Privacy Policy

Last updated: October 14, 2026

2.1 Data Controller

[Your Full Legal Name], operating NutriPlan as a sole trader (OSVČ), [address], is the data controller responsible for your personal data under the General Data Protection Regulation (GDPR).

Contact: [privacy/support email] (see also hello@getnutriplan.app)

2.2 What Data We Collect

• Account data: email, authentication data
• Profile data: dietary preferences, allergen selections, calorie targets, family member profiles (where applicable)
• Health-condition data (optional, special category under GDPR Art. 9): if you choose to use health-condition filters
• Usage/analytics data: pages visited, feature usage, device/browser information (via PostHog)
• Payment data: processed directly by Stripe — NutriPlan does not store full card details
• Communications data: transactional and marketing emails (via Resend)

2.3 Subprocessors

Supabase — Database & authentication. Data involved: account, profile, plan, and health-condition data. Location: [confirm region — EU (eu-central-1) recommended].

PostHog — Product analytics and error monitoring (technical error data). Data involved: usage/behavioral data; for error monitoring, error messages and stack traces — never request bodies, headers, or cookies, and URLs are stripped of query strings and fragments before being sent. Approximate location (country/city) is derived from your IP address at ingestion; IP addresses themselves are not stored. No cookies or browser storage are used for analytics — nothing persists on your device between visits. For signed-in users, a pseudonymous identifier derived from the account id (no email or name) is used so your activity can be grouped together; anonymous visitors are not tracked across visits. Location: [confirm — EU Cloud or US Cloud].

Beyond that technical/error data, a small number of product-analytics events are also sent to PostHog to help us understand how the meal-plan wizard is used. These events include your selected goal (lose weight, maintain, or gain weight) and your activity level — but never your allergens, health conditions, or body measurements (weight, height, age), which are excluded from every analytics event. Every analytics event is linked only to the pseudonymous identifier described above, never to your email or name. The legal basis for this processing is our legitimate interest in understanding and improving the product. You can object to this processing at any time by emailing hello@getnutriplan.app; if you do, your analytics data will be excluded from future collection and the data already collected about you will be deleted.

Stripe — Payment processing. Data involved: billing/payment data. Location: EU/US (Stripe SCCs apply).

Resend — Transactional/marketing email. Data involved: email address, message content. Location: [confirm region].

Vercel — Application hosting. Data involved: all data in transit. Location: [confirm region/edge configuration].

Where a subprocessor is located outside the EU/EEA, transfers are covered by that provider’s Standard Contractual Clauses (SCCs) as part of their Data Processing Agreement (DPA). [Confirm each DPA has been accepted on the respective account.]

2.4 Special Category Data (Health Information)

Health-condition information is only collected if you explicitly opt in to health-condition filters, and only with your separate, explicit consent — shown as a dedicated checkbox at the point where you first enable health-condition filters, distinct from the general Terms of Service checkbox you check at signup. You may withdraw this consent at any time, which will disable health-condition filtering and delete the associated data.

How to withdraw consent

Clear your selected health conditions in Profile & settings. This both turns off health-condition filtering and deletes the associated data from your account.

2.5 Your Rights

Under GDPR, you have the right to: access your data, correct inaccurate data, request deletion, request portability, object to or restrict certain processing, and withdraw consent at any time where processing is based on consent. To exercise these rights, contact [privacy email] (see also hello@getnutriplan.app).

2.6 Data Retention

We retain your data for as long as your account is active. Upon account deletion, personal data is deleted within [X days], except where retention is required by law (e.g., billing records).

2.7 International Transfers

See subprocessor table above. Summary paragraph to be finalized once Supabase/PostHog regions are confirmed.

2.8 Contact

Questions about this policy: [privacy email] (see also hello@getnutriplan.app)

2.9 Family and Group Accounts

If you use a family account, you may add up to 4 additional members. The family owner is responsible for informing each person whose data they enter into the account and for having that person’s consent — or, where that person is a minor or dependent, for being their parent or legal guardian — before entering their profile or health information.

Other members of a family account can see each member’s name and their portion and calorie targets, along with a combined, unattributed list of allergens the shared meal plan avoids (e.g. “This plan avoids: peanuts, gluten”). This aggregated list never identifies which member has which allergen. Other members never see another member’s health conditions, weight, height, or age.

Members who have their own NutriPlan account manage their own profile data — including their allergens and health conditions — directly, the same as any individual account described in §2.2–2.4 above. Only the family owner can enter or edit profile data on behalf of a member who does not have their own account.