Your privacy

Private beta · Updated 23 October 2026

NutriPedz is operated by AJ Digital Web Service UK. Contact info@nutripedz.co.uk about privacy, support or your information.

What we process and why

We process your chosen name, age, account email and authentication information to create and secure your account; nutrition goals, optional height and weight, dated weigh-ins and notes, recipe bookmarks and preferences, workout routines and completed sets, reps, exercise weights and dates, recipes, ingredients, meal plans, shopping list items and checked or already-at-home choices, estimated ingredient costs, meal names, portions, nutrition values, dates and optional photos to provide your diary; and scan usage and subscription references to operate allowances and billing. Nutrition information can reveal health information. We ask for explicit consent before you use the nutrition diary and before sending photos for AI analysis.

Signup details are held with your account during email verification and saved to your private profile after sign-in. Your age is recorded in whole years; we do not ask for your date of birth. You can edit your name, age, height and weight on the Account page.

We use account information to provide the service you request, your consent for nutrition processing, and our legitimate interests in preventing abuse and maintaining security for relevant operational records. Where a legal obligation applies to a record, that obligation may require its retention.

Services that receive information

• Supabase provides authentication, database and private photo storage. The current project is hosted in its EU Central region.
• Vercel hosts the app and processes requests and operational logs.
• When you choose an AI scan, the selected photo is sent to OpenAI to estimate nutrition or read the label. Do not include faces, addresses or unrelated personal information. Provider handling and retention are governed by their terms and configured data controls.
• Barcode lookup sends the barcode to Open Food Facts. It does not send your diary or account email.
• Stripe receives your email and a user reference when you open checkout and handles payment details on its own pages. NutriPedz does not receive your full card number. All payments in this beta use Stripe's sandbox.

Providers may process some information outside the UK or your country. Contact us for information about the applicable provider arrangements. We do not sell your diary or use it for advertising.

Storage and deletion

Your diary remains available until you remove entries or delete your account. Meal photos are stored privately and displayed using temporary signed links. Account deletion removes current app records and photos, revokes sessions and cancels sandbox subscriptions. Copies in provider backups or security logs may remain until those systems rotate or retention requirements end. Stripe may retain transaction records under its own policies.

Your choices and rights

Use Account to download your data, change your password or delete your account. Data downloads contain diary values and photo paths, not the original image files. You can withdraw nutrition consent by deleting your account or contacting us. Withdrawal does not undo processing already carried out. You can ask for access, corrections, restriction, deletion or portability and raise an objection where applicable.

If you have concerns, contact us first. You may also complain to the UK Information Commissioner's Office. See the ICO's information about data protection rights.

Device storage and age

Essential browser storage keeps your signed-in session. This app does not include advertising cookies or optional analytics scripts. This beta is intended for adults aged 18 and over. We may update this notice as the service changes and ask again when a new consent choice is needed.