the shopping list and showing your progress. We do not use your data for advertising or marketing.

4. Sharing with third parties

We do not sell, transfer or disclose your personal data to third parties. The crash reports Sentry receives and the usage statistics PostHog receives contain none of your personal data. Updates. To receive fixes without a new store version, the app checks for updates on Expo servers (EAS Update). The check sends only the platform, the app version and a random installation ID that is not linked to you. It sends none of your personal data. The request to rate the app is shown by Apple or Google; we receive neither your rating nor any data about you.

5. The nutrilife-app.com website

This site is informational and needs no account. It stores nothing in your browser: the interface language comes from the page address (/ is Ukrainian, /en is English), not from a setting saved on your side.

There is one form on this site that stores anything – the message form on the contact page. The Android waitlist has been removed from the home page: we no longer accept new signups. The records already collected have not gone anywhere, and what follows describes what is in them, how long they are kept and how to have them deleted. Nowhere else on the site do we store anything.

The waitlist (form removed). If you left your email while the form was up, the following is stored alongside it:

• the email address itself
• the language selected on the site at the moment you signed up
• your browser's User-Agent string, truncated to 500 characters – to tell people apart from bots
• a SHA-256 hash of your IP address. The IP address itself is not stored: the hash exists only for the hourly submission limit and cannot be turned back into an address
• the date and time of the request
• a random single-use confirmation token and the date you confirmed the address

These records live in a Cloudflare D1 database on Cloudflare's infrastructure. Resend is used separately – to send the confirmation link and to notify our team of a confirmed signup; it runs no mailing campaigns against this list. No new confirmation emails go out any more: there has been nothing to send them for since the form came down.

Signing up took two steps. Right after you submitted the form you received an email from noreply@nutrilife-app.com with a link in it. Until you open that link the address counts as unconfirmed: it does not join the list, it is not shown to the team, and it will not receive the Android release email. The link is valid for 7 days; unconfirmed records are deleted automatically once it expires. This is what stopped anyone from entering someone else's address and signing them up without their knowledge. If your link has not expired yet it still works – we deliberately left confirmation running when the form came down.

Once confirmed, the address is used for exactly one email – about NutriLife arriving on Google Play. We pass it to no one. The Android version was released on 23 September 2026, so the list has done its job: records are deleted once that email has been sent, and in any case no later than 24 months from the date of the request.

You can ask us to delete your record at any time by writing to info@nutrilife-app.com.

The message form. When you send a message from the contact page, the same Cloudflare D1 database stores the name and email address you gave, the topic you chose, the text of the message, the site language, a truncated User-Agent, a SHA-256 hash of your IP address (the address itself, as above, is not stored) and the time it was sent. A copy reaches our inbox through Resend – the same message, delivered where we will read it.

This is used to reply to you and for nothing else: an address from a message never joins a mailing list, and the form sends no automated email back. Correspondence is kept for at most 24 months and then deleted; you can ask us to delete it sooner at the same address.

6. Deleting your data

You can delete all of your data in the app at any moment: Settings → Delete profile and all data. This irreversibly removes your profile, meal plan, progress, water, meal marks, favourite recipes, products at home, your own dishes and reminders from the device, and resets the usage statistics ID: if statistics are on, new events arrive under a different one. Backup files you saved outside the app are deleted separately, wherever you saved them. A waitlist record lives separately from the app and cannot be deleted from the phone, so send a request for that to info@nutrilife-app.com.

7. Security

Data is stored locally and protected by the operating system's own facilities. We recommend enabling a screen lock on your device.

8. Children

The app is intended for people aged 18 and over. We do not knowingly collect data from children under 13.

9. Changes to this policy

If anything material changes we will tell you through an app update. Continuing to use the app after an update means you accept the new version.

10. Contact

For privacy questions: info@nutrilife-app.com