Effective 23 October 2026
Privacy policy
This policy explains what NutriRival collects, why, who can see it, and what you can do about it. NutriRival ("the app") is made by its independent developer ("we", "us").
If anything here is unclear, write to support@nutririval.com.
Who is responsible for your data
The developer of NutriRival is responsible for your personal data (the "controller").
Email: support@nutririval.com
What we collect
Your account
- Your email address and a password, or your Apple or Google sign-in.
- Your username.
What you enter in the app
- Your profile: sex, age, height, weight, target weight, body fat (if you enter it), your goal and your answers about your activity.
- What you eat, your workouts, water, weigh-ins and fasts.
- Your calorie and macro goals and your plan's weekly checks.
- Foods and recipes you create.
- Your settings: language, region, appearance, notifications and sharing choices.
Steps, if you allow it: the app reads your step count from Apple Health (iPhone) or Health Connect (Android). It only reads steps. It never writes to them and never reads anything else.
Social features
- Your friends, friend requests and the people you block.
- Your battles and their results.
- Chat messages, voice messages and reactions.
Technical data
- A push notification token, so we can send you notifications.
- Your time zone, so a battle day ends at your midnight.
We don't collect your location. We don't show ads. We don't sell your data, and we don't use it to track you across other apps or websites.
Your food log, weight and body measurements are health data. We only use them because you enter them to use the app, and only to provide it to you.
Why we use it
- To run the app: keep your log, work out your goals and your plan, and keep your data in sync across your devices.
- To run battles and friends: show your rivals what the game needs (below), work out points and results, and deliver messages.
- To send you emails: confirmation codes and account emails.
- To send you notifications you can turn off: battle updates, messages, reminders.
- To keep the service safe: prevent abuse and handle reports.
We process your data to provide the service you signed up for. For your health data, that's with your explicit consent, which you give by entering it, and which you can withdraw at any time by deleting it or your account.
What other people can see
- Everyone signed in: your username.
- Your friends and the players of a battle you've joined:
- your daily calorie total, your goal and your steps;
- your weight and target weight, unless you turn off Show my weight to friends (Settings → Privacy);
- during a live battle, your workouts (calories and minutes).
- Only if you turn on Show my meals to friends (off by default): what you ate each meal, and the names of your workouts. Turning it off removes them.
- Players in your battles and friends you message: what you send them.
- Foods you publish: a food you mark Public can be found by everyone. Private foods stay on your phone and in your account.
Someone you've only invited to a battle sees nothing until they join it.
Services we use
| Service | What for | Where |
|---|
| Supabase | Accounts, database, file storage, server functions | EU (Ireland) |
| Resend | Sending account emails | EU (Ireland) |
| Apple | Sign in with Apple, notifications, Apple Health (steps), voice dictation | |
| Google | Google sign-in; Firebase Cloud Messaging (notifications on Android) | |
| Google Gemini | Looks up a food's nutrition when our database has no match. Only the text you searched is sent, never your account or other data | |
| Open Food Facts | Product lookups by name or barcode. Only the search or barcode is sent | France |
Some of these process data outside the European Economic Area. When they do, the transfer is covered by the European Commission's standard contractual clauses or an adequacy decision.
We may also disclose data when the law requires it.
How long we keep it
- Your data: for as long as you have an account.
- Shared meals: removed when you turn sharing off.
- Battle workouts: removed when the battle ends.
- Deleting your account deletes your account and everything in it: log, profile, friends, messages, voice messages, reactions and notifications.
- Battles you played in other people's accounts keep their results, without your data.
- Foods you made public are deleted with your account.
Your rights
You can:
- see and correct your data in the app at any time;
- delete it, or your whole account: Settings → Danger zone → Delete account;
- get a copy of your data, or object to how we use it, by writing to support@nutririval.com;
- withdraw your consent at any time, by deleting the data or your account;
- complain to your data protection authority.
We answer requests within one month.
Security
- Your data travels encrypted and is stored encrypted at rest.
- Database rules make sure people only see what this policy says they can see.
- Passwords are never stored in readable form.
No system is perfectly safe, but we work to keep yours protected.
Children
NutriRival is for people aged 16 and over. We don't knowingly collect data from anyone younger. If you believe a child has given us their data, write to us and we'll delete it.
Changes
If we change this policy, we'll update this page and its date. For important changes, we'll tell you in the app.
Contact
support@nutririval.com