Privacy Policy for NutriPlan

Last updated: September 26, 2026

This Privacy Policy explains how NutriPlan ("the App," "we," "us," or "our") collects, uses, stores, and protects information when you use the NutriPlan mobile application. NutriPlan is developed and published by HomiLabs. NutriPlan handles health-adjacent personal information, and we take that responsibility seriously — this policy is written to be read in full, not skimmed.

1. Who We Are

NutriPlan is developed by HomiLabs. Developer contact details are published on our Google Play Store listing, which Google requires every published app to keep current.

2. Information We Collect

We collect only the information needed to create and sync your personalized diet plan across your devices.

2.1 Account Information

• Email address — collected when you create an account via email/password or Google Sign-In.
• Password — never stored or seen by us in plain text; handled entirely by Firebase Authentication's secure infrastructure using industry-standard hashing.
• If you sign in with Google, we receive only the basic profile information Google provides for authentication (your email and, if available, display name).

2.2 Health-Adjacent Personal Information

To generate a diet plan appropriate to you, we collect:

• Medical condition(s) you select (diabetes, hypertension, obesity, hyperlipidemia, chronic kidney disease, thyroid disease, and sub-classification such as hypo/hyperthyroid)
• Age, sex, height, and weight
• Activity level
• Dietary preferences, dislikes, and allergies/exclusions
• Food log entries — if you use the optional food-tracking feature
• If you use the CKD Protein Calculator: your dialysis status and last recorded blood protein (albumin) reading, which you enter yourself

This information is used exclusively to personalize your plan and nutrient targets. We do not use this data for advertising, and we do not sell it.

2.3 App Preferences

• Selected language (English/Urdu)
• Unit preference
• Chosen weekly template, any item swaps, and any custom calorie target you set

2.4 Information We Do Not Collect

NutriPlan does not collect your precise location, contacts, camera/microphone data, SMS/call logs, or advertising identifiers. We do not run advertising SDKs.

2.5 Automatically Collected Technical Data

Firebase infrastructure may automatically log limited technical diagnostic information (e.g., crash reports) to help us keep the App stable. This is aggregate/technical in nature and is not linked to your health data beyond debugging crashes.

3. How We Use Your Information

We use the information described above only to:

1. Authenticate you and keep your account secure.
2. Generate, customize, and display your weekly diet plan based on your selected condition(s) and preferences.
3. Calculate calorie and nutrient totals against your condition's targets and flag when you exceed a limit.
4. Sync your profile, preferences, and plan across devices you log into.
5. Generate PDF exports of your finalized weekly plan.
6. Maintain, secure, and improve the App.

We do not use your health-adjacent data to build advertising profiles, and we do not share it with data brokers.

4. Where Your Data Is Stored

All account and app data is stored using Google Firebase and Google Cloud Platform, under our Firebase project nutriplan-homilabs. Specifically:

• Firebase Authentication stores your account credentials.
• Cloud Firestore stores your profile, condition selections, preferences, active plan pointer, and food log, scoped to your unique user ID.
• Reference data (condition profiles, the food database, weekly templates) is shared, read-only content not linked to your personal data.

Google is a data processor for this App; HomiLabs remains the data controller responsible for your information.

5. Data Security

• All data in transit is encrypted using TLS (HTTPS) by default.
• Data at rest in Firestore is encrypted by Google's infrastructure by default.
• Firestore Security Rules restrict every user's data so only that authenticated user can read or write their own profile, preferences, plan, and food log.
• Reference collections are read-only for end users and writable only by app administrators.

No method of electronic storage or transmission is 100% secure, but we follow industry-standard practices appropriate to the sensitivity of the data we hold.

6. Data Retention

• We retain your account and app data for as long as your account remains active.
• If you delete your account, we delete your personal data from our production systems within a reasonable period, subject to residual copies in encrypted backups, which are cycled out over time.
• Aggregated or de-identified data (which cannot re-identify you) may be retained for product-improvement purposes.

7. Your Rights and Choices

• Access — view all personal data associated with your account directly within the App.
• Correction — update your profile, conditions, and preferences any time in Settings.
• Deletion — use the in-app "Delete Account" option (Settings → Account, see our Delete My Account page for step-by-step instructions). This is immediate and fully self-service — there is no waiting period and no request to submit.
• Withdrawal of consent — stop using the App and delete your account at any time.

A dedicated data-export (download-a-copy) feature is not available in the current version of the App; everything the App holds about you is visible within the App itself via Settings. If you're in a jurisdiction with a specific data protection framework (e.g., GDPR) and need something this policy doesn't cover, see the developer contact details on our Google Play Store listing.

8. Third Parties

We do not sell your personal information or share your health-adjacent data with advertisers, ad-analytics networks, or data brokers. The only third party involved in processing your data is:

• Google LLC (Firebase / Google Cloud Platform) — our infrastructure and data-processing provider for authentication, database storage, and (if enabled) crash diagnostics.

If this changes, we'll update this policy and, where required, notify you in-app before the change takes effect.

9. Children's Privacy

NutriPlan is not directed at children and is not intended for individuals under 16. We do not knowingly collect personal information from children. If a child has created an account, it can be removed immediately using the self-service deletion described in Delete My Account — no request or waiting period is required.

10. International Users

If you use NutriPlan from outside the country where our data processors operate, your information may be transferred to, stored, and processed in other countries as part of Google Firebase's global infrastructure. By using the App, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above, and for material changes we'll provide in-app notice before the change takes effect.

12. Contact Us

NutriPlan does not currently offer a dedicated support inbox. For account access, correction, or deletion, use the in-app Settings screen as described above — no contact is needed for any of those. For anything this policy doesn't cover, current developer contact details are always published on our Google Play Store listing, which Google requires us to keep accurate.

13. Summary (Plain-Language Recap)