Privacy Policy

Effective date: [REPLACE-ME: date first published]

Last updated: [REPLACE-ME: same date on first publication]

Who we are

Nudge Health is a nutrition and food-quality tracking app published by T17 Ltd ("we", "us"), a company registered in England and Wales.

• Contact: [REPLACE-ME: support email]
• Registered address: [REPLACE-ME: T17 Ltd registered office address]

This policy explains what Nudge Health collects, why, who processes it on our behalf, and how you can get it deleted.

What we collect, and why

Account information

Your email address and password, handled by our authentication provider (Supabase). We use it to sign you in, to send password-reset emails, and to contact you about your account. Passwords are stored only as salted hashes; we never see your password.

Health and nutrition data

This is the substance of the app, and it is the most sensitive thing we hold:

• The foods you log, their quantities, meal slots, timestamps, and their calculated quality scores and macros
• Water intake
• Supplements you track, and whether you took them
• Weight entries over time
• The profile details you enter during onboarding: age, sex, height, weight, activity level, and your goal
• Your saved meals, favourites, targets, and reminder preferences

We use it to show you your logs, calculate your quality scores and daily and weekly summaries, set your macro targets, and send the reminders ("Nudges") you have switched on. We do not use it for anything else.

Meal photos

If you use photo logging, the photo is sent to our image-analysis service so it can identify the foods in it. We do not store your meal photos. The image is transmitted once, processed to produce a list of candidate foods, and discarded — it is never written to any storage bucket. Only the food items you then confirm are saved, and they are saved as food entries, not as pictures.

There is one separate case where we do store a photo, and only because you chose to attach it: a nutrition-label photo you add when submitting a missing food to our shared catalogue. That is covered under Foods you add to the catalogue below.

Nothing is logged automatically from a photo: every AI-identified food goes through a confirmation step you control before it is added to your diary.

Text you type into food chat

If you describe a meal in the chat logging feature, the text of that conversation is sent to our language-model provider to identify the foods. As with photos, nothing is logged without your confirmation, and we do not store the conversation.

Please note: to find nutrition information for shop-bought and branded foods that are missing from the public food database, the chat feature may perform a web search using the food description you provided. That search runs on our language-model provider's infrastructure (Anthropic). Do not put anything into the chat that you would not want used as a search term.

Foods you add to the catalogue

If a food is missing and you use "Can't find it? Add it", we store what you type — the product name, brand, barcode, ingredients and nutrition values — as an entry in our shared food catalogue, recorded against your account. You may also attach a photo of the nutrition label. That label photo is stored, in private storage that only you and we can reach, in a folder of your own; it is not published and it is not shown to other users.

A submission starts as unreviewed and is visible only to you. We check it before it becomes a shared catalogue entry that other people can find, because wrong nutrition data would give everyone a wrong score.

What happens to these if you delete your account is set out under Deleting your account and your data.

Referring a friend

Every account has a referral code. If you share yours and someone redeems it, we record that the two accounts are linked so we can give you both the free Premium time. We never tell you who redeemed your code, and we never tell them who referred them — the app cannot read that back. No email addresses or names are exchanged in either direction.

Referrals are not currently offered in the iPhone app. Your account still has a code, but the app doesn't show it and nothing can be linked to it.

Subscription information

If you subscribe to Nudge Health Premium, your purchase is processed by Apple. We never see or receive your payment card details. We receive subscription status — whether you have an active entitlement and when it expires — through RevenueCat, and we store that status against your account so the app knows to unlock premium features.

Diagnostic data

We use Sentry to receive crash and error reports so we can fix problems. These reports are deliberately configured to exclude personal data: they carry no email address, no user id, no IP address, no screenshots, and no request contents. Web addresses in the diagnostic trail are stripped back to the endpoint, so the details of what you searched, logged or weighed are removed before the report leaves your device. Sentry stores these reports in the European Union.

We also record a small number of anonymous product events — such as "a food was logged" and which screen a user was on when they viewed the upgrade page — as part of the same diagnostic trail. These carry a category label only, never the content of what you logged.

Apple Health

If you choose to connect Apple Health, Nudge Health reads one value: the active energy you burned yesterday. It uses this to adjust today's calorie target so your target reflects what you actually did — a rest day and a heavy training day get different targets.

This data:

• is read on your device and used on your device;
• is never uploaded to us, to our database, to our language-model provider, or to anyone else;
• is never stored, not even by the app — the adjusted target is recalculated each time rather than saved;
• is never used for advertising or analytics.

The connection is entirely optional, and the app works normally without it — it simply uses the targets you set yourself. You can revoke access at any time in iOS Settings → Privacy & Security → Health → Nudge Health, or turn the feature off inside the app.

What we do not collect

We do not collect your location, your contacts, your browsing history, your advertising identifier, or any financial information. The app does not use tracking technologies, and we do not link your data to data from other companies or apps for advertising purposes.

This website

Our website (nudge-health.app) uses Vercel Web Analytics to count visits and see which pages are read. It sets no cookies, does not follow you across other websites, and does not build a profile of you. It records page views in aggregate, with details such as the page, referring site, country and browser type. The page hosting is provided by Vercel. If you email us or use the feedback form, we receive what you send and use it only to reply.

Who processes your data

We use the following providers. Each one processes data only to deliver the service described.

Food searches are sent to Open Food Facts directly from your device. When you open, scan or log a product, our server fetches that product from Open Food Facts to save it to the app's shared food catalogue. Neither request carries an account identifier — the food database cannot tell who is searching or which account opened a product.

Where a provider is outside the UK or EU, transfers are made under appropriate safeguards (such as Standard Contractual Clauses) as required by UK and EU data protection law.

Photos and chat text sent to Anthropic for processing are not used to train their models, per their commercial API terms. We do not retain them.

How long we keep your data

We keep your account and logged data for as long as your account exists. Your food history is retained so you can look back at it — the free tier shows you the last 14 days, and Premium shows your full history, but in both cases the underlying data is kept until you delete it or delete your account.

Crash reports are retained by Sentry according to their standard retention period and are not linked to your account.

Deleting your account and your data

You can delete your account from inside the app: Profile → Delete account.

This permanently deletes your account and, with it, all of your personal and health data — your food logs, water, supplements, weight history, saved meals, favourites, targets, profile and body stats. Any reminders scheduled on your device are cancelled at the same time. The deletion is immediate and cannot be undone.

Photos and food submissions. Every nutrition-label photo you uploaded is deleted. Foods you submitted to the shared catalogue that have not yet been reviewed are deleted outright. Foods you submitted that have been approved stay in the catalogue, with your account link and any photo removed — so what remains is an anonymous nutrition label for a shop-bought product, with nothing connecting it to you. We keep those because other people may already be relying on them to score their own food, and deleting them would damage their records rather than protect yours.

Referrals. The record linking your account to anyone you referred, or to whoever referred you, is deleted along with your referral code.

One thing survives deletion, and we would rather be specific than vague about it: a minimal subscription-event record — an event identifier, an event type and a timestamp — kept for billing integrity, so that a replayed or delayed payment notification cannot resurrect entitlements for a later account. Your user id is removed from it, and it has never contained your email address, your name, or any nutrition, weight, photo or health information.

Anonymous food products sourced from the public Open Food Facts database are not tied to you and remain in the catalogue.

Deleting your account does not cancel your subscription. App Store subscriptions are managed by Apple, and you must cancel yours in Settings → your name → Subscriptions on your device. The app tells you this at the point of deletion too.

Your rights

If you are in the UK or the EU, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and the right to receive a copy of it in a portable format. Most of these you can exercise directly in the app — you can view and edit everything you have logged, and delete your account outright.

For anything else, contact us at [REPLACE-ME: support email]. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

Our legal basis for processing your health and nutrition data is your explicit consent, given when you create an account and log data. You can withdraw it by deleting your account. We process account and subscription data to perform our contract with you, and diagnostic data under our legitimate interest in keeping the app working.

Security

Your session credentials are encrypted on your device and held in the iOS Keychain, not in plain storage. Access to your data is enforced at the database level: our security policies mean one account cannot read or write another account's rows, and subscription-entitlement fields cannot be modified by the app at all — only by our payment webhook.

Children

Nudge Health is not intended for children under 13, and the app does not accept an age below 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Medical disclaimer

Nudge Health provides general nutrition information, not medical advice. Scores and targets are estimates. Consult a healthcare professional before making significant dietary changes.

Changes to this policy

If we change what we collect or how we use it, we will update this policy and change the "Last updated" date above. Material changes will be surfaced in the app.

Contact

[REPLACE-ME: support email]
T17 Ltd, [REPLACE-ME: registered office address]