Privacy Policy

Last Updated: February 28, 2026

Data Controller: Invotek AS, org.nr. 931 930 354, Postboks 1 Bjørndal, 1214 Oslo, Norway ("we", "our", "Nutri-E"). Contact: support@nutrieapp.com

At Nutri-E, we take your privacy seriously. This Privacy Policy explains how Invotek AS collects, uses, and protects your information when you use our mobile application and website.

1. Information We Collect

Data Stored Locally

• Supplement Information: Names, brands, dosages, and nutrient content of supplements you track
• Dose History: Records of when you take your supplements
• Personal Health Data: Age, gender, pregnancy/lactation status (used for RDA calculations)
• Schedule Information: Reminder times and frequency settings
• Food Photos: Images of food and supplement labels you scan (stored locally on your device)

Data Sent to Third Parties

• OpenAI API: Food and supplement label images are sent to OpenAI's GPT-4 Vision API for analysis. These images are processed according to OpenAI's privacy policy and are not used to train their models.
• NIH DSLD Database: Search queries for supplement information are sent to the National Institutes of Health Dietary Supplement Label Database.

2. How We Use Your Information

• Track Supplements: Store and manage your supplement intake
• Calculate RDA: Provide personalized Recommended Daily Allowances based on your demographics
• Generate Insights: Analyze your nutrient intake and provide health insights
• Send Reminders: Deliver local notifications for your supplement schedules
• AI Analysis: Process food and label photos to extract nutrition information

3. Data Storage and Security

• Local Storage: All your supplement data, dose history, and personal information are stored exclusively on your device using Apple's Core Data framework
• No Cloud Backup: We do not store your data on our servers or in the cloud
• Device Security: Your data is protected by your device's security features (passcode, biometric authentication)
• Data Deletion: Deleting the app removes all your data from your device

4. Third-Party Services

OpenAI (GPT-4 Vision)

When you use AI-powered features to scan food or supplement labels, images are sent to OpenAI for processing. OpenAI's privacy policy applies to this data. Images are not retained by OpenAI for model training.

NIH DSLD Database

Supplement searches are performed using the National Institutes of Health's Dietary Supplement Label Database. This is a public database and queries do not contain personal information.

Apple Services

• In-App Purchases: Managed by Apple's StoreKit. We do not have access to your payment information.
• Local Notifications: Delivered through Apple's notification system

Cuti-E Feedback & Anonymous Usage Analytics

Our app integrates the Cuti-E SDK for in-app feedback and optional anonymous usage analytics.

• Feedback: When you send feedback, your message and a pseudonymized device identifier are sent to our feedback service. No personal data beyond what you write is transmitted.
• Anonymous Usage Analytics (Opt-In): If you consent, the app sends a single anonymous activity ping per launch to help us understand how many users are active. This data consists solely of a hashed device identifier (SHA-256 of your device's vendor ID and the app bundle ID) and does not include any personal information, location data, or usage details.
• Consent: Analytics is disabled by default and only enabled with your explicit opt-in consent. You can change your preference at any time in the app under App Settings > Privacy.

5. Website Cookies and Tracking (Informasjonskapsler)

Our website (nutrieapp.com) uses cookies to improve your experience and understand how visitors use our site. We only use cookies with your explicit consent.

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us remember your preferences and analyze website traffic.

Cookies We Use

Strictly Necessary Cookies (No Consent Required)

• cookieConsent - Stores your cookie preference (accepted/declined)
  • Duration: Until you clear browser data
  • Purpose: Remember your cookie choice

Analytics Cookies (Requires Consent)

We use Google Tag Manager and Google Analytics to understand website traffic and improve user experience. These cookies are only activated if you click "Accept" on our cookie banner.

• _ga - Google Analytics identifier
  • Duration: 2 years
  • Purpose: Distinguish unique visitors
• _gid - Google Analytics identifier
  • Duration: 24 hours
  • Purpose: Distinguish unique visitors
• _gat - Google Analytics throttling
  • Duration: 1 minute
  • Purpose: Limit request rate

Third-Party Tracking

Google Analytics: We use Google Analytics (via Google Tag Manager) to collect anonymized data about:

• Pages visited
• Time spent on site
• Browser and device type
• Geographic location (country/city level)
• Referral source

Google Analytics data is anonymized and does not identify individual users. Data is governed by Google's Privacy Policy.

Your Cookie Choices

• Accept: Click "Accept" on the cookie banner to enable analytics cookies
• Decline: Click "Decline" to use the website without analytics tracking
• Change Your Mind: Clear cookies in your browser settings, then reload the page to see the banner again
• Browser Controls: Most browsers allow you to block or delete cookies in settings

How to Delete Cookies

Chrome: Settings → Privacy and Security → Clear browsing data → Cookies

Safari: Preferences → Privacy → Manage Website Data → Remove All

Firefox: Options → Privacy & Security → Cookies and Site Data → Clear Data

6. Your Rights and Control

In the App

• Access: All your data is accessible within the app
• Export: Premium users can export their data in JSON format
• Delete: Delete individual entries or all data through the app settings
• Control: Disable notifications in app settings or iOS Settings

Under GDPR (EU/EEA Users and Norwegian Users)

As the data controller, Invotek AS is responsible for your personal data processed in connection with the Nutri-E website. You have the following rights:

• Right of access (Art. 15): You may request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): You may request correction of inaccurate or incomplete personal data.
• Right to erasure (Art. 17): You may request deletion of your personal data where there is no compelling reason for its continued processing ("right to be forgotten").
• Right to data portability (Art. 20): You may request your personal data in a structured, commonly used, machine-readable format, and have it transferred to another controller where technically feasible.
• Right to object (Art. 21): You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at support@nutrieapp.com. We will respond within 30 days.

Right to Lodge a Complaint

If you believe your data has been processed in violation of applicable data protection law, you have the right to lodge a complaint with the Norwegian Data Protection Authority:

Datatilsynet
Website: www.datatilsynet.no
Email: postkasse@datatilsynet.no

7. Children's Privacy

Nutri-E is intended for users 18 years and older. We do not knowingly collect data from children under 18. If you are under 18, please do not use this app.

8. International Users

GDPR (EU/EEA Users)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to processing

CCPA (California Users)

California residents have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising CCPA rights

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Medical Disclaimer

Nutri-E is not a medical device and does not provide medical advice. The app is for informational and tracking purposes only. Consult with a healthcare professional before starting any supplement regimen.

11. Contact Us

If you have questions about this Privacy Policy or your data, or wish to exercise your data subject rights, please contact us:

• Company: Invotek AS
• Org.nr.: 931 930 354
• Address: Postboks 1 Bjørndal, 1214 Oslo, Norway
• Email: support@nutrieapp.com

12. Governing Law

This Privacy Policy is governed by the laws of Norway. For EU/EEA users, GDPR applies. For California users, CCPA applies.