Privacy policy

What you tell us during setup

The answers you give in the quiz: the symptoms you picked, the follow-up detail on each one, your goal, your date of birth, gender if you give it, activity level, how you eat, foods you love, foods you would rather never see, and any allergens you flag. Where you heard about Nuvia, and a referral code if you were given one.

Some of this (symptoms, allergens, anything you tell us about your cycle) is health-related information about you. We treat it as sensitive, we store it under row-level access rules that scope every record to its owner, and we use it for nothing except building and scoring your plan.

What you tell us as you go

Your daily check-ins: how your skin read, a bloating rating from one to five, and how your energy was. Thumbs up or down on a tip. Feedback on a meal. Changes you make to your food preferences or dislikes. A weight entry, if you choose to record one.

What we generate for you

Your weekly plan, every meal in it, the score each meal carries and the reason written underneath it, plus a snapshot of your answers as they stood when that plan was generated. The snapshot is what lets a plan still make sense months later.

Account and subscription

If you create an account, we hold the email address associated with it and the sign-in method you used: Sign in with Apple, Google, or an email and password. Sign in with Apple can hide your real address behind a private relay, and Nuvia works exactly the same either way.

Purchases are handled by the App Store. We never see your card details. What we receive is a subscription record: which product, whether it is a trial, whether it is active, and when the current period ends.

How the app is used

A product-analytics event stream: which screen was viewed, which control was tapped (identified by a stable internal id, never by the words on the button), and when. It is attached to your account or, before you have one, to a random device identifier. We use it to find where the app is confusing and to fix it.

The same list, in the categories the law uses

California and several other states expect this set out by statutory category. These are the categories we have collected in the past 12 months, and we collect every one of them for the same business purpose: to build, score and improve your plan, to run your account and subscription, and to keep the service secure.

• Identifiers: email address, account identifier, device identifier. Kept while your account exists.
• Commercial information: your subscription status, product and renewal dates. Kept as long as tax law requires.
• Internet or network activity: screens viewed and controls tapped inside the app. Kept up to 24 months.
• Sensitive personal information: health-related information, being the symptoms you pick, your daily check-ins, and anything you tell us about your cycle. Kept while your account exists, and used only to build and score your plan.
• Protected classifications: age and, if you give it, gender. Used only as an input to your plan.
• Inferences: the plan, the scores and the patterns we draw from your check-ins. Kept while your account exists.

We do not collect biometric information, geolocation, education or employment information, or the contents of your messages, mail or contacts.

What we deliberately do not collect

• Photographs of your food, or any camera access at all.
• Barcode or label scans.
• Your contacts, your location, or your health app data.
• The advertising identifier, and no third-party advertising SDK.

If you are in the UK, the EU or another region with equivalent law, these are the lawful bases we rely on:

• To perform our contract with you: building your plan, scoring your meals, keeping your check-ins, running your subscription. Without this data there is no product to deliver.
• Your explicit consent: for the health-related answers you give in the quiz and in your daily check-ins. You give it when you answer, and you can withdraw it by deleting your data, which you can do yourself from Settings inside the app.
• Our legitimate interests: keeping the service secure, fixing faults, and understanding in aggregate where people get stuck.
• Legal obligation: where we have to keep a record, for example for tax on a subscription.

Nuvia writes your plan with a large language model. When a plan is generated or a meal is scored, the relevant part of your profile (the symptoms you picked, your goal, your allergens, how you eat, the foods you love and the foods you skip) is sent to Anthropic, which returns the week and the reasoning behind each score.

Your name, email address and account identifier are not part of that request. Under our agreement with Anthropic, the content of those requests is not used to train their models.

Meal photographs are generated separately, from the name of the dish alone, for example the words “overnight oats and berries”. Nothing about you is part of an image request, and the resulting picture is cached once and reused for everybody who gets that meal.

Our data and AI disclosure sets out in plain language which models are involved, what they are given, what they are never given, and where they get things wrong.

We use a small number of service providers. They process data on our instructions, under contract, and for nothing else.

• Supabase: the database, authentication, file storage and server functions behind the app. This is where your profile, plans and check-ins live.
• Anthropic: plan generation and meal scoring, as described above.
• fal.ai: generating the meal photographs, from dish names only.
• RevenueCat: managing your subscription status across devices.
• Apple: App Store distribution, payment, and Sign in with Apple. Apple's own privacy policy governs what it does with that.
• Google: only if you choose Google as your sign-in method.

We will also disclose data where the law genuinely requires it, and if Nuvia is ever acquired, your data would move with the service, and you would be told before that happened, and this policy would continue to apply to it.

• Your profile, plans and check-ins: for as long as your account exists. Delete your account and they go with it.
• Data held against a device, before you sign in: kept so your plan survives closing the app, and removed when the device record is deleted or after a long period of inactivity.
• Analytics events: kept in identifiable form for up to twenty-four months, then aggregated or removed.
• Subscription and billing records: kept as long as tax and accounting law requires, typically six to seven years, and separately from your health-related answers.

Deletion is real deletion from live systems, and we action it within 30 days. Encrypted backups and security logs roll off on their own schedule after that, up to a further 60 days, because a backup that can be edited on request is not a backup. Nothing is restored from those backups into live systems once you have deleted your account. Aggregated numbers that can no longer be linked to you, for example how many people picked a given symptom, are not deleted, because there is nothing left in them to identify.

Two of these are buttons in the app, not requests you have to make:

• Export everything: Settings, then Export my data. You get a machine-readable file containing your profile, your plans, your check-ins and your preferences.
• Delete everything: Settings, then Delete account. Your profile, plans, check-ins and preferences are removed, and your subscription stops renewing at the end of the period you have already paid for.

Depending on where you live you may also have the right to correct what we hold, to object to or restrict a particular use, to ask for a copy in a portable format, and to complain to your data protection authority. In the UK that is the Information Commissioner's Office. Write to support@nuvia.app and we will answer within thirty days.

If you live in the United States

California, Colorado, Connecticut, Virginia, Utah, Texas and a growing list of other states give residents rights over their personal information. Wherever you live in the US, we extend all of the following to you rather than checking your address first:

• Know: what we collect, why, who we disclose it to, and how long we keep it. That is this page.
• Access and portability: a copy in a machine-readable format, which is the Export button in the app.
• Correct: fix anything inaccurate. Most of it is editable by you in the app already.
• Delete: the Delete account button, or ask us.
• Limit the use of sensitive information: see below.
• No retaliation: we will not degrade the service or charge you differently for exercising any of these.

Sensitive personal information

The symptoms you pick, your check-ins and anything you tell us about your cycle are sensitive personal information under California and several other state laws. We use it for exactly one purpose: building and scoring your plan. We do not use it to infer characteristics about you for any other reason, we do not use it for advertising, and we do not disclose it for anyone else's commercial purposes. Because we already limit it to that one purpose, there is nothing further to opt out of.

Selling, sharing and targeted advertising

We do not sell your personal information, we do not share it for cross-context behavioural advertising, and we do not use it for targeted advertising or profiling that produces legal or similarly significant effects. We have not done so in the previous 12 months. There is no opt-out link on this site because there is nothing to opt out of. We honour Global Privacy Control signals regardless.

To exercise anything above, use the buttons in the app or write to support@nuvia.app. We answer within 45 days, extendable once where the law allows, and you may use an authorised agent.

We have to check it is you. Handing someone else your health information because they asked convincingly would be the worse failure, so we verify a request against your account before acting on it. If we cannot verify you, we will say so rather than guess.

We may decline or narrow a request where the law provides an exemption: where fulfilling it would reveal someone else's personal information, where we are required to keep the record for legal, tax or security reasons, or where the request is manifestly unfounded or excessive. If we do, we will tell you which of those applies and why. You can appeal by replying, and we will answer the appeal within 45 days.

Data is encrypted in transit and at rest. Every table that holds anything about you is protected by row-level security rules that scope each record to its owner, so one account cannot read another's. Access by our own team is limited to the people who need it, and administrative actions are written to an audit log.

Our infrastructure and our service providers operate in the United States and the European Union, so if you are outside those regions your data will be transferred to them. Where the law requires a transfer mechanism, we rely on the European Commission's standard contractual clauses and the UK addendum to them.

No system is perfect, and we will not pretend ours is. We are a small team, not a security company, and we would rather tell you that plainly than imply a guarantee we cannot stand behind. Determined attackers, flaws in software we depend on, and mistakes are all real possibilities, and no amount of care reduces that risk to zero. Please weigh that when you decide what to tell the app.

What we do commit to: keeping the measures above under review, and telling you and the relevant regulator if a breach affects you, within the time the law allows. In the UK that is a report to the Information Commissioner's Office within 72 hours, and a message to you without undue delay where the risk to you is high. The terms of use set out where responsibility sits when something does go wrong.

Nuvia is for adults. You must be 18 or older to use it, it is not directed at children, and we do not knowingly collect anything from anyone under 18. We do not knowingly sell or share the personal information of anyone under 16, because we do not sell or share anyone's.

If you believe someone under 18 has given us data, write to support@nuvia.app and we will delete it.

Data protection contact

Nuvia is available in the UK and the EEA, so UK GDPR and the EU GDPR apply to you wherever these terms say our governing law sits. For any data protection question, including access, erasure, objection or a complaint, write to support@nuvia.app marked “data protection”.

We have not appointed a formal Data Protection Officer. We handle health-related information, so we keep this under review, and we will appoint one and name them here if the scale of our processing requires it under Article 37. UK and EEA users may complain to their own supervisory authority at any time; in the UK that is the Information Commissioner's Office.

If we change this policy we will update the date at the top, and if the change is material we will tell you in the app before it takes effect.

Questions, requests, or anything that reads wrong to you: support@nuvia.app. There is more on the support page, and the terms of use cover the agreement itself.