Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: When you sign in using Google Sign-In or email authentication, we receive your name, email address, and profile picture from your Google account.
• Food Images: Photos you take or upload for nutrition analysis. These images are processed to generate nutrition data.
• Nutrition Data: Meal logs, food entries, calorie counts, macronutrient data, and health goals you set within the App.
• Product Scans: Barcode and label information you scan using the product declaration feature.

1.2 Information Collected Automatically

• Usage Data: How you interact with the App, features used, and navigation patterns.
• Device Information: Device type, operating system version, unique device identifiers, and mobile network information.
• Advertising ID: Android Advertising ID for personalized advertisements via Google AdMob.
• Crash Logs: Diagnostics data to help improve App stability and performance.

2. How We Use Your Information

• To provide the core AI nutrition analysis service
• To authenticate your account and sync your data across devices
• To personalize meal plans and nutrition recommendations
• To display advertisements via Google AdMob (unless you have a premium subscription)
• To process in-app purchases and manage subscriptions
• To send push notifications about reminders and app updates
• To improve and optimize the App based on usage patterns
• To comply with legal obligations

3. AI Processing

For food image analysis and nutrition estimation, NutriApp uses proprietary AI services. When you upload an image, it is transmitted securely to our AI processing pipeline to generate nutrition data (calories, macronutrients, and micronutrient estimates). We do not use your personal food images to train general-purpose AI models. Images are processed in real-time and are not permanently stored on AI processing servers beyond the time needed to generate your results.

4. Third-Party Services

NutriApp integrates the following third-party services. Each has its own privacy policy:

• Google Firebase (Firebase Auth, Firestore, Cloud Storage, Cloud Messaging) — Firebase Privacy Policy
  Used for: authentication, cloud data storage, cloud backup, and push notifications.
• Google AdMob — Google Privacy Policy
  Used for: displaying advertisements. AdMob may use your advertising ID to show personalized ads.
• Google Sign-In — Google Privacy Policy
  Used for: account authentication.
• Google Play Billing — Google Privacy Policy
  Used for: processing premium subscription payments.

5. Advertising (AdMob)

We use Google AdMob to display advertisements. AdMob may collect and use certain data, including your Android Advertising ID, IP address, and device information, to serve personalized ads. You can opt out of personalized advertising by going to your device Settings → Google → Ads, or by purchasing a premium subscription which removes all advertisements.

6. Payments & Subscriptions

Premium features are available through auto-renewing subscriptions. All payment processing is handled securely by Google Play Billing. We do not store or have access to your credit card details, payment information, or billing address. Google processes all payments in accordance with their privacy and security standards.

7. Data Security

Your data is stored securely using Firebase Firestore and Firebase Auth, both of which are hosted on Google Cloud Platform (GCP). We implement industry-standard security measures including:

• Encryption of data in transit using TLS/HTTPS
• Encryption of data at rest on GCP servers
• Secure authentication via Firebase Auth
• Firebase Security Rules to control data access

While we take reasonable precautions, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the App's services. You can delete your account and all associated data at any time from the Settings menu within the App. Upon account deletion, your data will be permanently removed from our Firebase databases within 30 days.

9. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Deletion: Delete your account and all associated data (available directly in the App).
• Portability: Request your data in a structured, machine-readable format.
• Object: Object to processing of your personal data for certain purposes.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at umisoft.ba@gmail.com.

10. Children's Privacy

NutriApp is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and within the App. You are advised to review this Privacy Policy periodically. Changes are effective when posted.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: umisoft.ba@gmail.com
• Developer: umisoft.ba, Tuzla, Bosnia and Herzegovina