NutriWrightPrivacy policy
NutriWright is built so that one household can plan together while each person's health details stay private. This policy explains what we collect, why, and what you can do about it.
NutriWright is operated by TMGWright Inc. ("we", "us"), South Bend, Indiana, USA. Contact: privacy@nutriwright.com.
What we collect
| Data | Why |
|---|---|
| Sign-in: your login with our identity provider (Auth0). We keep a one-way fingerprint of your email address, not the address itself, plus your display name. | To sign you in and stop the same email from creating duplicate accounts. |
| Household: household name and members, the shared pantry, meal plans, recipes you save, errands and the shopping list. | The shared planning features. |
| Private health details you choose to enter: conditions, medications, allergies, your private medical list, pain or injury reports, sleep entries. | To filter out recipes, products and exercises that could be unsafe for you. These are never shown to other household members. |
| Fitness: equipment, training focus, goals and workouts you log. | To build workouts that suit you. |
| Social: friends you connect with, co-working groups you join. | Huddle and co-working features. Friends see only a rough availability status, never your readiness or heart data. |
| Store: cart, orders and shipping addresses. | To fulfil orders you place. |
| Camera photos of barcodes, food and labels. | Read once to identify the item, then discarded. We don't store the photos. |
| Technical logs: IP address, app version, errors. | Security and keeping the service running. Kept for a short period. |
We do not collect your location (routes for errands are worked out on your phone), contacts, or advertising identifiers, and we don't use third-party analytics or advertising in the app.
How your health details are protected
Health details are encrypted on our servers with a key that is unique to you; that key is itself protected by a key-management service. Household members, friends and our support staff cannot see them in the app. Our servers decrypt them only to run safety checks for you (for example, whether a recipe conflicts with your allergies). When a check hides something, other household members are told only that it doesn't suit someone in the household, never who or why.
Who we share data with
We don't sell your data and we don't share it for advertising. We use these service providers, only for the purposes shown:
| Provider | Purpose | Data |
|---|---|---|
| Auth0 (Okta) | Sign-in | Email, login details |
| Shopify | Store checkout and payment | Order, shipping address, payment (entered on Shopify's page; we never see card details) |
| Our fulfilment partner | Making and shipping store orders | Order items and shipping address |
| Expo | Delivering app updates | App version and device type |
| Apple, Google | App distribution and in-app subscriptions | Purchase records (handled under their own policies) |
We may disclose data if the law requires it, and we will tell you unless we are legally prevented from doing so.
Where data is stored and for how long
Data is stored on servers operated by TMGWright Inc. in the United States. We keep it while your account exists. When you delete your account we delete your data as described on Delete your account. Shopify keeps its own record of any store orders you placed, as tax and consumer law require.
Your rights
You can view and edit your data in the app, delete your account in the app (Settings → Account & privacy → Delete account), and ask us for a copy of your data or to correct or delete it by writing to privacy@nutriwright.com. Depending on where you live (for example the EU, UK, California or other US states), you may have further rights, including to object to or restrict processing and to complain to your data protection authority. We answer requests within 30 days.
Where EU or UK law applies, we process your data to provide the service you asked for (contract), and your health details only with your explicit consent, which you give when you enter them and can withdraw by deleting them.
Children
NutriWright is not meant for children under 13, and we don't knowingly collect their data. Teens can use it only as part of a household set up by a parent or guardian. If you think a child has given us data, contact us and we will delete it.
Not medical advice
NutriWright's safety filters reduce risk but can't catch everything. Talk with your doctor or pharmacist about medications, allergies and exercise limits.
Changes
If we change this policy in a way that matters, we will tell you in the app before the change takes effect.