NutriLensPrivacy Policy
Last updated: 4 October 2026 · Effective from the same date.
This Policy was originally written in Brazilian Portuguese. In case of conflict between versions, the Portuguese version prevails.
1. Who the controller is
The controller of personal data handled by the NutriLens app and this website is João José de Oliveira Leal, an individual trading as MyFlows AI, based in Brazil.
Data protection officer and contact channel for any privacy matter: [email protected].
This Policy explains, in plain language, what data we handle, why, who we share it with and what your rights are, under Brazil's General Data Protection Law (Law 13,709/2018, “LGPD”).
2. Quick summary
- We do not sell your data. Ever.
- Your meal photos are not stored on our servers. They are sent for analysis, processed and discarded. The image stays on your device only.
- We handle health data (weight, height, goal, eating history). It is sensitive and handled on the basis of your consent.
- To analyse your meals, content is sent to an artificial intelligence provider outside Brazil.
- You can delete your account and all your data at any time from the app. Deletion is immediate.
- This website uses no cookies and no analytics tools.
3. Data we handle
| Category | What it includes | Source |
|---|---|---|
| Registration | Name, email, phone (optional) and password. The password is stored only as a cryptographic digest (scrypt), never in readable form. If you sign in with Google or Apple, we receive your name, email and an account identifier from that platform. | You |
| Profile and health | Weight, height, age, sex, physical activity level, goal and target weight. From these we calculate and store BMI and its classification, basal metabolic rate, daily energy expenditure and your calorie, protein, carbohydrate and fat targets. | You |
| Meal logs | Meal name and type, portion, calories, protein, carbohydrate, fat, fibre, sodium, sugar, saturated fat, identified items, description, date and time. | Generated by the analysis, confirmed by you |
| Water and weight | Water volume logged per day and weight history over time. | You |
| Content submitted for analysis | Photo, voice recording or written description of the meal. See section 5. | You |
| Assistant conversations | The messages you write to the assistant and the generated replies, along with the profile and log context needed to answer. | You and the system |
| Usage and limits | A record of each analysis performed, with type and date, to apply your plan's daily limits and video bonuses. | System |
| Subscription | Plan, status, start and expiry dates, platform and transaction identifiers provided by the store. We neither receive nor store card details. | App Store / Google Play |
| Technical | Push notification token, platform (iOS or Android), app version, device language and time zone. Our servers generate access logs containing IP address and timestamp, as any internet service does. | Device |
| Cancellation | If you choose to tell us, your reason for cancelling a subscription and a free-text comment. | You, optionally |
What we do not collect: we do not ask for identity documents, and we do not access your calendar, your photo library in general (only the image you pick for analysis), your contacts, your messages or your precise location.
4. Sensitive health data
Weight, height, BMI, body goal, eating history and water intake are, under the LGPD (art. 5, II), sensitive personal data, because they concern your health.
We handle this data on the basis of your specific and highlighted consent (art. 11, I), given when you complete your profile and start logging meals. That consent is a condition for the app to work: without weight, height, age and goal there is no way to calculate targets, which is the whole point of the Service.
You may withdraw consent at any time, by deleting your account in the app or writing to our contact address. Withdrawal ends the processing and, in practice, makes the Service unusable.
This data is not used for advertising, is not shared with advertisers and does not feed commercial profiles.
5. Meal photos, voice and text
This is the point that raises the most questions, so it deserves detail.
When you photograph a plate, the app shrinks the image and sends it to our server, which forwards it to an artificial intelligence provider to identify the foods and estimate nutritional values. The same applies to voice recordings and written descriptions.
- The image, the audio and the text are used for the analysis and are not stored in our databases. What gets saved is the result: the identified foods and their nutritional values.
- The photo stays on your device, and the app keeps only a local reference to it, so it can be displayed in your history on that same device. That reference does not let us, or anyone else, access the image.
- If you change device or delete the photo from your gallery, the image stops appearing in your history — because it was never on the server.
- Submitted content always travels over an encrypted connection.
- The artificial intelligence provider processes the content to answer the request and is subject to its own terms and technical retention periods. We do not authorise use of your content for model training.
For that reason, and out of respect for others, avoid sending photos showing people, documents or information you would rather not transmit. Photograph the plate.
6. Purposes and legal bases
| What for | Legal basis (LGPD) |
|---|---|
| Creating and maintaining your account, authenticating access and password recovery | Performance of a contract (art. 7, V) |
| Analysing meals and calculating nutritional values | Performance of a contract (art. 7, V) and consent for health data (art. 11, I) |
| Calculating calorie, macro and water targets from your profile | Consent (art. 11, I) |
| Storing your meal, weight and water history | Consent (art. 11, I) |
| Answering in the chat assistant | Performance of a contract (art. 7, V) |
| Applying daily limits, preventing fraud and abuse, protecting the infrastructure | Legitimate interests (art. 7, IX) |
| Processing and validating subscriptions | Performance of a contract (art. 7, V) |
| Sending operational emails: verification code and password reset | Performance of a contract (art. 7, V) |
| Sending reminder notifications you set up yourself | Consent (art. 7, I), revocable in settings |
| Showing adverts on the free plan | Legitimate interests (art. 7, IX), with the controls in section 9 |
| Keeping a record of account deletion requests | Legal obligation and exercise of rights (art. 7, II and VI) |
| Server access logs | Legal obligation (art. 7, II; Internet Civil Framework, art. 15) |
7. Who we share with
We share data only with the suppliers needed to run the Service, and only as far as necessary. We do not sell, rent or transfer your data for third parties' commercial purposes.
| Who | What for | What they receive |
|---|---|---|
| Artificial intelligence provider (OpenRouter, routing to third-party models including Google's) | Analysing the meal photo, audio or text, and answering in the assistant | The content submitted for analysis and, in the assistant, the context needed to answer. Not your name, email or phone. |
| Google (Firebase Cloud Messaging) | Delivering push notifications on Android | Device token and notification content |
| Apple (APNs) | Delivering push notifications on iPhone | Device token and notification content |
| Google (AdMob) | Showing adverts to free-plan users | The device advertising identifier and technical display data. We do not send it your health, meal or registration data. |
| Apple and Google Play | Selling the subscription, billing and validating the receipt | Transaction and subscription identifiers. Payment happens entirely with them. |
| Google and Apple (social sign-in) | Authenticating you, if you choose those accounts | Identity confirmation; we receive name, email and an identifier |
| Email provider | Sending verification and password reset codes | Your email address and the message content |
| Hosting and database provider | Running the servers and storing Service data | The data described in section 3, on infrastructure under our control |
We may also share data where there is a legal obligation, court order or request from a competent authority, or to exercise and defend rights in legal proceedings. If the Service is transferred to another owner, you will be told in advance and this Policy will continue to apply until formally changed.
8. International transfers
Part of the processing happens outside Brazil: the artificial intelligence provider, the app stores, the notification services and the ad network run on servers abroad, mainly in the United States and the European Union.
These transfers rely on article 33 of the LGPD, for the performance of our contract with you and under the contractual data protection commitments offered by those suppliers, including standard contractual clauses where applicable.
9. Advertising
On the free plan we show adverts through Google AdMob. For that, your device provides AdMob with an advertising identifier, which is not your name or email and can be reset by you.
We never send the ad network your health data, your meals, your weight, your goal or your registration details.
You can limit personalised advertising:
- Android: Settings → Google → Ads → “Opt out of Ads Personalisation”, or delete the advertising ID.
- iPhone: Settings → Privacy & Security → Tracking, turning off permission for NutriLens; and Settings → Privacy & Security → Apple Advertising.
- Subscribing to any paid plan removes adverts entirely.
Processing carried out by Google as an independent controller is governed by Google's own privacy policy.
10. How long we keep it
- Account, profile, meal, weight and water data: for as long as your account exists.
- Photos, audio and text submitted for analysis: not stored; they exist only during processing.
- Verification and password reset codes: expire after 15 minutes.
- Usage records for limit counting: kept for as long as needed for quota control and abuse prevention.
- Subscription and transaction data: for the period required by tax law and by the stores, even after the account is closed, kept separately.
- Server access logs: for the period set by article 15 of the Internet Civil Framework.
- Record of the deletion request: kept indefinitely, containing only date, time and a SHA-256 digest of the email — never the address itself. Its sole purpose is to show that deletion was requested and carried out.
10.1. How deletion works
When you delete your account in the app, we immediately erase your registration and, by cascade, your meal, weight, water, plan, notification token, subscription and pending code records. The action is irreversible and there is no recovery window.
Remember that deleting the account does not cancel an active subscription: cancellation is done in the App Store or Google Play.
11. Security
We apply technical and administrative measures proportionate to the size of the Service:
- Communication between app and servers always over HTTPS/TLS.
- Passwords stored only as a salted scrypt digest, never in readable form. Not even we can read your password.
- Access to your information authenticated by an expiring JWT token, with every request validated against the owner of the data.
- Verification codes with short validity and an attempt limit.
- On-device data kept in the app's own storage, isolated from other apps by the operating system.
- Restricted and logged administrative access.
No system is absolutely secure. If an incident occurs that could pose significant risk or harm to you, we will notify you and Brazil's National Data Protection Authority, under article 48 of the LGPD.
You have a part to play too: use a strong, unique password, do not share your credentials and keep your device's system up to date.
12. Your rights
The LGPD (art. 18) guarantees you, at any time and free of charge:
- Confirmation that we process your data and access to it;
- Correction of incomplete, inaccurate or outdated data;
- Anonymisation, blocking or deletion of unnecessary or excessive data, or data processed unlawfully;
- Portability to another provider, on request;
- Deletion of data processed on the basis of consent;
- Information about who we share your data with;
- Information about your option not to consent and what that means;
- Withdrawal of consent;
- Objection to processing based on legitimate interests;
- Review of automated decisions affecting your interests.
12.1. How to exercise them
Most of this you can do inside the app: editing your profile corrects data; deleting your account, on the profile screen, erases everything immediately.
For anything else, write to [email protected] from your registered email address. We reply within 15 calendar days. We may ask for additional information to confirm your identity first — that is a safeguard against someone impersonating you.
You may also complain to Brazil's National Data Protection Authority (ANPD).
12.2. Automated decisions
The Service uses automated processing to identify foods, estimate nutritional values and calculate your targets. These decisions produce no legal effects and do not restrict your rights — you can adjust portions before saving and edit your profile at any time. If you want a result explained or reviewed, write to our contact address.
13. Children and teenagers
NutriLens is intended for people aged 18 and over and is not intended for children under 13. Teenagers aged 13 to 17 should use it only with the consent and supervision of a parent or legal guardian, and always with professional health support, given the nature of the content.
We do not knowingly collect data from children under 13. If we find that we have, we will delete it. Guardians who suspect this should write to [email protected] and we will act promptly.
14. Cookies on this site
This website uses no cookies, has no analytics tools, no tracking pixels and builds no visitor profiles.
The only third-party request is loading the typefaces from Google Fonts, which, being a network request, exposes your IP address to Google. No cookie is involved and we do not use that request to identify you.
The server hosting the site generates technical access logs, as is standard on the internet.
15. Changes to this Policy
We may update this Policy to reflect changes in the Service, in suppliers or in the law. The date of the last update always appears at the top of the page.
Material changes — particularly new purposes, new sharing or a change of legal basis — will be notified at least 30 days in advance, by email or in-app notice. Where the law requires it, we will ask for your consent again.
16. Contact
Any question, request or complaint about privacy:
João José de Oliveira Leal — MyFlows AI
Data protection officer
Email: [email protected]
Website: nutrilensapp.myflowsai.com