Privacy Policy

Effective: 4 October 2026 · Last updated: 4 October 2026

In short: No account is required. Your meals, water, weight, fasting and profile data stay on your phone. Only what is needed for a specific action reaches our server (for example, the plate photo you want analysed), and your photo is not stored. We use no advertising, tracking or analytics tools, and we never sell your data.

1. Who we are

NutriTR is developed and published by Ziya Sarper Baykara, the data controller under Turkey's Personal Data Protection Law No. 6698 (KVKK). Contact: [email protected]

2. Data that stays on your phone

The following is stored only on your device, in the app's own storage. It is not sent to our server and not synced to iCloud:

Profile: height, weight, date of birth, sex, activity level, goals
Meal logs and nutrition values, water and weight logs, fasting sessions
Favourite and recent foods, daily summaries and insights
App settings (language, reminders)

Deleting the app deletes all of this from your device. Reminders are local notifications created on your device.

3. Data sent to our server

Our server runs on a computer owned by the developer in Turkey. The AI models run on the same computer; your data is not sent to any external AI company.

When	What is sent	Retention
Plate photo analysis	The photo (downscaled in the app) and any components you correct	The photo is not stored; it is processed in memory only. The result (dish name, components, nutrition values, model output) and an irreversible hash of the photo are kept for 30 days so you can edit the analysis, then deleted.
Food search, barcode scan, recipes	Search text or barcode number	Not stored (only in the server logs below)
Insight of the day	That day's summary values: calories, protein and water vs. goals, number of meals, time of day; if read from Apple Health: steps, active calories, sleep duration, resting heart rate, heart rate variability (HRV), walking speed; app language	Not stored. Used only to generate the text, and only sent if you have given explicit consent.
Every request	IP address, time, requested address (including search text)	Kept in server logs with a shortened IP address; deleted after 30 days.

None of this includes your name, email address or phone number, and there is no account we could link it to.

4. Apple Health (HealthKit)

With your permission, the app reads steps, active and resting energy, sleep, resting heart rate, heart rate variability, walking speed and walking workouts from Apple Health. If you turn on “Write to Apple Health” in Profile, your meals (calories, macros, fibre, sugar, sodium), water and weight are written to Apple Health, and entries you delete in NutriTR are deleted there too.

Apple Health data is never used for advertising, marketing or data mining, never shared with third parties and never stored in iCloud. Only summary values are sent to our server to generate the insight of the day, as described above, and they are not stored. You can change these permissions at any time in Settings → Health → Data Access & Devices → NutriTR.

5. Camera and photos

The camera and photo library are used only to analyse the plate photo you choose and to scan barcodes. Barcodes are read on your device; only the barcode number is sent.

6. Purposes and legal bases

Providing plate analysis, food search and insights — performance of a contract (KVKK Art. 5/2-c)
Processing health-related data (e.g. sleep, heart rate, nutrition) — your explicit consent (KVKK Art. 6). It is optional, off by default and not required for the rest of the service: you give it on the first-launch privacy screen or in Profile → Consent for the insight of the day, and can withdraw it there at any time. Without it, nothing is sent for the insight
Security, abuse prevention and debugging (server logs, rate limits) — legitimate interest (KVKK Art. 5/2-f)

7. Service providers and transfers

We do not sell your data or share it for advertising. Access to our server goes through Cloudflare, Inc. (USA), which securely relays internet traffic and processes data such as IP addresses and request content only for that purpose. This may count as a transfer abroad under KVKK Art. 9. The app is distributed by Apple (App Store, TestFlight), whose own privacy policy applies.

Nutrition values come from open data sources such as Open Food Facts and the U.S. Department of Agriculture (USDA). None of your data is sent to them.

8. Your rights

You may ask whether your data is processed, request information, correction or deletion, learn who it was transferred to, object, and claim compensation (KVKK Art. 11; similar rights apply under other privacy laws such as the GDPR). Write to [email protected]; we reply within 30 days. As there are no accounts, we may need the time of an analysis or similar details to find related server records.

9. Children

NutriTR is not designed for children under 16 and does not knowingly collect data from them.

10. Health notice

NutriTR is for general information only and is not a substitute for medical diagnosis, treatment or advice from a dietitian. Calorie and nutrition estimates are approximate. If you have diabetes, are pregnant or breastfeeding, have an eating disorder or another health condition, talk to your doctor before making changes.

11. Changes

When we update this policy we change the effective date and announce significant changes in the app.