Privacy

This page explains what data Nutrition processes, why it is used and how you can make choices about your information.

You can find information about the operator and contact details in the Legal Notice.

Using Nutrition without an account

You can use Nutrition without creating an account. Your saved entries generally remain on your device and are not automatically backed up on our servers.

If you clear your browser data or switch devices, these entries may be lost. Some online features require an internet connection even when you are not signed in.

Accounts and syncing

If you create an account, we process your email address and the information needed to sign you in.

Supported personal data can be stored on our servers and synced between your devices. This may include your food diary, custom foods and recipes, personal goals, height and weight measurements.

Based on the current functionality, age and sex remain stored on your device.

Creating an account is optional, but an account is required for syncing and certain community features.

Nutrition and body information

Information such as age, sex, height and weight is optional. Nutrition can use it to calculate personal reference values for your energy and nutrient requirements. These calculations take place on your device.

Your nutrition and body information may reveal details about your health and is therefore subject to additional data protection requirements.

Sharing with others

Your personal food diary is private and is not automatically published.

If you share foods or recipes with the community, other users can view and use the published content. You can also choose to share specific meals, portions and their nutritional values with connected friends.

Copies of published content already saved by other users may not always be recoverable after you delete the original content.

Photos and food search

Photos of nutrition labels are processed on your device for recognition.

Recipe photos may be stored on our servers when you sync or publish them.

If you use online food or barcode search, the information needed for your request is sent to Open Food Facts. Depending on how the service is accessed, technical connection information may also be involved.

Technical operations and service providers

When you access Nutrition, technical connection data required to provide the application is processed. This includes your IP address and information about the requested content. Technical security and error logs may contain such information.

We use service providers for hosting, user accounts, syncing and email communication.

Your browser also stores information needed for your local entries, preferences and an active sign-in session.

Aggregated figures about the use of the application and published content may also be created to help improve and monitor the service.

Legal bases

Personal data needed for your account and selected features is processed to provide those services under Article 6(1)(b) GDPR.

Where the legal requirements are met, we process technical connection and security data based on our legitimate interest in operating a secure and reliable service under Article 6(1)(f) GDPR.

Where consent is required, we request it separately. You may withdraw consent at any time with effect for the future.

Where synced information qualifies as health data under the GDPR, its processing is subject to the additional requirements of Article 9 GDPR.

Storage and deletion

Entries stored locally remain on your device until you remove them or the relevant browser data is cleared.

Account data and synced content are retained for as long as needed for your account and selected features, or where legal retention obligations apply.

You can delete your entries and account using the available features. Different retention or deletion rules may apply to published content, copies already saved by others, technical security logs and backups.

Your rights

Subject to the applicable legal requirements, you have the right to access, rectify and erase personal data, restrict processing, request data portability and object to processing.

You can also withdraw consent at any time with effect for the future.

For privacy requests and contact details, please see the Legal Notice.

You may also lodge a complaint with a competent data protection supervisory authority, particularly in the country of your habitual residence, your place of work or the place of an alleged data protection infringement.

Contact and feedback

When you send feedback through your account, we store your messages, replies, processing status and timestamps in a separate support database, linked to your account. Your account ID, account email address, email confirmation status and current display name are available to authorized administrators so they can identify the account concerned and process your request. Administrators can reply in this conversation. You can read replies after signing in. Closed requests are deleted after 180 days and spam after 30 days. Open requests are retained while they are being handled. Encrypted backups expire after 14 days. You can request deletion using the contact details in the Legal Notice.