Privacy Policy

Last Modified: October 20, 2026

This Privacy Policy explains how Fria LLC ("Fria," "we," "us," or "our") collects, uses, shares, retains, and deletes information when you use the NutriAI website, public nutrition APIs, online workspace, mobile application, and related services (collectively, "NutriAI"). Fria LLC is the developer and data controller responsible for NutriAI.

Website, Nutrition APIs, and Online Workspace

The public nutrition calculation API processes the ingredient names, amounts, and nutrition values you submit to compute a response. The guidance API processes intake totals, targets you choose, and your dietary preference to return rule-based food suggestions. These endpoints do not create an account, call an external AI provider, or store request bodies in an application database. Do not include personal identifiers or confidential health information in ingredient names or API requests.

The online workspace saves meal entries, dates, targets, and dietary preferences in your browser’s local storage on the device you use. These records do not synchronize across devices or accounts. When you request guidance, the workspace sends the selected day’s aggregate calorie, protein, and fiber totals, your targets, and your dietary preference to the NutriAI guidance endpoint. It does not send the full meal diary. You can remove saved meals in the workspace and clear locally saved information through your browser’s site-data settings.

Vercel hosts the website and APIs. Our hosting and network providers may process IP addresses, request paths, timestamps, response codes, and related security and operational metadata to deliver and protect the service. This is separate from application-level storage of nutrition inputs.

The sales inquiry form prepares a message in your chosen email application. It does not submit a form to our server or automatically send email. We receive the name, work email, company, use case, and other information you choose to send only when you send the message. We use sales correspondence to respond to your inquiry and discuss integration or commercial terms; the support-correspondence retention period below applies.

The account, photos, Health Connect, app analytics, and store-subscription provisions below describe the mobile application. Those features are not enabled by using the public website or its APIs.

NutriAI at a Glance

NutriAI is a nutrition and wellness app for adults age 18 and older, subject to applicable local age and legal-capacity requirements.
NutriAI creates a pseudonymous, anonymous app account so the service can keep your data separated and synchronized. Sign-in is not required for the initial Android release.
We do not sell personal information or Health Connect data.
We do not use Health Connect data for advertising, credit decisions, or data-broker purposes.
NutriAI does not request precise location, contacts, or microphone access for its current Android features. Advertising ID handling differs by Android version, as described below.
You can delete your account and associated data in the app or request deletion without reinstalling the app on our Account Deletion page.

Information We Process

Account and contact information

A randomly generated NutriAI/Supabase user identifier, authentication tokens, session status, app-account creation date, and security events.
If an account is later linked to a sign-in method, the identifiers needed for that method, such as an email address.
Your email address and the contents of messages you choose to send to support, including any account or device details included in the message.

Profile, goals, and preferences

Information you choose to provide to personalize nutrition estimates and goals may include your name or display name, profile photo, date of birth or age, calculation sex, height, current and target weight, activity level, nutrition goal, dietary preferences, units, language, theme, week-start preference, meal schedule, reminders, and notification settings.

Safety-context answers used during onboarding are processed on your device and are not uploaded. NutriAI stores only the resulting setup mode (calculated or non_prescriptive) so it can avoid generating automatic targets when a non-prescriptive setup is more appropriate.

Food, nutrition, weight, and water information

Food searches, favorites, meal entries, serving sizes, meal times, calorie and nutrient values, ingredients, allergens, barcode results, nutrition targets, and plan history.
Weight measurements, weight goals, progress trends, water intake, water goals, and related timestamps.
Information and feedback you submit when correcting or editing a result.

Photos and image information

When you choose Camera or Photos, NutriAI processes food photographs and nutrition-label images to identify food and estimate nutrition. NutriAI may upload the images to private cloud storage and send them to our AI processing service to provide the requested result. Image metadata needed to operate the feature may also be processed. NutriAI does not request microphone access for camera capture.

Health Connect information

Health Connect is optional. If you enable it and grant the requested permissions, NutriAI:

reads Active Calories Burned to display activity-related information and support your visible calorie-plan features; and
writes the Weight and Nutrition entries you log in NutriAI so they are available to other Health Connect apps you authorize.

NutriAI requests only these data types for its current Android features. Health Connect data is used only to provide or improve the health and fitness features visible in NutriAI. It is not sold, used for advertising, used to determine creditworthiness, or provided to data brokers. Human access is restricted to cases where you explicitly request support, where access is necessary for security or legal compliance, or where the data has been aggregated so it can no longer identify you.

Active Calories Burned values read from Health Connect are processed on your device and are not uploaded to NutriAI's servers. Weight and nutrition values originate from entries you create in NutriAI; NutriAI stores those app records as described in this Policy and, with your permission, writes a copy to Health Connect. NutriAI does not read Weight or Nutrition records from Health Connect for these features.

You can grant or revoke access at any time in Android's Health Connect settings. Revoking permission stops future Health Connect access but does not automatically delete records already stored in NutriAI or entries NutriAI previously wrote to Health Connect. You can delete NutriAI records in the app, use our account-deletion process, and separately manage or delete Health Connect records in Health Connect.

Purchases and subscriptions

Google Play, Apple, and RevenueCat may provide us with product identifiers, subscription and entitlement status, purchase dates, expiration dates, store country, transaction or order identifiers, and limited receipt information. We use this information to unlock paid features, restore purchases, prevent fraud, and provide subscription support. We do not receive or store your full payment-card number.

App usage, diagnostics, and device information

NutriAI and its service providers may process:

feature interactions, screens viewed, onboarding progress, purchase-flow events, app version, language, timestamps, and performance events;
crash traces, error logs, diagnostics, and technical context needed to reproduce and fix failures; and
device model, operating-system version, app installation identifier, Firebase installation identifier, Supabase user identifier, network/IP information processed by our servers, and notification token when notifications are enabled.

Pseudonymous information that can be associated with your NutriAI account or installation is treated as personal information. We do not use these identifiers for third-party advertising.

Android version 1.1.1 (version code 3) includes Firebase Analytics with Advertising ID access. In that version, Firebase may collect the Advertising ID for analytics when the identifier is available under the device settings. Android version 1.2.0 (version code 8) is configured to deactivate Firebase Analytics collection and disable Advertising ID collection and advertising personalization. These newer settings do not change the behavior of older versions that remain installed.

During onboarding, NutriAI records a limited, pseudonymous funnel event stream containing only the account identifier, a random onboarding-session identifier, flow version, event and step names, app build, and timestamp. These events do not include an arbitrary payload and do not include your weight, calculation sex, safety-context selections, or medical information.

NutriAI does not intentionally send food or health values, photo content, barcode content, support-message content, or payment details to Firebase Analytics or Crashlytics.

Why We Use Information

We process information to:

create and secure your anonymous account and restore your data;
analyze a food photo, nutrition label, barcode, or search and return nutrition information;
maintain meal, nutrient, weight, water, goal, and plan history;
calculate and calibrate calorie and nutrition targets you request;
synchronize the Health Connect data types you explicitly authorize;
provide reminders, widgets, purchases, subscriptions, and customer support;
measure onboarding and feature reliability, diagnose crashes, and improve performance;
protect NutriAI, enforce usage limits, prevent fraud and abuse, and comply with law; and
process an account-access, correction, export, or deletion request.

Where applicable law requires a legal basis, we rely on performance of our agreement with you, your consent (including for optional permissions), our legitimate interests in operating and securing NutriAI, and compliance with legal obligations. You may withdraw consent for an optional permission in your device settings.

Service Providers and Disclosures

We disclose information only as needed for the purposes described above. Our principal service providers include:

Supabase: anonymous authentication, database, private file storage, and server-side functions. Supabase processes account identifiers, profile and app records, uploaded images, and request metadata on our behalf.
RevenueCat: subscription entitlement and purchase-status management. RevenueCat processes the NutriAI customer identifier and store purchase or entitlement information.
Google Firebase Analytics and Crashlytics: product analytics, installation identifiers, crash reports, diagnostics, and app/device information used to understand usage and improve reliability.
Google Play and Apple App Store: app distribution, purchase processing, subscription management, fraud prevention, and legally required transaction records.
Google Health Connect: on-device exchange of only the health data types you authorize. Your Health Connect permissions are controlled through Android.
AI and nutrition-data service providers: food images, label images, text or barcode queries, request identifiers, and the minimum context needed to return the nutrition analysis or product result you request.

These providers process information under their own terms and privacy obligations and, where they act for us, under our instructions. We may also disclose information when required by law, to protect rights and safety, to investigate abuse or fraud, or as part of a merger, acquisition, financing, or sale, subject to applicable notice and consent requirements.

We do not sell or rent personal information. We do not share personal information for cross-context behavioral advertising.

Data Retention

We keep identifiable app data while your NutriAI account is active and for only as long as needed to provide the features you use. Specific periods are:

Account profile, meal, nutrition, goal, plan, weight, water, and uploaded-image records are kept until you delete them or delete the account.
Identifiable analytics events and pseudonymous onboarding events are kept for up to 14 months, then deleted or aggregated. Standard aggregate reports that no longer identify an individual may remain.
Firebase Crashlytics keeps crash reports, diagnostics, and associated installation identifiers for 90 days before beginning removal from its live and backup systems.
Ordinary support correspondence is kept for up to 24 months after the request is closed. Account-deletion correspondence and the minimum verification record are kept for up to 90 days after completion.
Production backups are overwritten or deleted within 30 days after data is removed from active systems.
When we request deletion of a Firebase installation identifier, Firebase may take up to 180 days to remove it from its live and backup systems.
Purchase, tax, accounting, anti-fraud, and legally required transaction records may be kept for up to 7 years, or for a different period when applicable law requires it. These retained records are isolated and are not used to personalize NutriAI.
Information subject to a legal hold, active dispute, or security investigation may be kept until the matter is resolved and any applicable limitation period expires.

We may keep aggregated or irreversibly de-identified information that can no longer identify or be linked to you.

Your Controls and Rights

Depending on where you live, you may have rights to access, correct, export, restrict, object to, or delete your personal information, withdraw consent, or complain to a data-protection authority. To make a request, email support@fria.ai. We may ask for the minimum information needed to verify that the account or data belongs to you.

You can also:

edit many profile, goal, meal, weight, water, reminder, theme, and language settings in NutriAI;
control camera, photo, notification, and Health Connect permissions in Android settings;
manage Health Connect records and connected apps in Health Connect; and
delete your NutriAI account in NutriAI > Me > Settings: select Delete account on Android or More > Delete account on iOS.

For complete instructions, including how to request deletion after uninstalling NutriAI, see Account Deletion.

Account and Data Deletion

Deleting your NutriAI account permanently removes the associated authentication account, profile, goals and plans, food and nutrition history, favorites, weight and water history, reminders, uploaded food and label photos, avatar, and the NutriAI-side subscription-customer association from active systems and instructs applicable processors to remove the associated customer data. The limited legal and operational exceptions listed under Data Retention may remain for their stated periods.

Deleting your NutriAI account does not cancel an App Store or Google Play subscription because subscriptions are controlled by the store. Cancel a Google Play subscription in Google Play subscriptions.

Security and International Processing

NutriAI uses technical and organizational safeguards appropriate to the nature of the information. Data sent between NutriAI and our services is encrypted in transit using HTTPS/TLS. Access to production data is restricted by role, and uploaded images are stored in private storage. No system can guarantee absolute security.

Our providers may process information in the United States and other countries. Where required, we use appropriate safeguards for international transfers.

Age Eligibility

The current NutriAI service is intended for adults age 18 and older, subject to any higher minimum age and legal-capacity requirements under applicable law. The current service is not offered to users under 18.

If you believe that a user under 18 has provided information to NutriAI, contact support@fria.ai. We will review the request and take the steps required by applicable law, including deletion where required.

Nutrition and Health Disclaimer

NutriAI uses AI and product databases to estimate nutritional information. Results may be incomplete or inaccurate and are for general wellness information only. NutriAI is not a medical device and does not provide medical advice, diagnosis, or treatment. Verify information independently, especially for allergies, dietary restrictions, medical conditions, or specific nutrition needs.

Changes to This Policy

We may update this Privacy Policy to reflect changes to NutriAI, our providers, or legal requirements. We will post the revised policy here and update the "Last Modified" date. If a change materially affects how we use sensitive information, we will provide additional notice when required.

Contact

Fria LLC

Email: support@fria.ai