1. Who processes your data
This policy explains how the NutrAI mobile app for iOS and Android and the nutrai.ru website (together, the “Service”) process personal data. The data controller is ООО «НИЦ Синтезтех» (NITs Sinteztekh LLC), Taxpayer ID (INN) 2320250187, registration number 1172375055676, address: Office 302a, 75 Kurortny Prospekt, Building 5, Sochi, Krasnodar Krai, 354002, Russia.
We process data in accordance with Russian Federal Law No. 152-FZ “On Personal Data” and the requirements of the Apple App Store and Google Play.
2. Data we collect
Account
- Email address and password (stored only as a hash).
- If you sign in with Apple, Google, Yandex, VK, Mail.ru or Telegram: your account ID with that service, plus your name and email if you allow them to be shared.
Profile
- Name, sex, age, height, weight, body measurements, body composition, goal, language, time zone, avatar.
Nutrition and well-being
- Meal photos, text and voice descriptions of meals.
- Food diary, well-being check-ins, messages in the chat with the AI assistant.
- Analysis results: calories, macro- and micronutrients, recommendations.
Information about your diet, weight and well-being may be health data. We process it only with your separate consent, which you give in the app (consent text).
Subscription
- Subscription status, plan, payment date, promo codes used. We never receive or store bank card details.
Technical data
- IP address, device and browser type (user agent), push notification token, error and request logs.
- Records of consents given and withdrawn: type, document version, date.
We do not use advertising identifiers and do not show ads.
3. How we use it
- To create and maintain your account and sign you in.
- To recognise meals and calculate nutritional value from photos, text and voice.
- To provide personal recommendations, reports and reminders based on your profile and goals.
- To provide subscriptions and promo codes.
- To answer support requests.
- To keep the Service secure, prevent abuse and fix bugs.
- To send marketing emails, only if you have separately agreed to receive them.
4. Legal grounds
- Performance of our contract with you (the terms of use of the Service).
- Your consent, for health data, marketing emails and push notifications. You can withdraw consent at any time.
- Compliance with legal obligations, such as keeping payment records.
5. Device permissions
- Camera: to take a photo of your meal.
- Photos: to pick a picture from your gallery. The app only gets access to the photos you select.
- Microphone: for voice descriptions of meals.
- Notifications: for reminders and reports.
Permissions are requested when you first use the feature. You can revoke them in your device settings.
6. Who we share it with
We do not sell personal data or share it for advertising. Data is only shared with parties that help run the Service:
- Hosting provider: Cloud.ru, Russia, where the Service data is stored.
-
Artificial intelligence services. For automated data analysis, the Controller uses Polza.ai, a service that provides access to artificial intelligence models from third-party providers. Depending on the model used, processing may involve the corresponding AI model provider.
Meal photographs and descriptions, as well as the minimum user profile context necessary to generate the analysis result, may be shared for analysis. Names, email addresses and other data that directly identifies the user are not included in requests to the AI model.
Depending on the selected AI model and processing route, data may be processed using infrastructure located both within and outside the Russian Federation. Where such processing constitutes a cross-border transfer of personal data, the Controller carries it out in compliance with the requirements of Russian personal data legislation.
- Sign-in services: Yandex, VK, Mail.ru, Email, depending on the chosen sign-in method.
- Your nutritionist: only if you connect a specialist in the app yourself; they see the data you choose to share.
- Public authorities: only where the law expressly requires it.
7. Storage and retention
Databases containing personal data of Russian citizens are located on servers in the Russian Federation.
We keep your data while you have an account. After you delete your account, your data is deleted within 30 days. We keep only the records we are legally required to keep (such as payment records) for the period required by law. See Account deletion for details.
8. Security
- All data is transferred only over encrypted connections (HTTPS).
- Passwords are stored as hashes; sign-in tokens are kept in the device’s secure storage.
- Staff access to data is restricted and granted only as needed for their work.
9. Your rights
- Find out what data we process and get a copy of it.
- Correct inaccurate data; most of it can be edited in your profile.
- Delete your account and data, in the app or on request.
- Withdraw consent to data processing, emails or notifications.
- Complain to the Russian data protection authority (Roskomnadzor) if you believe we violate your rights.
To exercise your rights, email info@nutrai.ru from the address linked to your account. We reply within 10 business days.
10. Children
The Service is not intended for children under 16, and we do not knowingly collect their data. If you learn that a child has given us data, contact us and we will delete it.
11. Changes to this policy
We may update this policy. We will tell you about significant changes in the app or by email before they take effect. The date of the current version is shown at the top of this page.
12. Contact us
Email: info@nutrai.ru
Controller: ООО «НИЦ Синтезтех» (NITs Sinteztekh LLC), Taxpayer ID (INN) 2320250187, registration number 1172375055676, address: Office 302a, 75 Kurortny Prospekt, Building 5, Sochi, Krasnodar Krai, 354002, Russia.