Privacy Policy

1 Who We Are

PicNutri AI is operated by AccuWealth Holding Oy, a company registered in Finland. We provide an AI-powered nutrition tracking mobile application available on Android (and iOS).

If you have any questions about this Privacy Policy or how we handle your data, you can contact us at hello@picnutri.app.

2 Information We Collect

We collect information in the following categories:

• Account information: Email address and password (hashed) when you register an account.
• Profile data: Optional details you provide such as age, gender, height, weight, and dietary goals — used solely to personalise your nutrition analysis.
• Food photos: Images you take or upload for AI nutritional analysis. Photos are processed by our AI model and are not stored permanently unless you explicitly save a meal log entry.
• Meal logs: Food entries, portion sizes, macro/micronutrient data, and timestamps that you record within the app.
• Health metrics: Optional data including weight entries, activity levels, and progress measurements you choose to log.
• Usage data: Anonymised app interaction data (screens visited, features used) to help us improve the product.
• Device information: Device type, operating system version, and app version for troubleshooting and compatibility.
• Purchase information: Subscription status managed through Google Play. We do not store credit card or payment details — these are handled entirely by Google Play.

3 How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the PicNutri AI app and its features
• Analyse food photos and generate AI-powered nutritional breakdowns
• Personalise nutrition recommendations and insights based on your goals
• Process and manage your subscription through Google Play and RevenueCat
• Send you important account notices and service updates (not marketing without consent)
• Detect, investigate, and prevent fraudulent or abusive activity
• Comply with legal obligations

We do not use your data to train AI models or sell it to third parties for advertising purposes.

4 AI and Photo Processing

When you photograph food, the image is sent securely to our AI inference service (powered by Anthropic Claude API) for nutritional analysis. This processing happens in real time. Images are not stored on our servers after analysis is complete unless you save the meal entry to your log.

Saved meal images are stored securely and are only accessible to your account. They are never shared with other users or third parties.

5 Data Sharing and Third Parties

We share your information only in limited circumstances:

• Anthropic (Claude API): Food images and text prompts are sent to Anthropic for AI analysis, subject to Anthropic's privacy policy.
• RevenueCat: Subscription and purchase status is managed by RevenueCat. They receive anonymised user identifiers and purchase data.
• Google Play: Purchases are processed by Google. We receive subscription status information only.
• Hosting infrastructure: Our backend runs on Railway and Supabase, which are GDPR-compliant cloud providers.
• Legal requirements: We may disclose data if required by law, court order, or to protect the safety of our users.

We do not sell, rent, or trade your personal data to any third party for commercial purposes.

6 Data Retention

We retain your personal data for as long as your account is active or as needed to provide the service. Specifically:

• Account and profile data: retained until you delete your account
• Meal logs and food entries: retained until you delete them or your account
• Processed food images (unsaved): deleted immediately after AI analysis
• Anonymised usage analytics: retained for up to 24 months

7 Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request that we restrict processing of your data
• Portability: Request your data in a machine-readable format
• Objection: Object to processing of your personal data
• Withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at hello@picnutri.app. We will respond within 30 days.

8 Data Security

We implement industry-standard security measures to protect your personal data, including:

• TLS/HTTPS encryption for all data in transit
• Encrypted storage for sensitive data at rest
• Hashed passwords — we never store plain-text passwords
• Access controls limiting who can access production data
• Regular security reviews of our infrastructure

No method of transmission over the internet is 100% secure. If you believe your account has been compromised, please contact us immediately.

9 Children's Privacy

PicNutri AI is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10 Cookies and Tracking

The PicNutri AI mobile app does not use browser cookies. Our website (picnutri.app) may use essential cookies for functionality only. We do not use tracking or advertising cookies.

11 Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via the app or by email. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the app after changes constitutes acceptance of the updated policy.

12 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: