Privacy Policy — NutriEye

Last updated: June 11, 2026 · Versiunea în română

NutriEye is a mobile app for iOS and Android that analyzes food product labels using artificial intelligence and provides an indicative harmfulness score. This policy explains what data we process, why, and your rights under Regulation (EU) 2016/679 (GDPR).

1. Data Controller

Alexandru Ionuț Grădeanu, Voluntari, Ilfov, Romania.
Contact: alexandru.gradeanu@gmail.com

2. Data We Collect

Category	Data	Purpose	Legal basis
Account	Email address, name and profile photo from the Google account used to sign in	Creating and managing your in-app account	Performance of contract (Art. 6(1)(b) GDPR)
Scans	Analysis result (score, identified risks, recommendation, scan date)	Your scan history in the app	Performance of contract (Art. 6(1)(b) GDPR)
Marketing (optional)	Your consent for marketing communications	Sending app news, only if you opted in	Consent (Art. 6(1)(a) GDPR)

3. Label Photos

The label photo is transmitted encrypted (HTTPS) to our servers and then to Anthropic PBC for analysis. The photo is not stored — neither on our servers nor in the database. Only the text result of the analysis is kept. Please do not include people or personal data in the photos.

4. Where Data Is Processed

Google Firebase (Google Ireland Ltd.) — authentication and database, hosted in europe-west1 (Belgium, EU).
Anthropic PBC (USA) — image analysis with the Claude AI model. Transfers rely on Standard Contractual Clauses / the EU-U.S. Data Privacy Framework. Under Anthropic's API policy, submitted data is not used for model training.

5. Data Retention

Account data and scan history are kept while your account is active. Upon account deletion, data is permanently erased within 30 days.

6. Data Sharing

We do not sell or share your data with third parties for commercial purposes. The only recipients are the infrastructure providers listed in section 4, acting as processors.

7. Your Rights

right of access to your data;
right to rectification;
right to erasure ("right to be forgotten");
right to restriction of processing;
right to data portability;
right to object;
right to withdraw marketing consent at any time;
right to lodge a complaint with ANSPDCP (the Romanian supervisory authority) or your local data protection authority.

You can delete your account and all data directly in the app, from the Account → Delete account menu (immediate and permanent). To exercise any other right, write to alexandru.gradeanu@gmail.com. We respond within 30 days.

8. Children

The app is not directed at children under 16 and we do not knowingly collect their data.

9. Note on Analysis Results

Scores and recommendations provided by NutriEye are indicative, generated by an AI model, and do not constitute medical or nutritional advice. Consult a specialist for health decisions.

10. Changes to This Policy

We may update this policy; the current version is always published at this address, with the last-updated date shown above.