Effective date: 2026-09-02 Last updated: 2026-07-14
Nourish ("Nourish", the "App") is operated by PiziZC, an individual developer ("we", "us", "our"). This Privacy Policy explains what data the App processes, why, where it is stored, who it is shared with, and the choices and rights you have. By using Nourish you agree to this Policy. If you do not agree, please do not use the App.
Contact: fjrun@zilch-tokyo.co.jp
1. What Nourish Is
Nourish helps you record meals, activity, body measurements, and goals; import data from Apple Health; and receive AI-assisted nutrition and activity estimates. Nourish also learns a personalized estimate of your energy expenditure from your logged intake and weight trend.
Nourish is a wellness and self-tracking tool. It is not a medical device and does not provide medical, diagnostic, nutritional-therapy, or treatment advice. See our separate Health & Medical Disclaimer and AI Disclaimer.
2. Data We Process
Depending on how you use the App, we may process:
Account data — authentication identifiers, your email address or the account identifier from your sign-in method (Apple, Google, or email/password), display name, and session state. If you use email/password sign-in, your credentials are handled by Supabase Auth; we do not store your password in plaintext.
Food records — meal time, food names, quantities, calories, macronutrients, notes, one-sentence descriptions, and any photos you choose to submit for AI recognition.
Activity records — activity names, estimated or manually entered calories, source, duration, distance, steps, notes, and date.
Body & goal records — height, weight, age, sex selection, body-fat percentage, waist, goal type, target weight, activity level, and nutrition targets.
Apple Health data (only with your permission) — active energy, resting/basal energy, step count, walking/running distance, body mass, body-fat percentage, waist circumference, individual workout records, and sleep records if you separately opt in. On first connection Nourish reads up to approximately 90 days of body history and individual workout records, plus 30 days of daily energy/activity summaries. It reads approximately 14 nights of sleep history only after you separately enable sleep on the Apple Health screen. Thereafter it reads recent data. Nourish only reads from Apple Health and does not write any data back.
AI usage metadata — AI feature type, daily usage counters and limits, timestamps, and service status, used to control cost and prevent abuse.
Subscription state — plan, entitlement source and identifier, expiration, and purchase/restore status. We never receive or store your payment-card number.
Diagnostics & monitoring — crash reports, error and request-status information, and basic device/technical context used to investigate failures.
We do not intentionally collect precise location, contacts, browsing history, or advertising identifiers.
3. How Health Data Is Used (Apple Health)
Apple Health access is optional and must be authorized by you in the system permission sheet.
We use Health data solely to reduce manual entry, use body and activity records to calibrate your energy-expenditure estimate, avoid double-counting activity, and display trends and restrained nutrition/recovery context inside the App. Sleep records do not increase the confidence of the energy-expenditure calibration and are not used as a medical diagnosis or sleep-quality score.
Sleep access has a separate optional control. Disabling it stops Nourish from requesting sleep data and clears the App's on-device sleep cache; it does not delete the source records in Apple Health.
Sleep records are stored only on this device and are included in the local data export. They are not currently backed up to Supabase or sent to Gemini, the Cloudflare AI gateway, or Sentry.
We do not use Apple Health data for advertising or marketing, and we do not sell it, share it with data brokers, or use it for any purpose unrelated to the App's health and fitness features.
You can revoke Health access at any time in iOS Settings → Health → Data Access & Devices → Nourish.
4. AI Processing
When you use AI meal (text or image) or activity estimation, the content you submit is sent through our server-side gateway (a Cloudflare Worker) to our AI provider, Google (Gemini API), which returns an estimate. Please avoid submitting content you do not want processed for this purpose. AI results may be inaccurate; you can edit them before saving, and manual entry is always available. See the AI Disclaimer.
5. Where Data Is Stored
On your device — if you do not sign in, your core records stay on your device. Optional sleep records remain on this device whether or not you sign in.
Cloud backup (Supabase) — after you sign in, meal, activity, body, goal, and other supported records can be backed up and associated with your account; sleep records are not currently uploaded. For records that originated in Apple Health, the backup also includes that record's Apple Health sample identifier and source name (for example, the name of a scale or app), used to avoid importing the same entry twice.
AI gateway (Cloudflare Workers) — routes AI requests so provider API keys stay off the device and validates your access token and usage before calling the AI provider.
Subscriptions (Apple App Store & RevenueCat) — purchase and entitlement information.
Apple Health — remains governed by Apple Health permissions on your device.
6. Service Providers (Sub-processors)
We rely on the following providers, who process data only to operate, secure, and support the App:
Where GDPR applies, we process data to perform our contract with you (providing the App's features), for our legitimate interests (security, abuse prevention, service reliability), on the basis of your consent (Apple Health access; submitting content to AI), and to meet legal obligations. You may withdraw consent at any time.
8. International Transfers
We operate from Japan and use providers that may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards (such as standard contractual clauses or an adequacy decision).
9. Your Choices & Rights
Within the App's "导出与删除" (Export & Delete) you can:
Export your records;
Clear local data on this device; and
Delete your account, which removes your authentication user and cloud app data (subject to minimal audit/legal retention described below).
Depending on your jurisdiction you may also have rights to access, correct, restrict, or object to processing, and to data portability. To exercise these, contact us at the email above. You can revoke Apple Health access in iOS Settings at any time.
10. Data Retention
We keep records while your account or local data exists. When you delete your account, we delete your authentication user and associated cloud app data. We may retain a minimal account-deletion audit record (to investigate deletion success/failure) and any records required for legal, security, or abuse-prevention purposes. This audit record is not designed to expose your food, activity, or body records. Local data remains on your device until you clear it, delete your account, or uninstall the App.
11. Security
Server-side API keys are kept out of the App. Our gateway validates authentication tokens for AI and account-deletion requests, and Supabase row-level security restricts each user to their own records. No method of storage or transmission is perfectly secure.
12. Children
Nourish is not directed to children under 13 (or the higher minimum age in your country, such as 16 in parts of the EEA). Do not use Nourish to submit data about a child without appropriate consent and legal authority.
13. Do Not Sell
We do not sell your personal data, and we do not use your health data for advertising.
14. Changes
We may update this Policy as the App evolves. We will change the "Last updated" date and, for material changes, provide reasonable notice in the App.