nutricue-ai-site

NutriCue AI Privacy Policy

Last Updated: September 18, 2025

Introduction

Welcome to NutriCue AI (“we,” “our,” or “us”). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our mobile application to manage reminders.

Developer Information:
NutriCue AI is developed by Caesius Bay
Contact: caesiusbay@gmail.com
Location: United States
Backend Infrastructure: Railway (https://nutricue-backend-production.up.railway.app)

Information We Collect

Camera and Photo Library Access

NutriCue AI requests access to your device’s camera and photo library to capture images for creating visual reminders from photos. Images are processed on our backend server for AI analysis. We do not store or transmit images to external servers unless you explicitly use our AI image analysis feature.

AI Processing Data (Backend Proxy)

When you use our AI-powered features, we send the following data through our secure Railway backend to OpenAI’s services:

Text input for reminder creation and natural language processing
Processed image data for analysis via GPT-4o Vision
Conversation context to improve AI responses
Usage patterns for service optimization and cost control
Device authentication tokens for usage tracking and subscription validation

User-Provided Information

We collect information you voluntarily provide when using our app, such as:

Reminder details (titles, descriptions, schedules)
User preferences and settings
Chat conversations with our AI assistant
Subscription and payment information (processed through RevenueCat)

Notification Permissions

When you opt-in, we request notification permissions to send notifications for your reminders. These notifications are scheduled locally on your device based on your reminder settings.

Local Storage Data

We store the following information locally on your device:

All reminder data and schedules
User preferences and settings
AI conversation history
Subscription status and entitlements

How We Use Your Information

We use the information we collect to:

Provide AI-powered reminder creation and natural language processing
Schedule and deliver notifications for your reminders
Process images for reminder creation
Maintain conversation context for improved AI interactions
Track usage limits for free and premium tiers
Process subscription payments and manage entitlements

Data Storage and Security

Local Storage

Most data is stored locally on your device using secure SQLite databases and AsyncStorage. This includes:

All reminder and schedule data
User preferences and settings
Conversation history

External Services

We use the following third-party services:

OpenAI GPT-4o: For AI-powered text processing and image analysis via our secure backend
RevenueCat: For subscription management and payment processing
Expo Notifications: For local notification scheduling
Backend API: Our Node.js server for secure AI processing and authentication

Data Transmission

Data is only transmitted to external services when:

You actively use AI features (sent securely via HTTPS through our backend to OpenAI)
You make subscription purchases (processed through RevenueCat)
The app authenticates with our backend for AI services
The app checks for subscription status updates

Security Measures

We implement appropriate technical and organizational security measures to protect your personal data:

Backend API proxy to secure OpenAI API keys (never exposed in mobile app)
JWT authentication for secure user sessions
Express rate limiting to prevent API abuse
Local data encryption using device security features
Secure transmission protocols (HTTPS/TLS) for all communications
Limited data collection principles (data minimization)

Third-Party Services

OpenAI

When you use AI features, your text input and processed image data is sent through our secure backend to OpenAI’s GPT-4o API for natural language processing and image analysis. Our backend acts as a secure proxy, ensuring API keys are never exposed in the mobile app. This data is subject to OpenAI’s privacy policy and data usage terms.

RevenueCat

Subscription and payment information is processed through RevenueCat, which handles all payment transactions securely. We do not store credit card or payment details on our servers.

We do not sell your personal data to advertisers or other third parties. We only share data with the third-party services mentioned above and only as necessary to provide app functionality.

Your Privacy Rights

You have the right to:

Access: View all data stored locally on your device through the app interface
Rectification: Edit or correct any reminder information at any time
Erasure: Delete individual reminders or clear all data through app settings
Data Portability: Export your reminder data (feature planned for future release)
Withdraw Consent: Disable AI features and use offline mode at any time
Notification Control: Enable or disable notifications in device or app settings
Subscription Management: Cancel subscriptions through your device’s app store
Third-Party Data: Request deletion of data sent to OpenAI or RevenueCat by contacting us
Complete Removal: Uninstall the app to remove all local data from your device

Exercising Your Rights

To exercise any of these rights or if you have questions about your data, please contact us at caesiusbay@gmail.com. We will respond to your request within 30 days.

Children’s Privacy (COPPA Compliance)

Our app is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have collected information from your child, please contact us immediately at caesiusbay@gmail.com and we will delete such information from our records.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes:

We will update the “Last Updated” date at the top of this policy
For material changes, we will provide notice through the app or via email
Continued use of the app after changes constitutes acceptance of the updated policy

Contact Us

If you have questions about this privacy policy or our practices, please contact us at: caesiusbay@gmail.com

Offline Mode

NutriCue AI includes an offline mode that provides basic reminder functionality without sending data to external AI services. When offline mode is enabled:

No data is sent to OpenAI or other external AI services
Reminders are created using local pattern matching
All functionality remains on your device
You can switch between online and offline modes at any time

Data Retention

We retain your information for as long as necessary to provide our services:

Local Data: Stored on your device until you delete the app or manually clear data
AI Service Data: Processed through our secure backend and subject to OpenAI’s data retention policies
Subscription Data: Retained by RevenueCat according to their policies and legal requirements

International Data Transfers

When using AI features, your data is first processed by our backend servers and then sent to OpenAI’s servers, which may be located outside your country of residence. Our backend acts as a secure intermediary to protect your data during transmission. This processing is subject to OpenAI’s privacy policy and security measures. We ensure that any international transfers comply with applicable data protection laws.

Important Notice: NutriCue AI is designed as a general purpose reminder app. It is not intended to handle medications, prescriptions, or provide medical advice.

California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

Right to know what personal information is collected and how it’s used
Right to delete personal information (subject to certain exceptions)
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising privacy rights

To exercise these rights, contact us at caesiusbay@gmail.com.

For questions about this privacy policy, please contact: caesiusbay@gmail.com