What data do we collect?
We collect only the data that you voluntarily provide:
- Account data: name, email, encrypted password
- Journal data: logged meals and reported symptoms
- Profile data: food preferences set by you
- Technical data: IP address, browser type (security purposes only)
We do not collect card numbers, national ID numbers, financial data, or government identifiers.
What do and do not we do with your data?
What we do:
- We provide app features (journal, AI analysis, recommendations)
- We ensure your account security
- We send necessary technical communications (password reset, security notifications)
- We improve the app based on aggregated and anonymized usage
What we do not do:
- We do not sell your data to anyone
- We do not share them with third parties for commercial purposes
- We do not use them for targeted advertising
- We do not create marketing profiles
- We do not access your data without a justified technical reason
Your GDPR rights
Right of access
You can request a complete copy of your data stored on the platform at any time.
Right to rectification
You can correct or update any incorrect or incomplete data.
Right to erasure
You can request complete deletion of your account and all associated data.
Right to portability
You can export your data in a usable format (JSON, CSV).
Right to object
You can object to any type of processing of your data.
Right to restriction
You can request limitation of the processing of your data in certain situations.
How do you exercise your rights?
You can send any GDPR request to:
contact@nutriaid.eu
We respond to GDPR requests within a maximum of 30 calendar days, in accordance with European regulations.
Privacy Policy
Complete GDPR document
Data Retention
How long we keep data
Account Deletion
How to delete your data
What is GDPR and why does it matter?
GDPR (General Data Protection Regulation) is the European regulation that establishes the rights of individuals over their personal data and the obligations of organizations that process it.
For NutriAID Nutrition Companion it is particularly important because health data (meals, symptoms, tolerances) is considered sensitive data under GDPR and benefits from enhanced protection.
How do you exercise your GDPR rights at NutriAID?
- 1
Identify the right you want to exercise
Access, rectification, erasure, portability, objection, or restriction — choose what applies to your situation.
- 2
Send an email to contact@nutriaid.eu
Clearly state the right requested and provide your account identification data (email address).
- 3
Receive confirmation
We confirm receipt of your request within 72 hours.
- 4
We process the request
We process and respond to any GDPR request within a maximum of 30 calendar days, in accordance with European regulations.
- 5
Receive the response
You receive confirmation that your right has been exercised — complete deletion, data copy, correction, or restriction applied.
Example: exercising the right to erasure
Mihai decides to stop using NutriAID. He sends an email to contact@nutriaid.eu: 'Hello, I request complete deletion of my account and all my data. Account email: mihai@email.com.' Within 72h he receives confirmation. Within 30 days: the account is deactivated, all meals, symptoms, and profile are permanently deleted. Mihai receives written confirmation that the deletion was complete and irreversible.
NutriAID vs. platforms without clear GDPR policy
| Criterion | NutriAID Nutrition Companion | Platforms without clear GDPR |
|---|---|---|
| Data sold to third parties | No | Possible |
| Commercial data access | No | Possible |
| Data deletion on request | ✅ Yes, within 30 days | Uncertain |
| Transparency of data use | ✅ Complete | Partial |
| Encrypted storage | ✅ Yes | Variable |
| GDPR compliance | ✅ Full | Unspecified |
Frequently asked questions
- What data does NutriAID collect about me?
- We collect account data (name, email, encrypted password), journal data (meals and symptoms you voluntarily log), profile preferences, and minimal technical data (IP, browser) exclusively for security.
- Who has access to my health data?
- Only you and the NutriAID automated systems running the AI analysis. There is no human access to your data without a justified and documented technical reason.
- Can I request complete deletion of my data?
- Yes. Send an email to contact@nutriaid.eu with the subject 'Account deletion request'. The account and all associated data will be permanently deleted. We respond within 30 days.
- Does NutriAID sell my data to third parties?
- No. Your data is not sold to anyone and is not shared with third parties for commercial purposes. This is a fundamental and unconditional policy of the platform.
- Is my data stored securely and in compliance with GDPR?
- Yes. NutriAID infrastructure complies with GDPR requirements for storing and processing personal data, including health data considered sensitive under European regulation.
Summary
- NutriAID collects exclusively data voluntarily provided by you — no tracking or commercial profiling
- Data is not sold or shared with third parties for any commercial purpose
- You have 6 GDPR rights: access, rectification, erasure, portability, objection, restriction
- You can exercise any GDPR right by email at contact@nutriaid.eu
- We respond to all GDPR requests within a maximum of 30 calendar days
- Health data is considered sensitive data and benefits from enhanced GDPR protection