← Back to NutriVoice

Privacy Policy

Effective date: 15 March 2026

1. Who We Are

NutriVoice is operated by 4dface Ltd, a company registered in England and Wales.

Contact details are provided at the end of this policy.

2. What We Collect

We collect the following categories of personal data:

Account data

• Email address and password (password is stored in hashed form only)

Profile data

• Demographic information (such as date of birth, biological sex, height, weight, activity level)
• Nutrition targets and preferences

Nutrition logs

• Food descriptions (text you type or transcribed from voice)
• Parsed food items with estimated nutritional values
• Meal type and timestamps

Voice recordings

• Audio recorded when you use the microphone feature is sent to a third-party service for transcription
• Audio is processed in real time and is never stored by NutriVoice

Device and crash data

• Error reports, stack traces, and device information collected via our crash reporting service to maintain app stability

Subscription data

• Subscription status, plan type, and purchase identifiers managed by our billing provider

3. Health-Related Data

Nutrition logs combined with profile information (such as height, weight, and dietary goals) may constitute health-related data under data protection law. We obtain your explicit consent to process this data during the app onboarding process. You may withdraw your consent at any time by deleting your account.

4. How We Use Your Data

We process your data for the following purposes:

• Providing the service (legal basis: performance of a contract) — storing your food logs, displaying nutrition summaries, managing your profile and targets
• Nutritional analysis (legal basis: your explicit consent) — processing your inputs and profile information to provide nutritional estimates, recommendations, and related features
• Crash reporting and app stability (legal basis: legitimate interest) — collecting error reports to identify and fix bugs
• Subscription management (legal basis: performance of a contract) — processing subscription status and billing through our billing provider

Nutrition and health-related data is never used or disclosed to third parties for advertising, marketing, or data mining. This data is used solely to provide and improve the nutrition tracking service.

5. Data Processing

NutriVoice uses OpenAI services as part of its data processing pipeline. When you use the app, your inputs and relevant profile information may be sent to OpenAI for processing. Voice recordings are processed for transcription and immediately discarded — they are never stored.

OpenAI does not use data submitted via its API to train its models. A Data Processing Agreement is in place with OpenAI. No personally identifying information (such as your email or user ID) is sent to OpenAI.

6. Service Providers

We share personal data with the following service providers who process data on our behalf:

• OpenAI (United States) — voice transcription and data processing
• Supabase (European Union) — database hosting and user authentication
• Sentry (United States) — crash and error reporting
• RevenueCat (United States) — subscription and billing management

Each provider processes data only as instructed by us and in accordance with appropriate data processing agreements.

7. International Data Transfers

Your account data and nutrition logs are stored in the European Union. Some data is transferred to service providers in the United States for the purposes described above.

These transfers are protected by the EU-US Data Privacy Framework adequacy decision and, where applicable, Standard Contractual Clauses approved by the European Commission.

8. Data Retention

• Account, profile, and nutrition logs: Retained while your account is active. All data is permanently deleted when you delete your account.
• Voice recordings: Never stored. Processed in real time and immediately discarded.
• Crash reports: Retained for approximately 90 days by our crash reporting service.
• Subscription records: Retained by our billing provider in accordance with their retention policy.

When errors occur, your IP address and email address may be included in crash reports sent to our error reporting service to help us diagnose issues. If you prefer this data not to be collected, please contact us.

9. Your Rights

Under the UK GDPR and EU GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (right to be forgotten)
• Restrict processing of your data
• Data portability — receive your data in a structured format
• Object to processing based on legitimate interest
• Withdraw consent at any time for processing based on consent

To exercise any of these rights, contact us at the email address above or delete your account directly in the app (Settings > Delete Account).

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local data protection authority.

10. Account Deletion

You can delete your account at any time from within the app (Settings > Delete Account). This permanently deletes your profile, all nutrition logs, and associated data from our servers. Crash reports held by our error reporting service and subscription records held by our billing provider are retained according to their respective policies.

11. Children

NutriVoice is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Security

We protect your data through encryption in transit (TLS/HTTPS), encryption at rest, password hashing, and database-level access controls that ensure you can only access your own data.

13. Changes to This Policy

We may update this policy from time to time. The effective date at the top of this page indicates the latest revision. For material changes, we will provide notice within the app.

14. Contact

For any questions about this policy or your personal data, contact us at: