Nutrition Español

Privacy policy

Last updated: October 1, 2026.

Who is responsible

Nutrition is developed by Álvaro Arcos García, as an individual developer. For any privacy question or to exercise your rights, write to nutrition@arcos.dev.

Data that stays on your device

Everything you log is stored in a local database on your iPhone: your profile (sex, date of birth, height, weight, body fat, activity, goal, intolerances and hydration settings), your meals with their foods and, if you keep them, their photos, your weights, the water you drink and your favorite foods. Photos are stored resized and without metadata (no location or camera data). None of it is uploaded to any Nutrition server or sync service. If you delete the app, it is deleted.

Apple Health (optional)

Only if you allow it, with two switches in Profile › Health:

• Write: each meal you log, with its energy, protein, carbohydrates, fat, fiber and sugars, and the weights you enter.
• Read: your weight and your active energy.

Health data is used only on your device: it is not sent to any server, not used for advertising and not sold. You can revoke access in Settings › Health.

AI photo analysis

When you analyze a meal, the app estimates its foods, calories and macronutrients with Google Gemini. Nothing is sent until you take or pick a photo and ask for the analysis, and only this is sent:

• The meal photo, resized and without metadata (no location or camera data).
• The optional note you write for context.

Never sent: your profile, weight, goals, intolerances, history or Health data.

How it travels and who processes it

• The request is encrypted (HTTPS) and goes to Nutrition's own server on Cloudflare, which forwards it to Gemini through Cloudflare's AI gateway, set up to keep neither the photo nor the answer.
• To prevent abuse, the app proves with Apple's App Attest that it is the genuine Nutrition app. The server stores the public key your device creates, a counter and a monthly count of analyses for the quota, which deletes itself after 63 days. It does not store photos, notes, results or data that identifies you.
• Google processes each request under the terms of the paid Gemini API, which does not use the content to train its models.
• The result comes back to your iPhone, and you keep, edit or discard it.

Estimates are generated by AI, can be wrong and are not medical or nutritional advice.

Barcodes and food search

Barcodes are read on your iPhone with the camera. To find the product, the app queries the open database Open Food Facts directly, sending it the barcode or the text you search for. Open Food Facts receives those queries from your device and handles them under its own privacy policy. No other data is sent.

Camera and photos

• Camera: only to photograph a meal or read a barcode, when you open it.
• Photos: the app only receives the photo you pick in the picker; it cannot see the rest of your library.

Exports, widgets and Siri

Exports (JSON and CSV) are created on your iPhone and only leave it when you share them, through the app you choose. The widget and Siri shortcuts show data already on your device and are not sent to any server.

What Nutrition does not do

• No sign-up or user accounts.
• No advertising, no analytics or crash-reporting SDKs, no tracking across apps or websites.
• Data is not sold or shared with third parties, except as described for photo analysis (Google, through Cloudflare) and food search (Open Food Facts), always at your request.

Retention and deletion

Your data stays on your iPhone until you delete it: you can delete meals, foods, weights or water entries in the app, or uninstall it to erase everything. The server only keeps the App Attest public key, its counter and the monthly count of analyses; you can ask for their deletion at nutrition@arcos.dev.

Your rights

Under the GDPR you can request access, rectification, erasure, restriction, portability or object to processing by writing to nutrition@arcos.dev. Since almost everything lives only on your device, you exercise most of these rights directly in the app, which also lets you export all your data. You can also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

Children

Nutrition is not directed at children under 16 and does not knowingly collect data from them.

Changes

If this policy changes, the new version will be published here with its date.