Privacy Policy

Last updated: August 2026

1. Data Controller

Markus Köplin
Fehmarner Str. 1, 04159 Leipzig, Germany
Email: support@mkhub.de

2. What Data Is Processed?

• Nutrition data: Meals, calories, macronutrients (protein, carbohydrates, fat), water intake
• Body data: Weight, body fat, body measurements, height, age, gender
• Profile data: Display name, goals, settings, allergy choices, and optional profile picture
• Activity data: Steps, active calories, workouts (via Apple Health)
• Sleep data: Optional sleep duration and simple sleep-context insights from Apple Health
• Usage data: Subscription status, pseudonymous installation identifier, active usage days, coarse usage and interaction data, technical app characteristics, and the pseudonymous device identifier for the Friends feature

3. Storage Location

Your nutrition, body, activity, profile, and settings data is stored locally on your device. Optionally, it is synced across your devices via iCloud. Profile pictures are stored only as compressed avatar images, not as original photos.

AI coach chats are stored locally on the device for short-term continuation and are automatically limited. Your food diary is not stored as a central user account on our own server. However, optional online features and technical product operations process the requests required for those purposes: AI requests, pseudonymous usage statistics, App Attest verification, and support traceability run through a Cloudflare Worker proxy, online food search may be routed through our backend to external food data services, and the Friends feature processes the online data required for that purpose with NutriTally.

4. AI Processing (Plus/Pro)

When you use AI features, your inputs may be transmitted together with selected profile, nutrition, and health data, including your chosen display name and weight, body-fat, and activity values from Apple Health, through our encrypted proxy to the AI service provider to generate personalized responses. Sleep data, your email address, and your Apple ID are not transmitted.

• Transmission is encrypted.
• The content of your request may contain additional personal data if you enter or upload such information yourself.
• Continuable AI coach chats store only role, text, timestamp, and technical response pointers locally. Images, Base64 data, and nutrition-context snapshots are not stored in the chat history.
• For chat continuation, the AI service provider stores technical conversation state that may be retrieved for a limited time to continue context and for defensive recovery.
• For photo analysis, you may voluntarily add up to 500 characters of text and exactly one context image alongside the meal photo. These inputs are processed together for the analysis and possible corrections.
• If you save a photo analysis for later, this package is stored encrypted only on your device. It is not copied into diary entries, iCloud, product analytics, support data, or AI-provider metadata and is removed when you continue, discard it, or choose “Delete All App Data”.

Based on our current technical and contractual setup, content transmitted to the AI service provider is not used to improve or train general models. The applicable contractual and technical settings of the service provider apply.

AI recommendations are generated automatically but are not the basis of automated individual decisions within the meaning of Art. 22 GDPR. They serve solely as non-binding guidance.

5. Food Search

When searching for food items online, search terms, product codes, language/country settings, and technical request information may be processed through our backend and forwarded to external food data services such as Open Food Facts. Depending on the lookup, requests may also be sent directly from the device to external services; your IP address is then processed for technical reasons. Technical server logs may be evaluated to provide the service securely and improve our product database, but they are not used to create nutrition, health, advertising, or user profiles. The legal bases are Art. 6(1)(b) GDPR for providing the search function and Art. 6(1)(f) GDPR for its secure operation and product-database improvement. Open Food Facts processes data in accordance with its own privacy policy.

If you voluntarily add an unknown product to the database, we process its product code and three product photos so that OpenAI can structure the product name, package quantity, and nutrition information for subsequent internal review. Photos are deleted no later than 90 days after upload; pseudonymous status and review data may be retained for up to 400 days. The legal bases are Art. 6(1)(b) GDPR for the requested submission feature and Art. 6(1)(f) GDPR for securely maintaining our product database.

6. Apple Health

The app reads and writes health data via Apple Health. Access only occurs with your explicit permission and can be revoked at any time in the iOS or Health settings. Sleep data is optional, evaluated locally only for careful nutrition prompts, and is not sent to AI or external services. When you use AI features, selected weight, body-fat, and activity values may be transmitted to the AI service provider. Synchronization via Apple services you have activated, particularly iCloud, remains unaffected.

6a. Siri, Spotlight, and Shortcuts

NährWert provides local App Intents for Siri, Spotlight, and the Shortcuts app. They allow faster logging or querying of water, weight, and daily values. These intents access locally stored SwiftData in the App Group store and do not send nutrition or health data to our own servers. Write actions and sensitive queries require device authentication and use Apple's system dialogs. Apple Health is not written without an existing permission.

6b. Friends

When you use Friends, NutriTally processes your friend code, display name, streak, and tracked days online. A pseudonymous device identifier is processed to technically associate your device with your friend code. It is based, where available, on the iOS Identifier for Vendor or on a random UUID, is not IDFA, is not used for cross-app tracking, and is used only to provide Friends. For secure deletion, NutriTally also processes a technical App Attest key identifier and a fresh cryptographic proof that confirms only the specific deletion request. After a friendship is accepted, your streak and tracked days are visible to your friends. Your personal goal type, for example losing or gaining weight, is not visibly shared with friends. Optionally, you can share your macro progress as percentage values for carbohydrates, protein, and fat; gram values, calories, and meals remain private in this view. When you explicitly share a meal, its foods, amounts, and nutrition values are transmitted via NutriTally to the selected friend. Removing a friendship deletes only that relationship. There is exactly one visible entry point for complete deletion: Advanced → Delete All App Data. If a Friends profile exists, the app first safely and idempotently deletes the Friends identity stored by NutriTally, including device bindings, friendship requests and relationships, and shared meals still stored online. Local app data is deleted only after the online deletion is confirmed. The deletion target is determined exclusively from the calling device’s binding; the device identifier alone is not sufficient for authorization. Technical pseudonymized cryptographic deletion receipts, including the App Attest key identifier, and a code tombstone remain so retries stay safe and the deleted code cannot be restored; they contain neither the plain-text code nor profile data. Meals already accepted by a recipient and stored locally in their diary, Apple Health data, and subscription and photo-analysis quotas remain. A new Friends identity is created only after you consciously register again.

6c. Pseudonymous Usage Statistics

NutriTally processes pseudonymous usage and interaction data, technical app and subscription characteristics, and a random app-specific installation identifier. Usage data may be associated with this identifier. We use these data for secure operation, support, cost and capacity planning, and needs-based improvement of the app and our product database. The legal basis is Art. 6(1)(f) GDPR; our legitimate interests are product improvement, identifying data gaps, and operating the service securely and economically. The identifier is not IDFA, and the processing is not used for advertising or cross-app tracking.

7. Recipients and Third-Country Transfers

We only share personal data to the extent necessary for the described features.

Apple / iCloud

Purpose: Optional synchronization of your app data via iCloud
Legal basis: Art. 6(1)(a) or (b) GDPR, depending on usage
Country / third-country aspect: Processing may occur across borders; Apple's privacy terms apply

OpenAI

Purpose: Processing your inputs when using AI features, continuable chat context, and structuring voluntarily submitted product photos
Legal basis: Art. 6(1)(a) GDPR for optional AI features and Art. 6(1)(b) and (f) GDPR for product submissions; for health data additionally Art. 9(2)(a) GDPR
Country / third-country aspect: USA; safeguarded via the EU-US Data Privacy Framework adequacy decision and/or Standard Contractual Clauses

Cloudflare

Purpose: AI proxy, food proxy, Friends backend, App Attest verification, rate limiting, pseudonymous usage statistics, and support traceability
Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR
Country / third-country aspect: USA; safeguarded via the EU-US Data Privacy Framework adequacy decision and/or Standard Contractual Clauses

Open Food Facts

Purpose: Online food search and retrieval of product information
Legal basis: Art. 6(1)(b) GDPR or usage at your explicit request
Country / third-country aspect: Depends on the technical provision of the service

8. Storage Duration

Your data is stored as long as you use the app. Start coordinated complete deletion only under Advanced → Delete All App Data. If a Friends profile exists, the Friends identity stored by NutriTally is first deleted safely and idempotently; only then are local app data, including profile data and an optional profile picture, removed. Accepted local recipient copies of shared meals, Apple Health data, subscription and photo-analysis quotas, and the described technical pseudonymized deletion receipts and code tombstone remain. Local AI coach chats are limited to 14 days and a maximum of 100 messages per active session and are removed locally by “Delete Chat” or complete deletion. When the app is uninstalled, local data is generally removed by the operating system. Apple Health data and iCloud data can additionally be deleted through their respective system settings. AI content already transmitted to the AI service provider is subject to its application-state and privacy rules.

Pseudonymous raw analytics events are generally stored for up to 90 days; pseudonymous daily evaluations may be stored for up to 400 days. Technical log or abuse prevention data related to AI features and online food search is only stored for as long as necessary for secure provision, error prevention, and product-database maintenance.

9. Your Rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection.

Right of withdrawal: You may withdraw any consent given at any time with effect for the future.

• AI features: You can withdraw consent under Settings → Advanced → Data → Withdraw AI Consent or by email to support@mkhub.de.
• Apple Health: You can additionally revoke access at any time in your device's Health or iOS settings.

The lawfulness of processing carried out prior to withdrawal remains unaffected.

You can start coordinated deletion of the Friends identity stored by NutriTally and your local app data directly and only under Advanced → Delete All App Data.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is:

11. Changes

This privacy policy may be updated with app updates or changes to data processing. The current version is always available in the app under Settings → Privacy & Data → Privacy Policy and at naehrwert-app.de/en/privacy.