NutriFactor Privacy Policy
1. Who we are
NutriFactor (“we”, “us”, or “our”) provides a nutrition, calorie, and macro tracking application (the “App”) and related API services.
This Privacy Policy explains what information we collect, how we use it, and your choices. The Android package name for the App is com.nutrifactor.app.
If you have questions about this policy or your data, contact us at privacy@lee-strong.com.
2. Information we collect
We collect information you provide directly and information created when you use the App.
- Account details: email address and a hashed password. We do not store your password in plain text.
- Profile and health-related inputs you choose to enter: display name, sex, date of birth, height, preferred units, timezone, and similar onboarding answers used to estimate energy needs.
- Nutrition plan settings: goals, activity level, calorie adjustments, and macro preferences.
- Diary and tracking data: food diary entries, custom foods, favourites, and weight logs (including optional notes).
- Technical and security data: authentication tokens, and limited device/network metadata such as user agent and IP address associated with refresh tokens and server request logs.
3. Information we do not collect
We do not currently collect payment card details, precise GPS location for tracking, contacts, or continuous background location.
The App may access the camera only when you choose features that need it (for example barcode scanning). We do not use the camera to upload personal photos to our servers as part of your profile.
4. How we use information
We use the information above to:
- Create and secure your account, and keep you signed in.
- Calculate and display nutrition plans, diary totals, and progress.
- Improve reliability, prevent abuse, and troubleshoot issues.
- Respond to support requests you send us.
- Comply with law where required.
5. Food product lookups
When you search for foods or scan barcodes, search terms or barcode values may be sent to third-party food databases (currently including Open Food Facts) so we can return product nutrition information.
Those providers process the lookup request according to their own privacy policies. Product images shown in search results are typically loaded from those providers’ URLs.
6. Legal bases (EEA/UK users)
Where applicable data-protection law requires a legal basis, we process personal data to perform our contract with you (providing the App), with your consent where you voluntarily enter health-related details, and for our legitimate interests in securing and operating the service—balanced against your rights and expectations.
7. Sharing
We do not sell your personal information.
We may share information with infrastructure providers that host our API and database, solely to operate the service; with food-data providers as described above for lookups you initiate; and with authorities when legally required.
8. Retention
We retain account, diary, weight, and plan data while your account remains active so the App can function.
You can permanently delete your account and linked personal data from Settings → Delete account in the App. Deletion is irreversible. Limited technical logs may remain for a short period for security and operations.
9. Security
We use industry-standard measures such as hashed passwords, authenticated API access, HTTPS in production, and access controls on our servers. No method of transmission or storage is completely secure.
10. Children’s privacy
NutriFactor is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will take appropriate steps.
11. Your rights and choices
Depending on where you live, you may have rights to access, correct, export, or delete personal data, or to object to or restrict certain processing.
You can update profile and tracking data inside the App, and delete your account (and linked diary, weight, plan, and private food data) from Settings. Public shared custom foods remain in the catalogue without your account details. For other privacy requests, email privacy@lee-strong.com from the address on your account.
12. International transfers
Our servers may be located in a country different from yours. Where we transfer personal data internationally, we take steps appropriate to the circumstances and applicable law.
13. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of the page will change when we do. Continued use of the App after an update means you accept the revised policy, except where local law requires additional consent.
14. Contact
Privacy requests: privacy@lee-strong.com
Operator hosting for the NutriFactor API is currently associated with macroapp.lee-strong.com.