Privacy Policy
This policy explains what personal data the NutriWeek iOS app ("NutriWeek", "we") collects, why, how long we keep it, and what rights you have. NutriWeek doesn't show ads, doesn't track you across apps or websites, and doesn't sell your data.
Who is responsible
The controller of your personal data is Egor Shestakov, the developer of NutriWeek. Contact: privacy@nutriweek.fit.
What we collect and why
| Data | Why | How long we keep it |
|---|---|---|
| Account ID, and the user identifier Apple or Google gives us when you sign in | To create your account and sign you in | Until you delete your account |
| Apple sign-in token (stored encrypted) | So we can revoke Sign in with Apple when you delete your account | Until you delete your account; it is then revoked at Apple |
| Nickname | So other users can find you and share cycles with you | Until you delete your account |
| Your ingredients, meals, cycles, daily plans and macros, and the cycles you share | To provide the app's planning features and sync them to your devices | Until you delete them or your account |
| IP address, device user agent and requested address (server access logs) | To keep the service secure and diagnose errors | 30 days |
| Backup copies of the database | To recover from a failure | 30 days |
When you sign in, Apple or Google sends us a token that may contain your email address. We verify the token and discard the email — we don't store your email or your name. If you use Apple's "Hide My Email", Apple doesn't share your real address at all.
We don't collect your location, contacts, photos, analytics, crash reports or advertising identifiers.
The app keeps a short-lived copy of your meals on your device (up to 3 days) so it opens quickly. It stays on the device and is cleared when you sign out.
Legal basis
- Your account and planning data are processed to provide the service you asked for — performance of a contract (GDPR Art. 6(1)(b)).
- Access logs and backups are kept for our legitimate interest in keeping the service secure and reliable (GDPR Art. 6(1)(f)).
Who can see your data
- Other NutriWeek users can find you by your nickname and see it on cycles you share.
- People you share a cycle with can see that cycle and its meals.
- Amazon Web Services hosts our servers, database and backups as our processor. Your data is stored in Frankfurt, Germany (EU).
- Apple and Google handle sign-in as independent controllers under their own policies: Apple Privacy Policy, Google Privacy Policy.
We don't share your data with anyone else, except where the law requires it.
Deleting your account
In the app, open Account → Delete Account. Deletion is immediate and permanent: it removes your ingredients, meals, cycles, days, shares and nickname, revokes Sign in with Apple, and deletes your account record. You can also request deletion by emailing privacy@nutriweek.fit.
Deleted data can remain in backups for up to 30 days, after which the backups expire. We use backups only to recover from a failure.
Your rights
You have the right to access, correct, delete and receive a copy of your data, and to object to processing based on legitimate interest. Email privacy@nutriweek.fit and we'll reply within one month.
You can also complain to a data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens, or the authority where you live.
Security
All traffic between the app and our servers is encrypted with TLS. Sign-in tokens we store are encrypted at rest.
Children
NutriWeek isn't intended for anyone under 16.
Changes to this policy
If we change this policy, we'll update the effective date above. For significant changes, we'll also tell you in the app.