This Privacy Policy explains how Nutrplan (“Nutrplan”, “we”) collects, uses, and shares information in connection with the Nutrplan application and website (the “Service”). Nutrplan is a wellness tool. Although it handles health-related information you provide, it is not a HIPAA-covered service.
1. Information you provide
- Account information: email address and authentication credentials.
- Health intake: name, age, sex, conditions, medications, symptoms, dietary restrictions, goals, lab findings, and any free-text context you submit.
- Generated content: meal plans, recipes, and saved meals associated with your account.
2. How we use your information
- To generate, display, and save your personalized meal plans and recipes.
- To operate, secure, and improve the Service.
- To communicate with you about your account or service-related matters.
3. AI processing
To generate plans and recipes, we transmit the information you enter (and prior plan context) to third-party large-language-model providers acting as our processors. These providers process the data only to return a response to us and do not use your data to train public foundation models. We do not send your data to AI providers for any purpose other than fulfilling your request.
4. Sharing & sale of personal information
We do not sell your personal information, including health information. We share information only with service providers who help us operate the Service (such as cloud hosting, authentication, and AI inference providers), and only as necessary to provide the Service to you. We may disclose information when required by law or to protect rights, safety, or property.
5. Storage & retention
Your information is stored in a managed Postgres database with row-level security policies that restrict each row to its owning user. We retain your information for as long as your account is active. When you delete your account, we delete your profile, plans, and saved meals.
6. Your choices
- Access & edit: You can view and edit your health profile at any time from the Profile page.
- Delete your account & data: You can self-serve account deletion from your Profile page. This permanently removes your account, health profile, plans, and saved meals.
- Requests: For any privacy request, email info@nutrplan.com.
7. Children
The Service is not directed to children under 18 and we do not knowingly collect their information.
8. Security
We use industry-standard safeguards including TLS in transit, encrypted storage at rest, and row-level authorization. No system is perfectly secure; you use the Service at your own risk.
9. Changes
We may update this Policy from time to time. Material changes will be communicated through the Service.
10. Contact
For privacy questions or requests, email info@nutrplan.com.
See also our Terms of Service.