Nutrifit — Privacy Policy

1. Who we are

Nutrifit is a private, invite-only client companion mobile app operated by Nakul Garg (the developer), delivered to clients of the Nutrifit dietetics practice. The app is built on the NutriCRM platform and runs on its infrastructure. References to "we", "our", or "us" in this policy refer to the developer and the practice operating Nutrifit.

This policy complies with the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 of India.

2. Information we collect

2.1 Account information

Your Nutrifit account is created by your supervising dietitian. The information stored against your account includes:

• Name, email and phone number
• Date of birth, sex and basic demographics
• Password (stored in encrypted hashed form)

2.2 Health information

Because Nutrifit is a dietetics service, we process health data that you and your dietitian add to your record:

• Weight, height, body measurements
• Blood pressure, blood sugar and other vitals you log
• Meal logs, water logs, and adherence to your plan
• Photos you choose to upload (profile / progress)
• Diet plans, recipes, and consultation notes shared with you

2.3 Device information

We collect minimal device data needed to operate the app: app version, OS version, device model, and a push notification token. We do not collect advertising identifiers and do not use advertising or tracking SDKs.

2.4 Permissions

The app requests notifications (for meal/water/follow-up reminders), camera and photo library (only when you tap "upload photo"), and network access (to reach our server). The app does not request location, contacts, SMS, call logs, microphone, calendar, Bluetooth or body sensors.

3. How we use your information

• To deliver your personalised diet plan and reminders
• To show your vitals and progress to you and your dietitian
• To send transactional notifications related to your care
• To respond to support requests and improve the service
• To comply with legal and regulatory obligations

We do not sell your personal or health information, and we do not use it for advertising.

4. Data sharing

Your information is visible to your assigned dietitian and the Nutrifit practice operating your account. We use a small set of processors to run the service:

• Cloud hosting: Google Cloud (server, database, storage), located in Asia.
• Email delivery: Resend for transactional emails (e.g. password reset, deletion confirmation).
• Push notifications: Apple Push Notification service and Firebase Cloud Messaging for reminder delivery.
• Legal authorities: When required by law or to protect our rights and the safety of users.

5. Data security

• Encryption in transit (TLS) and at rest
• Secure password hashing
• Auth tokens kept in iOS Keychain / Android Keystore
• Role-based access controls on the server

6. Data retention

We retain your account data while your account is active. When you delete your account (see Section 7), personal and health data is removed within 30 days. Invoices and payment records may be retained for up to 7 years to meet tax and accounting obligations. De-identified aggregate analytics may be retained.

7. Your rights & deletion

You can request access, correction, export or deletion of your data at any time. Two ways to delete:

• In-app: open Nutrifit → More → Settings → Account → Delete account. Deletion is processed immediately on confirmation.
• From the web: visit nutricrm.co/apps/nutrifit/account-deletion and submit the form. We process the request within 7 business days.

8. Children's privacy

Nutrifit is not intended for users under 18. We do not knowingly create accounts for, or collect data from, children. If you believe a minor has an account, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page.

10. Contact

Privacy questions: [email protected].
Support: [email protected].