Consumer Health Data Privacy Policy

Nourro AI

Last updated: 12 August 2026 Effective: 12 August 2026

This is a standalone policy, separate from our general Privacy Policy, and it covers only consumer health data.

It exists as its own document because Washington State's My Health My Data Act requires one, and requires that it be reachable by its own distinct link rather than folded into a general privacy policy. It also serves consumers in Nevada (SB 370) and Connecticut.

Nothing in this document is additional to what the Act requires.

Who this applies to

This policy applies to consumer health data we collect from consumers who are residents of Washington State, Nevada, or Connecticut, or whose consumer health data is collected in those states.

Regulated entity: Nourro AI, United States Contact: contact@nourro.org, or the request form

1. The categories of consumer health data we collect

Nutrition and diet. Every food you log, the portion, the meal and the date.
Bodily measurements. Height, weight, age, sex and activity level.
Allergies and dietary restrictions, including allergen data and religious dietary observance (halal, kosher).
Sleep, exertion and recovery. Hours slept, sleep quality, subjective wellbeing, alcohol units, steps, heart rate and heart rate variability — where you enter them or connect Apple Health.
Derived health measures. BMI, BMR, readiness, recovery, strain and energy scores, and rolling baselines calculated from the above.
Photographs of food, if you use AI meal identification.

2. The sources we collect it from

Directly from you, when you log food, record weight, complete a morning check-in, or fill in your profile.
From your device, with your permission: the camera, your photo library, and Apple Health.
Generated by us, when the app calculates a score or a baseline from data you provided.

We do not obtain consumer health data from data brokers, advertising networks, or any other third-party source.

3. Why we collect it

Each purpose, plainly:

To show you your food diary and its nutrition totals.
To warn you when a food conflicts with an allergy or a dietary or religious restriction you have told us about. This is the primary purpose of the app.
To calculate your calorie and macronutrient targets.
To calculate readiness, recovery and related scores and show you trends.
To identify food from a photograph, when you ask us to.
To sync your data between your own devices and restore it if you change phone.

We do not use consumer health data for advertising, for profiling unrelated to the features above, or for any purpose we have not listed here.

Recipient	Category	What they receive
Supabase Inc.	Cloud database and authentication provider	All consumer health data you choose to sync to your account
Anthropic PBC	AI processing provider	Only the meal photograph or text you submit for identification, at the moment you submit it
RevenueCat Inc.	Subscription management provider	No consumer health data. Purchase records and an anonymous identifier only

Each of these is a processor acting on our instructions under contract. None of them may use your consumer health data for their own purposes.

We do not sell consumer health data. We have never sold it, and we will not sell it without first obtaining your separate, written, valid authorisation signed by you, as the Act requires.

We do not share consumer health data with any affiliate, because we have none.

We do not collect or use consumer health data for targeted advertising, and we do not use geofencing around any health care facility.

5. How you exercise your rights

You have the right to:

Confirm whether we are collecting, sharing or selling your consumer health data, and to access it.
Withdraw consent to our collection and sharing of it.
Have it deleted, including from our backups and from our processors.

To delete everything yourself, immediately: open the app and go to Settings → Account → Delete Account. This deletes your account and all consumer health data associated with it. You do not need to contact us and you do not need our permission.

To exercise any right without the app: use the request form and choose the right you are exercising, or write to contact@nourro.org from the email address on your account. We will respond within 45 days. If we need more time we will tell you why, and we will not take more than 90 days in total. There is no charge.

If we refuse a request, we will tell you why and how to appeal. To appeal, use the request form and choose "Appeal a decision about a request", or reply to our response with the word "appeal". We will review it and respond within 45 days. If we deny your appeal, you may contact the Washington State Attorney General at www.atg.wa.gov/file-complaint.

6. How long we keep it, and how we delete it

We keep consumer health data for as long as your account exists.

When you delete your account, the associated records are deleted from our live database immediately. Backups holding that data are overwritten within 30 days. We notify our processors of the deletion so they delete their copies. Anthropic holds no copy to delete, because we do not store the photographs or the text of AI requests.

Data held only on your device is removed when you delete the app.

7. Changes

If we change this policy, we will update the effective date above and notify you in the app before the change takes effect.

Nourro AI United States contact@nourro.org · request form