Privacy Policy for NourAIsh

Last Updated: January 3, 2026

Data Collection

NourAIsh stores all nutritional data, health information, and preferences locally on your device by default. Data is only transmitted to cloud services when you explicitly use optional features like NourAIsh AI or the Healthcare Provider Portal.

NourAIsh AI (Optional)

NourAIsh AI features are disabled by default and must be explicitly enabled by you. When NourAIsh AI is disabled, all processing happens on your device.

If you choose to enable NourAIsh AI, the following data may be sent to Google LLC (United States) via their Gemini AI service to process your requests:

• Food descriptions - Text you enter when describing meals for AI analysis
• Nutrition label images - Photos you take for AI-powered label scanning
• Chat messages - Questions you ask in the AI chat feature
• Recipe ingredients - Ingredient lists submitted for AI nutrition analysis
• Health context - Your health goals and dietary preferences (e.g., kidney health focus) may be included to personalize AI responses

This data is processed in real-time to provide nutrition information and is not stored by us. Google processes this data under their Data Processing Addendum and does not use it for training AI models. Your food logs, health tracking data, and personal information always remain on your device.

You can disable NourAIsh AI at any time in Settings > Cloud AI to stop all AI-related data transmission.

Healthcare Provider Portal (Optional)

The Healthcare Provider Portal allows you to share your health data with doctors, dietitians, or other healthcare providers via a temporary web link. This feature is entirely optional and only activates when you explicitly choose to create a portal link.

When you use this feature, the following data from the last 30 days is temporarily uploaded to our secure cloud servers:

• Food logs and nutrition data - Daily food entries and nutritional totals
• Blood pressure readings - If you have logged any
• Weight entries - If you have logged any
• Sleep data - If you have logged any
• Health profile summary - Your nutrition goals and health condition settings

Privacy protections:

• No personal identifiers are included - data is identified only by a random 8-digit verification code
• You choose the expiration time (1, 6, 12, or 24 hours)
• Data is automatically and permanently deleted after expiration
• You can revoke access at any time before expiration
• Portal URLs are unguessable (32-character random identifiers)
• Only one portal can be active at a time

Your healthcare provider does not need to create an account or install any software to view the shared data.

International Data Transfers

When you use NourAIsh AI features or the Healthcare Provider Portal, your data may be transferred to and processed in the United States. For AI features, data is processed by Google LLC under their Data Processing Addendum. Healthcare Portal data is stored temporarily on secure cloud servers in the United States until expiration.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland and do not wish your data to be transferred outside your region, you can avoid using these optional cloud features.

Third-Party Services

NourAIsh uses the following third-party services:

• Open Food Facts (https://world.openfoodfacts.org) - Product database lookups
• USDA FoodData Central (https://fdc.nal.usda.gov) - Nutritional data lookups
• FDA openFDA (https://open.fda.gov) - US food recall information
• Canadian Food Inspection Agency (https://inspection.canada.ca) - Canadian food recall information
• UK Food Standards Agency (https://www.food.gov.uk) - UK food recall information

These services may collect standard web request data (IP address, request time) as part of their normal operations. We do not control their data practices.

Camera and Photo Access

NourAIsh requests camera access solely for barcode scanning functionality. No photos or camera data are stored or transmitted. Photo library access is only used when you choose to attach photos to food entries.

Basic Nutrition Analysis

NourAIsh provides basic nutrition analysis using on-device processing. This happens entirely on your device and no data is sent to external servers.

Data Storage

All data is stored locally on your device using Apple's secure SwiftData framework by default. We do not have access to your locally stored data. The only exceptions are the optional NourAIsh AI features (processed by Google, not stored) and the Healthcare Provider Portal (temporarily stored until expiration, then permanently deleted).

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted at this URL.

Contact

For questions about this privacy policy, contact: support@nouraish.com