Privacy Policy
This explains what Nutrilift collects, why, where it goes and the choices you have. We keep it short and plain. Last updated 2 November 2026.
Who we are
Nutrilift ("we", "us") is based in the United Kingdom and is the "controller" of your personal data under UK data protection law (UK GDPR and the Data Protection Act 2018). Contact: support@nutrilift.uk.
The short version
You can use Nutrilift without an account: your data is saved on your phone.
We only use your data to run the app for you. No adverts, we never sell your data and we don’t share it for marketing.
Some of it is health information (like injuries, body weight and meals), so we only use it with your explicit consent, which you can withdraw at any time.
You can delete everything at any time in Settings.
What we collect
About you (from the set-up questions and the coach chat): first name if you give it, goals, experience, training days, equipment and kit, session length, focus areas, injuries or health notes you share, sex, age range, height, body weight and how active you are.
What you log: workouts (exercises, sets, weights, dates), meals and drinks (names, calories and macros), meal photos and descriptions you send for an estimate, barcodes you scan, and your garden progress.
Coach chat: the messages you type to the AI coach.
Account (only if you choose to back up): your email address, or the private relay address Sign in with Apple gives us, plus an account ID. Without an account the app uses a random anonymous ID.
Subscription: whether you have an active subscription or trial. Payment is handled by Apple or Google; we never see your card details.
Technical: a daily count of AI requests (to keep usage fair), and, if enabled, crash reports with the screen and device type but no personal details.
Usage counts: a random install ID with the name of the step reached (for example, finished set-up or logged a first meal). Never your name, weight, food or messages. Deleted after 90 days. You can turn this off in Settings under Share usage counts.
Health information and your consent
Injuries, health notes, body measurements, food logs and meal photos can be "special category" health data. We use it only to build and adjust your plan, estimate your meals and give coaching, and only with your explicit consent, which you give at the end of set-up.
You can withdraw consent at any time by deleting your data in Settings (or emailing us). The app can’t build plans or give food targets without this information.
Why we use it (and our legal basis)
To provide the app you asked for: plans, logging, the calendar, reminders, the garden, backup and your subscription (performing our contract with you).
To use health information as described above (your explicit consent).
To keep the service secure, prevent abuse and fix crashes (our legitimate interests, kept to the minimum needed).
We don’t use your data for advertising, and we don’t make decisions about you that have legal or similarly significant effects.
Where your data goes
Your phone: everything is stored on your device first.
Supabase (our backend, servers in Frankfurt, EU): your backed-up workout and food logs, your account and AI usage counts. It also passes AI requests to Google.
Google (Gemini API): when you snap or describe a meal, build or change a plan, or chat with the coach, the relevant details are sent to Google’s Gemini AI to produce an answer. We send only what’s needed for that request, and don’t send your email or name unless you typed it in the message.
Apple and Google: app store purchases, Sign in with Apple and notifications, under their own privacy policies.
RevenueCat: checks your subscription status using an app user ID (no health data).
Open Food Facts: when you scan a barcode, only the barcode number is looked up.
Apple Health (only if you turn it on): the app reads your step count and body weight from Apple Health on your phone, and can write your weigh-ins to it. This stays on your phone. We do not send Apple Health data to our servers, except a weight you choose to add as a weigh-in. You can turn it off in Settings or in iPhone Settings > Health > Data Access.
Loops (only if you tick "email me tips" and sign in with your email): sends you the tips emails. It receives your email address, a goal word (like muscle or fat loss) and a few app milestones (such as first meal logged). Never your food, weight, photos or messages. You can unsubscribe in any email or turn it off in Settings.
Sentry (only if crash reporting is on): crash details without personal data.
Some of these companies are based in the US. Where data leaves the UK, it’s protected by the UK–US Data Bridge or the UK’s approved contract clauses.
How long we keep it
On your phone: until you delete it in Settings or delete the app.
Backups: until you delete your account in Settings, then it’s erased from our servers within 30 days.
AI requests: we don’t store the photos or messages you send; Google processes them to answer and may keep them briefly under its own terms for abuse monitoring.
AI usage counts (just a number per day, never the content): kept while your account exists, and deleted with it.
Your rights
You can ask to see, correct, download or delete your data, object to or restrict how we use it, and withdraw consent. Most of this you can do yourself in the app (Settings has delete options); otherwise email us and we’ll reply within one month.
If you’re unhappy, you can complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113). We’d appreciate the chance to sort it out first.
Children
Nutrilift is for adults aged 18 and over. We don’t knowingly collect data from anyone younger; if you think we have, email us and we’ll delete it.
Security
Data is encrypted in transit, each account can only read its own data, and the AI keys never sit on your phone. No system is perfect, so please use a device passcode.
Changes
If we change this policy we’ll update the date above, and tell you in the app if it’s a meaningful change.