Who we are
Nutricalor is developed and operated by João Paulo do Couto, an individual developer based in Brazil, who is the controller of the personal data processed in the app and on this website. For anything related to personal data — including access, correction or deletion requests — write to coutodev7@gmail.com. We reply within 15 days.
Data we collect
- Account data: email address and display name, entered by you or provided by Google sign-in.
- Body and health data: sex, age, height, weight and weight history, activity level and goal. These are the basis for calculating your daily target.
- Food logs: the foods you log, portions, calories and macronutrients.
- Usage data: usage counters (for example, how many AI-assisted entries you made today), used to run the free plan quotas and prevent abuse.
- Subscription data: the state of your subscription (trial, active or expired). We never receive or store your card details.
- Problem reports: if you use "Report a problem", we keep the message you wrote along with the app version, platform and language, so we can investigate and fix the issue.
Meal photos
The photo of your plate is sent to our server, analysed by artificial intelligence and discarded right afterwards, within seconds. We do not store your meal photos — not by default, and not as an option. Only the result of the analysis is kept: the foods identified and their nutrition values.
Voice and barcodes
Voice dictation is converted to text on your own device, by your operating system's speech recognition service. Only the resulting text reaches our servers; no audio is ever sent to us or stored by us.
When you scan a barcode, the code is read on the device and looked up in the public Open Food Facts database. No personal data of yours is sent with that lookup.
Why we process your data
- To calculate your daily calorie and macronutrient target.
- To log your meals and weight, and show your progress.
- To run the free plan quotas and your subscription state.
- To investigate reported errors and improve the accuracy of the service.
- To communicate relevant information about how the service works.
Legal basis (LGPD)
- Explicit consent (art. 11) for body and health data, given at sign-up. You can withdraw it at any time by deleting your account.
- Performance of a contract (art. 7, V) for account data, food logs and subscription — without them the service cannot work.
- Legitimate interest (art. 7, IX) for problem reports, abuse prevention and security.
Sharing and international transfers
We do not sell your data and we do not show ads. We share the minimum necessary with the processors below:
- Supabase — database and authentication, hosted in the São Paulo region, Brazil.
- OpenAI — receives the meal photo or text description with no identification of you whatsoever (no name, email or account identifier) and returns the nutrition estimate. This involves an international transfer to the United States, covered by the safeguards of art. 33 of the LGPD.
- Google — Google sign-in, if you choose it, subject to Google's privacy policy.
- Google Play and RevenueCat — process and manage the subscription. Payment details stay with Google; we have no access to your card.
How long we keep your data
We keep each type of data only for as long as the purpose behind it requires:
- Meal photos: not retained. The image is deleted right after the analysis, within seconds, and is never written to disk or included in a backup.
- Voice audio: not retained, because it never reaches us — transcription happens on your device.
- Account, profile, food logs, weight history and problem reports: for as long as your account exists. These only make sense as an accumulated record — your diary and your progress over time.
- Usage counters and quotas: for as long as the account exists; daily counters reset every day.
- Technical operation and security logs: retained by our infrastructure provider and automatically deleted by it, for 30 days at most.
- Backups: encrypted database backups are kept for up to 30 days. Deleted data may remain in those backups until the cycle expires, and is not used for any other purpose.
- Records required by law (for example, proof of subscription transactions): for the applicable legal period, even after account deletion, and solely for that purpose.
- Inactive accounts: if you do not access your account for 24 months, we may delete it along with all of your data, after prior notice by email.
Deleting your account and data
You can erase everything yourself, inside the app, under Profile → Delete account. Deletion is immediate and irreversible: account, profile, meals, weight history, problem reports and quota counters are permanently removed from our databases, with no need to contact anyone.
If you prefer, request deletion by email at coutodev7@gmail.com and we will do it within 15 days. After deletion, your data remains only in the encrypted backups until the 30-day cycle expires, and in any records the law requires us to keep.
Your rights
Under art. 18 of the LGPD, you may at any time:
- Confirm that we process your data, and access it.
- Correct incomplete, inaccurate or outdated data — everything is editable inside the app.
- Request deletion of your data, or do it yourself under Profile → Delete account.
- Withdraw your consent at any time.
- Request portability of your data to another service provider.
- Know who we share your data with — the list is in the section above.
To exercise any of these rights, email coutodev7@gmail.com. We reply within 15 days.
Security
All data travels encrypted (HTTPS/TLS). In the database, row-level security rules ensure each user can only reach their own data. The keys for the AI services live exclusively on our servers — never inside the installed app.
Minors
Nutricalor is not intended for anyone under 13, and sign-up requires a minimum age of 13. We do not knowingly collect data from children. If you believe a child has created an account, write to coutodev7@gmail.com and we will delete it immediately.
Cookies
This website uses only cookies strictly necessary for it to work. We do not use advertising or cross-site tracking cookies. The app does not use cookies.
What Nutricalor is not
Nutricalor provides nutrition estimates and tracking tools. It does not provide diagnosis, prescription, or medical or nutritional advice. For health decisions, consult a qualified professional.
Changes to this policy
We may update this Privacy Policy from time to time. If a change is material, we will tell you inside the app before it takes effect. The version in force is always on this page, with the last updated date at the top.