This Privacy Policy explains how Nourvi handles your information. Nourvi is an AI calorie, macro and nutrition tracker for general wellness. It is not a medical device and doesn’t give medical advice.
Who we are: Nourvi is made and run by the developer shown as the Seller on Nourvi’s App Store page (“we”, “us”). Contact: Nourvi.app@gmail.com
Account. If you create an account, your email and password go to our sign-in provider, Supabase, so you can sign in and sync. You can also use the app as a guest with no account, keeping data only on your device.
Your nutrition and health data. Optional body stats (age, height, weight, sex, activity, goal) and the foods, meals, water, exercise, fasting, weight, recipes and notes you log. We use it only to show your tracking, calculate your targets and trends, and sync it to your other devices if you sign in. It is stored on your device, and if you are signed in, also in our cloud (Supabase); each account can access only its own data (row-level security), sent over HTTPS.
Camera & photos. Nourvi asks for the camera or your photo library only when you choose to photograph or pick a meal. Only the photo you choose is used. Meal thumbnails are kept on your device with the meal you logged.
Apple Health (optional). If you connect Apple Health, Nourvi reads the data you allow (steps, active energy and weight) and may write back weights you log, to keep your calorie burn and weight trend accurate. Apple Health data is never sold, used for advertising or marketing, or shared with other users. To disconnect: Health app → your profile → Apps → Nourvi → turn the switches off. Disconnecting stops future reading and writing; data Nourvi already copied into your log stays until you delete it (Clear all data or Delete account).
Motion & steps (optional). If you turn on step counting, Nourvi reads your daily step count from your iPhone’s motion sensor (and Apple Health, if connected). Steps are stored with your log. Distance and step calories are estimated on your device. Nourvi does not collect your location.
GLP-1 mode (optional). The medication name, weekly dose day, doses you mark as taken and how-you-feel notes are stored with your log. They are never shared with other users, and only appear in a summary if you choose to share one yourself.
Feedback (optional). If you send an idea or report from Settings, we store your message, its category, the app version and platform, your account id if you’re signed in, and an email address only if you type one, so we can reply.
Crash & error reports. If the app hits an unexpected error it sends a technical report (the kind of error and where in the code it happened) to our error log on Cloudflare. Reports are stripped of text you typed, numbers and email addresses before they leave your phone, are not tied to your identity, and are used only to fix bugs.
Technical information sent automatically. Like any app that uses the internet, every request Nourvi makes reveals your device’s IP address to the service that receives it. In addition:
We ask first. The first time you use an AI estimate, Nourvi explains what will be sent and to whom, and sends nothing unless you tap Allow. You can turn AI estimates off any time in Settings → Privacy; manual logging, search and barcodes keep working.
What is sent. Only the meal photo or the description you choose (for example “2 eggs and toast”). Not your name, email, weight, Apple Health data or other logs. It goes over HTTPS to our server (a Cloudflare function), which checks your account’s scan allowance and forwards it to our AI provider, Anthropic, PBC (the maker of Claude), to estimate the foods, calories and macros. The result comes back to your device and you can edit it before logging.
What is kept. We don’t store your photos or descriptions on our server. Under Anthropic’s commercial terms, Anthropic doesn’t use them to train its models and deletes them within 30 days (longer only if needed to investigate a violation of its usage policies, or where the law requires). AI estimates are approximate; please check them.
When you search foods or scan a barcode, the search text or barcode is sent to Open Food Facts (openfoodfacts.org) to return nutrition data. No account id, email or other personal identifier is attached, though, as with any website, Open Food Facts can see your IP address.
The leaderboard is off until you choose to join. When you join, we store a display name you pick, a random friend code, your friend list, and your daily step totals on our server (Supabase). There is no public search or directory: other people can only send you a request if you give them your code, and they only see your data after you accept.
Friends you accept can see your display name and step totals (today and the last 7 days). They cannot see your food, weight, health or GLP-1 information, or your email. You can remove a friend or report a name at any time, and “Leave friends” deletes your display name, friend list and shared step history from our server.
Sharing images. When you tap “Share my steps” or “Share this meal”, Nourvi creates an image on your device and opens your phone’s share sheet. Nothing is posted unless you choose where to send it.
If Nourvi offers an optional paid plan, payment is processed by the Apple App Store — we never receive or store your card or payment details. We use RevenueCat to manage subscription status; it receives only whether your subscription is active, tied to an anonymous identifier, not your name or card.
We do not sell, rent or share your personal information for advertising. We use a small set of service providers, under contract, only to run Nourvi: Supabase (accounts, sync, feedback, friends; United States), Cloudflare (our server functions and error log), Anthropic (AI estimates, only after you allow it), RevenueCat (subscription status, only if a paid plan is offered), Expo (app updates), Open Food Facts (food lookups) and Apple (App Store, Apple Health on your device). We may disclose information if the law requires it or to protect someone’s safety. If you join the friends leaderboard, the friends you accept see your display name and step totals as described above.
| Information | Kept for |
|---|---|
| Your logs, profile and settings | Until you delete them or your account. Guests: only on your device. |
| Meal photos and descriptions sent for AI | Not stored by us. Anthropic deletes them within 30 days. |
| AI scan counts (for monthly limits) | Until you delete your account |
| Friends name, list and step totals | Until you leave friends or delete your account |
| Feedback you send | Until you delete your account (or ask us to delete it) |
| Crash reports (no personal data) | Up to 30 days in our error log |
| Technical request logs (IP address, time, account id) | As set by each provider; we don’t copy them. See “Technical information” above. |
| Database backups | Kept by Supabase for up to 7 days, then overwritten; never used to restore a deleted account |
Delete your account & all data in the app: Settings → Account → Delete account. This permanently removes your account, logs, friends data, scan counts and feedback from our cloud and from your device, and cannot be undone. You can also request deletion from the web, clear on-device data via Settings → Clear all data, or delete the app. Export your data first if you want a copy (Settings → Export my data).
Nourvi is not directed to children under 13 (or the minimum age in your country), and we don’t knowingly collect their data. If you believe a child has given us data, contact us and we’ll delete it.
Data on your phone is kept in Nourvi’s private app storage, which iOS encrypts with your device passcode. Your sign-in token is kept in the iPhone’s secure Keychain. Cloud data is isolated per account (row-level security), and everything is sent over HTTPS. Our AI and payment keys exist only on our servers, never in the app. No method is perfectly secure, but we take reasonable measures to protect your information.
If something goes wrong. If we learn of unauthorized access to, or sharing of, your personal or health information, we will investigate, stop it, and notify you (and, where required, the U.S. Federal Trade Commission and state authorities) without unreasonable delay, as required by the FTC Health Breach Notification Rule and state laws.
Depending on where you live (for example under GDPR, or U.S. state laws such as California, Colorado, Connecticut, Virginia, Texas, Washington or Nevada), you may have the right to access, correct, export or delete your data, to withdraw consent, and to appeal our decision on a request. In the app you can export your data (Settings → Export my data), turn off AI estimates (Settings → Privacy) and delete your account. For anything else, email us; we’ll verify the request comes from you and reply within 45 days. We won’t treat you differently for using your rights. Residents of Washington and Nevada: see our Consumer Health Data Privacy Policy.
We may update this policy; the “Last updated” date will change. If a change affects how we use health data or what we share, we’ll tell you in the app and ask again where the law requires.
Questions or requests: Nourvi.app@gmail.com