Privacy Policy
This policy explains what data the Nutri app ("the app", "we") collects, why, who processes it and how you control it. The app is operated by Marshall Relay Limited. Contact: support@appmarshall.com.
The short version: there is no sign-up and we never ask for your name, e-mail or phone number. Your food diary is linked only to a random identifier created when you first open the app. Food photos are sent to our AI provider for recognition only after you agree to it, and the original photo is deleted within 30 minutes. You can delete everything at any time in Profile → Delete all data.
1. Data we process
- App identifier. A random device identifier and access token created by our server on first launch. It is not linked to your Apple Account, name or contacts.
- Food photos you take or choose in the app. The photo is resized and sent to our server and to our AI provider for analysis. The resized original is kept on our server for at most 30 minutes (so you can clarify the result) and then deleted automatically. If "Keep thumbnails in the diary" is on, a small preview (up to 512 px) is stored with the diary entry until you delete that entry or all your data.
- Food descriptions and clarifications you type or dictate. Voice input is converted to text by Apple's speech recognition (on your device when supported); we receive only the text, never audio.
- Diary data: meals, times, estimated calories and nutrients, products scanned by barcode.
- Profile and weight: sex, age, height, weight, target weight, activity level and goal, and the weight entries you log. This is health-related data; we process it only with your consent and only to calculate your targets, forecasts and insights.
- Questions to the AI nutritionist (Premium) and a summary of your diary numbers needed to answer them. The chat itself is kept on your device; our server does not store chat history.
- Purchases: App Store transaction details (product, transaction identifiers, expiry date) needed to unlock Premium. Payments are handled by Apple; we never see your card details.
- Technical data: app version, language, time zone offset, and IP addresses in server logs, used for security and abuse prevention. Server logs are kept for up to 30 days.
2. Why we use it
- To recognize meals, estimate calories and nutrients, keep your diary and show your targets, forecasts and insights (performance of the service you asked for).
- To process health-related data (profile, weight, diary) — on the basis of your explicit consent, given in the app and revocable at any time.
- To unlock and restore Premium purchases.
- To keep the service secure and prevent abuse (legitimate interest).
- To improve recognition — only if you switch on "Help improve recognition" (off by default). Your corrections may then be used to evaluate and tune our food database and prompts. They are never sold.
We do not show ads, do not sell or rent personal data, do not use third-party advertising or analytics SDKs and do not track you across other companies' apps or websites.
3. Who processes data on our behalf
- Anthropic PBC (USA) — the AI model that recognizes food in photos and descriptions and answers the AI nutritionist questions. It receives the photo or text you submit and, for the nutritionist, a summary of your diary numbers. Under its commercial terms Anthropic does not use this data to train its models.
- Our hosting provider — runs the server and database where your diary is stored.
- Apple — App Store payments and speech recognition.
- Open Food Facts — when you scan a barcode, our server looks up the barcode number (no personal data) in this open database.
Data may be processed outside your country, including in the European Union and the United States. Where the law requires it, transfers are covered by standard contractual clauses or equivalent safeguards.
4. How long we keep it
- Original photos: deleted automatically within 30 minutes of analysis.
- Diary, profile, weight entries and thumbnails: until you delete them, or until you use "Delete all data".
- Analysis records (recognized dishes, your descriptions and corrections): until you use "Delete all data".
- Server logs: up to 30 days.
5. Your choices and rights
- Delete everything: Profile → Delete all data erases your diary, profile, weights, photos, thumbnails and purchase records from our server immediately. This cannot be undone.
- Withdraw consent: turn off "AI analysis via Anthropic (Claude)" in Profile → Data & privacy. Analysis stops; barcode logging and your existing diary keep working.
- Thumbnails: turn off "Keep thumbnails in the diary" to stop storing previews of new photos.
- You may ask us for a copy of your data, its correction or deletion, or object to processing, by e-mail to support@appmarshall.com. Include the app identifier shown at the bottom of the Profile screen so we can find your data. Depending on where you live you may also complain to your data protection authority.
6. Children
The app is intended for people aged 16 and over. We do not knowingly process data of younger children.
7. Health information
Nutri is a general wellness tool, not a medical device. Calorie and nutrient values are AI estimates with a range of uncertainty. The app does not diagnose, treat or prevent any condition. Talk to a doctor or a registered dietitian before making significant changes to your diet, especially if you have a medical condition, are pregnant or breastfeeding, or take medication.
8. Changes
We will update this page when our practices change and change the date above. Significant changes will also be shown in the app.