1. Who we are
Origin Labs s.r.o., Company ID No. (IČO) 28204352, registered office Wichterlova 2372/8, Libeň, 182 00 Praha 8, Czech Republic (“Origin Labs”, “we”, “our” or “us”), is the controller responsible for the processing described in this Privacy Policy. Contact: [email protected].
This Policy applies to the Nutrinaut mobile application and our websites at nutrinaut.app and tools.nutrinaut.app (together, the “Services”). It explains how we process personal information. Where consent is required, we request it separately before the relevant processing takes place.
2. Information we process
- Account and contact data: identifiers, email address, subscription status and messages you choose to send.
- Nutrition and activity logs: foods, quantities, training entries, goals and notes you enter.
- Connected health and fitness data: only categories you authorise through platform permissions, such as activity, workouts, heart-rate, sleep or related measurements available from Apple Health, Health Connect or a compatible service.
- AI feature inputs: meal photos, voice recordings or text you deliberately submit for an automated feature, plus the generated draft or transcription.
- Device and service data: app version, device type, diagnostics, security events, IP address and request information needed to deliver and protect the Services.
- Website preferences and analytics: necessary storage and, subject to your choices and applicable law, limited analytics information.
3. How we use information
We use information to provide and secure accounts, synchronise authorised data, create editable logs, calculate educational estimates, show trends and summaries, process support requests, maintain subscriptions, diagnose technical faults and meet legal obligations.
Nutrinaut outputs are planning prompts and estimates. We do not use connected data to diagnose illness, certify recovery, predict injury or guarantee a health or performance outcome. Automated food recognition, transcription and other AI outputs can be incomplete or wrong and should be reviewed before use.
4. Legal bases
Depending on the feature and your location, processing is based on performing our contract with you, your consent (including explicit consent where required for health data), our legitimate interests in security and service improvement, or compliance with law. You may withdraw consent for future processing through the relevant device, app or privacy control without affecting earlier lawful processing.
5. Local calculator data
Calculator inputs entered at tools.nutrinaut.app are processed locally in the browser and are not sent to the Nutrinaut Tools application server. The Tools site may store only the acknowledgement state for its current privacy notice in local browser storage. Clearing browser site data removes that local value.
6. Service providers and disclosures
We use service providers for hosting, cloud infrastructure, email, subscriptions, security, diagnostics and optional AI processing. When an AI feature sends a photo, voice clip or text to a provider such as OpenAI, the provider processes it on our instructions to return the requested output. We limit access to what is needed for the feature and do not sell health or fitness data.
We may disclose information when required by law, to protect users or the Services, or as part of a corporate transaction subject to appropriate safeguards. Providers may process data outside your country; where required, we use recognised transfer mechanisms and contractual protections.
7. Cookies, analytics and advertising
We use cookies or similar technologies that are necessary to operate and secure the websites. Subject to your choices and applicable law, we may use Google Analytics to understand visits. Where consent is required, non-essential analytics storage is not enabled unless and until you consent.
The websites may use Google AdSense after publisher approval. When Google ads are enabled, third-party vendors including Google may place or read cookies, use web beacons, IP addresses or similar technologies to serve and measure ads. Google and its partners may use advertising cookies to personalise ads based on prior visits where the visitor has consented and applicable law permits. You can manage personalised advertising in Google Ads Settings and read how Google uses information from partner sites.
Before serving Google ads to visitors in the European Economic Area, the United Kingdom or Switzerland, we will use a Google-certified consent management platform where required. A permanent privacy or cookie choices control will allow visitors to review or withdraw their choices. We do not use calculator inputs, connected health or fitness data, or health history to select personalised ads or create advertising audiences.
8. Retention and deletion
We retain information only while it is needed for the purpose described, account operation, security, dispute resolution or a legal obligation. Retention depends on the data category, feature settings and whether an account remains active. Account deletion requests are handled through the in-app control or the instructions on our account deletion page. Backups and security records may persist for a limited period before scheduled deletion or irreversible aggregation.
9. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, withdraw consent and receive portable data. You may also complain to your data-protection authority. Device-level health permissions can be changed in the relevant operating-system settings. Contact us at [email protected] to exercise a right.
10. Security, children and changes
We use reasonable technical and organisational safeguards, but no internet service can guarantee absolute security. The Services are not directed to children under the applicable age of digital consent. We may update this Policy when features, providers or law change; the current version and effective date will appear on this page.
Effective date: 11 September 2026.