Privacy Policy

1. Data Controller

Nütraia is the data controller responsible for the personal data you provide when using our mobile application Nütraia Daily and our website at nutraia.com.

For any privacy-related enquiries or to exercise your rights, contact us at: hello@nutraia.com

2. What Data We Collect

We collect the following categories of personal data, depending on how you use our services:

We do not collect or process any special categories of personal data (such as health diagnoses, biometric data or genetic data). Wellness metrics (digestion, energy, skin glow) are lifestyle self-assessments voluntarily entered by you.

3. How We Use Your Data

We use your personal data for the following purposes:

• Account management: To create, maintain and personalise your account.
• Service delivery: To provide the App's core features — check-ins, programmes, AI tools, rewards, community circles and reminders.
• Order processing: To handle purchases, subscriptions, deliveries and refunds.
• Customer support: To respond to your questions and resolve issues.
• Communications: To send transactional emails (order confirmations, password resets) and, with your consent, marketing messages and wellness tips.
• Analytics & improvement: To understand how users interact with the App and to improve features and content, using aggregated and anonymised data.
• Security & fraud prevention: To detect and prevent unauthorised access, abuse of the platform and fraudulent activity.
• Legal obligations: To comply with applicable laws and regulations.

4. Legal Basis for Processing

Under the GDPR, we rely on the following legal bases to process your personal data:

• Contract performance (Art. 6(1)(b)): Processing necessary to deliver the services you have requested (account management, order processing).
• Legitimate interests (Art. 6(1)(f)): Analytics to improve the App, security monitoring and fraud prevention, where these interests are not overridden by your rights.
• Consent (Art. 6(1)(a)): Marketing communications and optional analytics cookies — you can withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)): Retention of transaction records for tax and accounting purposes.

5. Data Sharing & Third Parties

We do not sell your personal data. We share data with third parties only where necessary for the operation of our services or as required by law:

All third-party processors are bound by appropriate data processing agreements and are required to process your data only for the purposes we specify.

We may also disclose your data to law enforcement or regulatory authorities if required by law or to protect the rights, safety and property of Nütraia or others.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Account and wellness data: Retained for as long as your account is active, plus up to 12 months after account deletion to handle any outstanding requests.
• Purchase and billing records: Retained for 7 years to comply with tax and accounting obligations.
• Marketing consent records: Retained until you withdraw consent, plus 3 years thereafter for proof of consent.
• Technical and security logs: Retained for up to 12 months.

When data is no longer required, it is securely deleted or anonymised so it can no longer be linked to you.

7. Data Security

Nütraia implements appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:

• Encryption of data in transit (TLS/HTTPS) and at rest.
• Password hashing using industry-standard algorithms (bcrypt).
• Access controls limiting data access to authorised personnel only.
• Regular security reviews of our infrastructure and codebase.
• Payment data processed exclusively by PCI DSS-compliant Stripe — we never store card details.

Despite these measures, no system is completely secure. If you suspect a security breach affecting your account, please contact us immediately at hello@nutraia.com.

8. Cookies & Tracking

Our website uses cookies and similar tracking technologies to ensure the site works correctly, analyse usage and, with your consent, deliver personalised content.

The mobile App does not use browser cookies. Session management within the App is handled through secure tokens stored on your device.

9. AI Features & Data

The Nütraia Daily app includes AI-powered features (AI Coach, Glow Skin Analysis and AI Wellness Diary) powered by Google Gemini. When you use these features:

• Your wellness context (check-in history, goals, tier) is sent to the AI model to generate personalised responses.
• If you submit a photo for skin analysis, that image is processed by the AI model and is not stored by Nütraia beyond the duration of the session.
• AI-generated responses are stored in your account to enable diary and coaching history functionality.

AI outputs are for informational and motivational purposes only and do not constitute medical, dermatological or nutritional advice. Please do not share sensitive personal or medical information with the AI Coach that you would not share with a general wellness service.

10. Your Rights

Under the GDPR, you have the following rights regarding your personal data. To exercise any of them, contact us at hello@nutraia.com — we will respond within 30 days.

11. Children's Privacy

The Nütraia Daily app is not intended for children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at hello@nutraia.com and we will promptly delete that information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you via email or a prominent notice in the App before the changes take effect.

The "Last updated" date at the top of this page indicates when the policy was most recently revised. We encourage you to review it periodically.

13. Contact & Complaints

If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with your national data protection supervisory authority. EU residents may also use the Online Dispute Resolution platform at ec.europa.eu/consumers/odr.