The short version
Your food logs, photos, and profile are yours. We use them to give you your nutrition insights and to make the product work — nothing more. We don't sell your data. You can ask to see or delete your data at any time.
Who we are
Digital Nutrition Twin ("we", "us") is the data controller for the personal data described here. Contact: privacy@digitalnutritiontwin.com. [Registered company name, number, and address to be inserted.]
What we collect
- Account details you give us: name, email, and password.
- Profile details you choose to provide: age, sex, weight, activity level, goals, allergies, and dietary preferences — used to calculate your personalised daily averages.
- Food and wellbeing logs: meal photos, manual entries, and any mood/energy/sleep/stress check-ins you record.
- Menstrual-cycle information (optional, special-category health data): only if you switch on cycle tracking — period dates, flow, and any symptoms you add. We ask for your explicit consent first, and you can turn it off or delete it at any time. It is never required to use the app.
- Technical data: device and usage information needed to run and secure the service.
How we use it
To identify your meals, estimate nutrition, calculate your personalised averages, generate your coaching insights, and improve the product. We process this data to provide the service you've asked for and on the lawful bases set out under [UK GDPR — to be confirmed by counsel].
Photo & AI processing — data that leaves our servers
To turn your photos and logs into nutrition guidance, some of your data is sent to specialist providers that process it on our behalf. We want to be clear about this because it means your data leaves our own servers:
- Food-recognition (your meal photos): when you use the photo feature, the image is sent to our food-recognition provider (LogMeal, or FatSecret) solely to identify the foods in it. We keep only the resulting food list and estimates; the original photo is deleted after analysis unless you choose to keep it.
- AI coaching (your meal & wellbeing text): the text used to phrase your daily "ideas" nudge — the nutrient in focus and the suggestion — is sent to Anthropic (Claude API) to word it warmly. It never decides your guidance (our own engine does) and is instructed not to add medical claims. Your check-in symptom notes are not sent for coaching, and a safety check runs before anything else.
- Hosting: our data is hosted with our infrastructure provider in the UK/EU.
Each provider processes your data only to deliver these features, under a data-processing agreement. [Confirm each provider's current retention periods and processing regions with counsel and list them here before launch.]
Menstrual cycle tracking (optional)
Cycle tracking is entirely optional and off by default. If you choose to turn it on, we store the menstrual-cycle information you enter — period dates, flow, and any symptoms — as special-category health data (UK GDPR Article 9), processed on the basis of your explicit consent, which we ask for separately before the feature is enabled.
This information is encrypted at rest, stays on our own platform (it is not shared with the food-recognition or AI-wording providers, or anyone else), and is used only to personalise your nutrition guidance — for example, gently prioritising iron around your period. We do not predict fertility or diagnose any condition. You can turn cycle tracking off, or permanently delete all of your cycle data, at any time from your account, and it is included in any data export you request.
Sharing
We do not sell your personal data. We share it only with the processors named above (hosting, food-recognition, and AI wording), under contracts that require them to protect it and use it only on our instructions, and where the law requires.
Your rights
Under UK data protection law you can access, correct, delete, or export your data, and object to or restrict certain processing. To exercise any right, email privacy@digitalnutritiontwin.com.
Data retention & security
We keep your data only as long as needed to provide the service or as the law requires, and protect it with appropriate technical and organisational measures. [Detail retention periods and security specifics.]
Age — 18 and over only
Digital Nutrition Twin is intended for adults aged 18 or over. We ask only for your year of birth to confirm this — not your full date of birth — and we don't knowingly collect data from anyone under 18. If you believe someone under 18 has registered, contact privacy@digitalnutritiontwin.com and we'll remove the account.
Changes
We'll post any updates here and, for significant changes, let you know directly.
Digital Nutrition Twin provides general nutrition guidance and is not a medical device.