Privacy Policy

1. Information We Collect

• Account Information: Name, email address, password, age, sex, and profile photo when you register.
• Health and Nutrition Data: Logged meals, food photos, water intake, dietary preferences, allergies, macronutrient/micronutrient goals, body weight, height, activity levels, and hunger/fullness notes.
• Device & Usage Data: IP address, device model, operating system version, unique device identifiers, crash logs, and app navigation patterns.
• Connected Health Integrations (Optional): If you grant explicit permission, we sync data from third-party services (such as Apple Health, Google Health Connect, or fitness wearables) to import metrics like active calories, step counts, or resting heart rate.

2. How We Use Your Information

• Provide, maintain, and personalize your nutrition tracking experience.
• Calculate daily nutritional targets, calorie balances, and progress metrics.
• Generate trend reports, meal logs, and dietary insights.
• Facilitate data sharing with your designated registered dietitian or healthcare provider upon your explicit request.
• Send transactional notices, system updates, and customer support responses.
• Detect, prevent, and address technical bugs or security vulnerabilities.
• Comply with applicable legal obligations.

3. How We Share Your Information

• Service Providers: Trusted third-party vendors who assist with cloud hosting, database management, crash analytics, and customer support under strict data processing agreements.
• Designated Dietitians & Providers: When you explicitly authorize a connection to a provider (detailed in Section 4 below).
• Legal Requirements: If required by law, subpoena, or valid legal process, or to protect the safety and rights of our users or the public.
• Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.

4. Dietitian–Client Shared Access

• Explicit Authorization: Data sharing occurs only when a Client explicitly connects an account (e.g., via an invite code, link, or in-app request).
• Scope of Shared Data: Connecting accounts grants the designated Dietitian access to view logged meals, food photos, macronutrient/micronutrient summaries, hydration logs, linked wearable metrics, and journal entries.
• Revocation of Access: Clients may revoke a Dietitian’s access at any time in the App settings. Revocation immediately terminates real-time data syncing. Any records previously exported or documented by the Dietitian into their external clinical records remain subject to the Dietitian’s professional retention policies and applicable law.
• Professional Responsibilities: Dietitians represent that they maintain active, valid licensure/certifications in their practicing jurisdiction, agree to maintain strict client confidentiality, and use secure account access controls.
• Technology Conduit Disclaimer: The App serves strictly as a digital logging and communication tool. The App itself does not practice dietetics or provide medical diagnoses. The provision of Medical Nutrition Therapy (MNT) or personalized care plans is solely an independent relationship between the Dietitian and Client.
• Not for Emergency Use: Shared access is not a continuous, real-time medical monitoring system. Clients must not use in-app logging or messaging for acute medical emergencies.
• Regulatory Compliance (HIPAA / State Law): Where a Dietitian or practice operates as a "Covered Entity" under HIPAA, data handled on their behalf may be governed by a separate Business Associate Agreement (BAA).

5. Health Platform Protections

• Third-Party Health APIs: Data read from or written to platforms like Apple HealthKit or Google Health Connect is never used for marketing or advertising purposes, nor is it disclosed to third parties without your explicit direction.
• No Medical Advice: Outside of direct consultations with your independent Dietitian, automated app calculations and logs are for informational self-monitoring only.

6. Data Retention and Security

• Retention: We retain your account and logged nutrition data for as long as your account remains active, or as necessary to provide services and meet legal obligations.
• Security Measures: We use industry-standard administrative, physical, and technical safeguards—including HTTPS encryption in transit and AES-256 encryption at rest—to protect your personal information.

7. Your Rights and Choices

• Access & Export: Request a machine-readable copy of your personal and nutrition data.
• Correction: Update or correct inaccurate account details directly in the App settings.
• Account Deletion: Delete your account and all associated logging history permanently via the in-app settings or by contacting us.
• Permissions Revocation: Revoke access to device cameras, photo libraries, or health integrations at any time through your device settings.

8. Children’s Privacy

9. Changes to This Policy

10. Contact Us

• Entity Name: Nourish & Flourish Nutrition Therapy LLC
• Email: brianna@nourishflourishnutrition.com
• Mailing Address: 378 South branch road Suite 402 Hillsborough NJ 08844