Privacy policy

Who is responsible

Controller: Tomas Body, Tomášikova 67, 058 01 Poprad, Slovakia. Contact for privacy requests: smartcaloriemeter@gmail.com. NouriBud is for adults aged 18 or older.

What remains on your device

Your profile (including any pregnancy/breastfeeding or eating-disorder answers), goals, diary, food quantities, weight, activity, fasting entries, recipes, saved products and confirmed meal photos are primarily stored on your device. An AI access account does not enable automatic diary synchronization. The app does not contain an advertising or analytics SDK. Information in a backup you export is then stored wherever you choose to save it.

We use profile answers to calculate and contextualize the requested wellness estimates and to show relevant safety limits. NouriBud is not a medical device or a substitute for professional advice.

Purposes and legal grounds

You decide what to record locally. For an AI request or seven-day review, we process and forward only the selected data to deliver that one result on the basis of your consent (GDPR Article 6(1)(a)). A complete review has a separate affirmative choice for that request. Where the selected content reveals health information, we rely on your explicit consent under Article 9(2)(a) as well. You can use the diary without requesting AI; choosing not to send a new request stops future AI processing but cannot undo a request already completed.

Portion-calibration and shared-catalogue contributions each require their own optional consent (Article 6(1)(a)); they remain separate and can be withdrawn in Settings. We use limited website/API access and security logs to keep the service available and prevent misuse on the basis of our legitimate interest in security (Article 6(1)(f)). You may object to this processing. Neither optional sharing choice is required to use the ordinary diary.

AI requests and food search

When you request an AI analysis, the selected text, photo, screenshot, product label or recipe is transmitted over HTTPS through our IONOS-hosted server to the OpenAI API to produce the result. An unfinished photo or text request may be queued on your phone and sent when connectivity returns. You review an AI food estimate before it becomes a confirmed diary entry. The NouriBud server does not keep ordinary AI prompt content as a diary. The AI provider may keep abuse-monitoring logs, normally for up to 30 days; legal or security exceptions can apply. Do not include people, documents or other private details in food photos.

Searching an online food database or scanning a barcode can send the query or code directly to Open Food Facts. This service operates independently of NouriBud. We do not send your diary to Open Food Facts.

Seven-day AI diet review

All supported app versions can request a seven-day diet review. Some older versions offer only a diet-only review; newer versions also let you choose a complete review for that individual request. The control used for this choice can differ by app version, and no ongoing choice of review scope is saved. Diet-only sends meal and ingredient names, quantities, nutrient values and your selected goal. Complete review additionally sends age, sex, height, current weight and a limited trend, activity, available expenditure and plan values, and completed fasting intervals inferred from logged caloric meals. Missing expenditure is not converted to zero. These intervals cannot prove what happened when nothing was logged. Neither mode includes your name, email address, beta access code, photos, free-text notes or recipe links in the AI content forwarded to OpenAI. The code may still authenticate the request to our server.

Optional improvement of portion estimates

In a compatible release, guests can also opt in without creating an account. Contributions are bound to the guest's securely stored random credential. Consent and calibration uploads do not consume AI requests or start the trial clock. Deleting guest trial data also deletes its calibration contributions. Before an unlinked guest identity expires, its remaining calibration samples are removed. Verified account linking preserves control of contributions already consented to; it does not grant new consent.

The first eligible weighed photo meal offers a separate optional choice. If you agree, that meal and future new photo meals whose total weight you confirmed from a scale can be sent automatically to measure and improve portion estimates. A contribution may contain one or two meal photos, the meal name, confirmed total grams, the original AI estimate, your corrections, and the consent version and time. It does not contain your profile, body weight, full diary, note, recipe or exact meal time. Earlier meals are not uploaded retroactively. Refusing does not block ordinary app features.

You can turn this off in Settings. This stops new contributions and requests deletion of attributable samples; if offline, the app must finish the server request later. Samples are normally kept for at most 24 months.

Optional technical reports

A compatible release can keep a technical error or crash record in private phone storage. On reopening, or after a recoverable error, you choose Send report / Do not send for that report. The app sends no report before this choice. It deletes declined reports and keeps approved reports safely for later when offline. Your choice does not enable future crash uploads.

The NouriBud server receives only the app version/build, source revision and build/report IDs, operating system and hardware model, allowlisted error/signal type, technical stack frames and fixed step codes. Photos, diary, profile, email, sign-in codes/tokens, form text and full logs are excluded. The Android Sentry SDK uses a local-only transport and iOS uses local PLCrashReporter; reports do not go to the vendors' cloud services. Phone and server reports are retained for at most 30 days with access restricted to authorised administrators. Short-term network limits use an IP fingerprint in memory, not in reports. Reports are not linked to an account or AI trial.

Optional shared food catalogue

This is separate from portion calibration and off until you opt in. After consent, a new ingredient or product that you review and deliberately save, including a checked AI ingredient, is submitted for moderation, as are future eligible saves. Older saved products, imported backups, recipes, cooked meals, meal portions and diary entries are not sent retroactively. Search works without consent.

Submitted details can include name, brand, barcode, nutrition per 100 g/ml, serving, language, country, source, a retry identifier and consent version/time. If you supplied product or ingredient verification photos, up to two re-encoded images may be sent temporarily without EXIF metadata. Meal photos, consumed amounts, health profile and diary are excluded. Photos are removed after moderation. AI-derived nutrition needs an independent source before public approval. We do not submit your entries to Open Food Facts.

Only moderator-approved entries become available to other users. Approval creates a separate catalogue entry without the contributor code, contribution ID, times, IP address or photo. Attributable pending or rejected entries are retained for at most 24 months. Switching off sharing stops new uploads and requests removal of entries still linked to your beta code, including temporary photos. An already detached anonymous approved entry may remain, and previous consent versions retain their earlier deletion rules. A pseudonymous revocation marker without food details can remain up to 24 months to prevent delayed uploads from restoring removed contributions.

Providers and security

IONOS hosts the website and our API. OpenAI Ireland Ltd. and its subprocessors process AI requests; Open Food Facts receives direct online searches as an independent service. Encrypted transport is used. Website/API security logs can contain an IP address; they are rotated daily and rotated files are kept for up to seven days. We do not use submitted API content to train our own AI model. OpenAI states that API content is not used to train its models unless its customer opts in.

AI processing can involve countries outside the European Economic Area. OpenAI's published data processing addendum describes adequacy decisions or EU standard contractual clauses for its onward transfers. You can request information about the applicable safeguards through our privacy contact. Open Food Facts publishes its own privacy information for direct searches.

Your controls and rights

In Settings → Privacy and data you can export or delete local data, manage the two optional sharing switches, check catalogue contribution status and export those contributions. Turning a switch off opens a deletion confirmation. Uninstalling the app removes its local sandbox but does not delete files you exported, originals in your photo library or server contributions. If your beta code/device is unavailable, contact us for a secure request procedure; do not email codes or sensitive photos. See Privacy choices.

You may request access, correction, deletion, restriction, portability where applicable, or object to certain processing, and withdraw consent without affecting prior lawful processing. We may need to verify that a request relates to your data. You may also complain to the Slovak Data Protection Authority.

Website and changes

These static pages do not use tracking cookies, analytics or third-party fonts. Normal server access logs still apply. We will update this notice before introducing payments, advertising or materially different data use.