Data Retention Policy

This policy describes the retention periods for each category of data we process and the applicable deletion procedures.

We retain personal data only for as long as necessary for the purpose for which it was collected or as required by law.

1. Data categories and retention periods

1.1. Account data

• Type: Name, email, encrypted password.
• Period: For the duration of the account + 30 days after requested deletion.
• Reason: Required to provide the service and for security.

1.2. Profile data

• Type: Intolerances, dietary preferences.
• Period: For the duration of the account.
• Reason: Providing recommendation features.

1.3. Monitoring journal

• Type: Foods consumed, symptoms, personal notes.
• Period: For the duration of the account; you can delete any entry at any time.
• Reason: Providing personal journal functionality.

1.4. Recommendation history

• Type: Generated recommendations and their configuration.
• Period: Maximum 24 months or until account deletion.

1.5. Technical data and logs

• Type: IP addresses, session activity, technical logs.
• Period: Maximum 90 days.

1.6. Legal compliance data

• Type: Consent records, deletion logs.
• Period: Minimum 3 years (legal requirement).

2. Data deletion

2.1. Automatic deletion

Upon account deletion, all identifiable personal data is removed within 30 calendar days.

2.2. Deletion on request

You can request immediate deletion of your account and data from the Profile section or by emailing contact@nutriaid.eu.

3. Data anonymisation

Fully anonymised statistical data may be retained indefinitely for service improvement.

4. Contact

Questions about data retention: contact@nutriaid.eu