Privacy policy

Last updated: 30 October 2026

This policy explains what Nutrition Cognition collects about you, what we do with it, who we share it with, how long we keep it, and the choices you have. It covers the iPhone app, the Apple Watch app and widgets, the web app, and the connector that lets Claude, ChatGPT and other AI apps use your account.

1. Who we are

Nutrition Cognition is made by Bealach Nua OÜ ("we", "us"). We're responsible for your personal data in Nutrition Cognition (the data controller). You can reach us at [email protected].

2. What we collect

Your account: your email address and how you sign in (a password, Sign in with Apple, or Sign in with Google). We never see your password in plain text.
Your profile: your name, birth date, sex, height, weight, units, country, time zone, and a profile photo if you add one.
What you log: the food you log and any notes, the foods, recipes, saved meals and lists you make, your weights, your goals and plan, and photos of food you add.
Apple Health (iPhone, only if you allow it): we read your weight, active and resting energy, dietary energy, and your birth date, sex and height; we write each food you log, with its energy and nutrients. What we read is stored with your account.
Friends: your friends and friend requests, the items you share with them, and your feed (what you heart or hide).
Pro: a record of your App Store subscription and its status, from Apple, and whether you've had the free month of Pro. Apple handles payment; we never see your card.
App diagnostics: events from the iPhone app, the Watch app and widgets, so we can find and fix problems: a device identifier, the platform, app and system versions, a session identifier, the event's name and time, and your time zone offset. They never include what you type.
Server logs: when an app or an AI app calls our servers, we log the request: the time, the address it came from (your IP address, or the AI app's server's), the app's user agent, what was called, and how it went.
When you connect an AI app: see Claude and ChatGPT.

Health data. What you eat, your weight, and what Apple Health holds can be health data, which the law treats as sensitive. We use it only to give you the service you ask for, with your explicit consent: you give it when you log something or let the app read Apple Health, and you can take it back by deleting what you've logged, turning off Apple Health access in your iPhone's Settings, or deleting your account.

3. How we use it

To run Nutrition Cognition (our contract with you): your log, its totals and charts, your goals and plan, syncing with Apple Health, sharing with the friends you choose, Pro, and the connector.
Health data only as above, with your explicit consent.
To keep it secure and working (our legitimate interest): rate limits, server logs, and finding and fixing problems.
To understand how it's used, and improve it (our legitimate interest): which features are used and how, from the diagnostics above and a record of the changes made in your account (what kind of change, through which app; never your words).
To answer you when you contact us.
When the law requires it.

We don't sell your data, show ads, or use advertising, analytics or crash-reporting services from other companies in our apps.

4. Claude and ChatGPT

You can connect an AI app such as Claude or ChatGPT to your Nutrition Cognition account, so it can read your log and log food for you. Nothing is shared with an AI app unless you connect it.

What an AI app can read and change

A connected AI app acts as you, on your account only:

It can read your log for any day (meals, nutrients, totals against your goals, and calories burned from Apple Health), what you've logged recently, your foods, recipes, saved meals and lists (and items friends have shared with you), your weight and calorie history, and your goals.
It can change your log (log, edit and delete entries), your foods, recipes, saved meals and lists, your weights, and your goals.
It can't see your email address, password, friends, feed, notifications or subscription, or delete your account.

How connecting works

You connect from the AI app. It sends you to a sign-in page on api.nutritioncognition.app, where you sign in to Nutrition Cognition and choose Allow or Deny. The page is run by Bealach Nua's accounts service, which works only through Nutrition Cognition's own address. The AI app never sees your password: it gets a key that works for 15 minutes at a time and is renewed while you stay connected. If you leave a connection unused for 60 days, it ends. If you allow the same AI app again while it's still connected, you aren't asked a second time.

What we keep about it, and for how long

The connection itself: which AI app you allowed, when, and when it last renewed its access. We keep this until you delete your account; a disconnected one is marked as ended.
A record of each request it makes: which action, when, whether it worked, its user agent, and the AI model's name and settings if the AI app tells us. Kept for 90 days.
A record of each change it makes in your account: what kind of change (for example, "an entry was logged"), through which AI app, and the AI model it named, never your words. Kept as long as you have your account.
Server logs of its requests, for 30 days.

We don't keep your conversation with the AI app. What it saves for you, such as an entry or a food, is stored like anything you save yourself, marked as made by that AI app.

What Claude or ChatGPT does with your conversation, including what our connector tells it, is covered by Anthropic's or OpenAI's own terms and privacy policy, not this one. For example, ChatGPT may use it to train models, depending on your settings there.

How to disconnect

In the Nutrition Cognition app or on the web, go to Settings → Claude and ChatGPT and choose Revoke: the AI app can't renew its access, and loses it within 15 minutes. You can also disconnect in Claude or ChatGPT (how). Disconnecting doesn't delete what the AI app logged or saved for you; that's part of your account, and you can change or delete it in Nutrition Cognition.

We use these companies to run Nutrition Cognition. They handle your data for us, under our instructions and their data protection terms:

Supabase: our database, sign-in and file storage.
Google Cloud: our servers and their logs.
Cloudflare: our network and websites.

We also share your data:

With Apple, for the App Store (Pro), Apple Health if you allow it, and Sign in with Apple if you use it; and with Google for Sign in with Google if you use it.
With the AI apps you connect, as described above.
With the friends you choose: your name, profile photo, the items you share with them, and your feed.
When the law requires it, or to protect people's safety or our rights.

The web app loads its fonts from Google Fonts, so your browser's address reaches Google when you use it.

6. Where it's kept

Your data is stored in Stockholm, Sweden: our database with Supabase and our servers with Google Cloud. Logs are kept by Google Cloud, and Cloudflare handles traffic around the world. Where a provider processes data outside the European Economic Area, it does so under its data protection terms, including the EU's standard contractual clauses where they're needed.

7. How long we keep it

Your account, profile, log and everything you save: until you delete it, or delete your account.
The record of changes made in your account, and your connections to AI apps: until you delete your account.
The record of an AI app's requests: 90 days.
App diagnostics: 90 days.
Server logs: 30 days.
Rate limits and sign-in steps (codes, short-lived requests): minutes to days.

Backups of our database may hold your data for a short time after you delete it.

8. Your choices and rights

See, change and delete what you've logged and your profile in the app at any time.
Turn off Apple Health access in your iPhone's Settings, and disconnect AI apps in Settings → Claude and ChatGPT.
Delete your account: email [email protected] from your account's address, and we'll delete it and its data within 30 days.

You also have the right to access your data, have it corrected or deleted, receive a copy of it to take elsewhere, object to or restrict how we use it, and withdraw your consent at any time. Email us to use any of them. If you're unhappy with how we handle your data, you can complain to a data protection authority, such as the one where you live.

9. Children

Nutrition Cognition isn't for children under 13, and we don't knowingly collect their data. If you're under the age at which you can agree to this yourself where you live, a parent or guardian needs to agree for you. If you think a child under 13 has an account, tell us and we'll delete it.

10. Security

Everything travels encrypted. Sign-in is handled by Supabase, so we never store your password. The keys AI apps use are stored only in a scrambled (hashed) form, expire, and can be revoked. Our services that handle sign-in can't be reached from the internet except through our own front door. Access to your data within the company is limited to what's needed to run the service.

11. Changes to this policy

When we change this policy we update this page and its date. If a change matters, we'll tell you in the app or by email before it takes effect.

12. Contact

Questions about your privacy, or a request about your data: [email protected].