foodNuPrivacy Policy
Last updated: 2 July 2026
This Privacy Policy explains how foodNu ("we", "us", "our") collects, uses, and protects your personal information when you use the foodNu mobile application ("App").
By using the App you agree to the collection and use of information as described in this policy.
1. Who We Are
foodNu is a food and recipe app for home cooks, currently operated by its individual founder (a corporate entity has not yet been formed). We are the data controller for the personal data you provide when using the App.
Contact: contact@foodnu.io
2. What Data We Collect
| Data type | Why we collect it | Examples |
|---|---|---|
| Account data | To create and manage your account | Email address, name, Apple ID (if Sign in with Apple used) |
| Fridge photos | To identify ingredients via AI scanning | Photos you take within the scanner feature |
| Chat messages | To generate personalised recipes via Chef Kai | Text you type in the Chef Kai conversation |
| Dietary preferences | To tailor recipes and avoid allergens | Preferences you set in the Customize tab |
| Diary entries | To log your meals and track eating history | Meals you save, dates, recipe references |
| Usage data | To improve the App and diagnose issues | Feature interactions, error logs |
We do not collect:
- Payment card details (handled entirely by Apple)
- Location data
- Contacts or calendar data
Device permissions we request:
- Camera — required for the fridge scanner feature only. Photos are processed immediately and not stored on our servers. Raw photos are sent to our third-party AI provider for processing and are not retained by us afterwards.
3. How We Use Your Data
- To operate the App — account creation, recipe generation, diary logging
- To power AI features — fridge scanning and Chef Kai use a third-party AI provider (see Section 4)
- To improve the App — product analytics, associated with your account identifier (see Section 4)
- To process subscriptions — managing premium purchases and entitlements (see Section 4)
- To comply with legal obligations — responding to lawful requests
We do not sell your personal data to any third party.
4. Third-Party Service Providers
We use a small number of trusted third-party service providers to run the App. Each acts as a processor under a Data Processing Agreement with us and may only use your data to provide its service to us.
4a. AI Features
The fridge scanner and Chef Kai are powered by a third-party AI provider.
When you use the fridge scanner or chat with Chef Kai, the following data is sent to our AI provider:
- Fridge photos (for ingredient identification)
- Your chat messages and conversation context (for recipe generation)
You will be asked for your explicit consent to this data sharing before these features are activated. Because these AI features are core to how foodNu works, withdrawing consent means you can no longer use the App. You can withdraw consent at any time by deleting your account (Customize tab → Delete Account), which also permanently erases your data.
Our AI provider processes this data under its own privacy and data-processing terms, and does not use data submitted through its API to train its models by default.
4b. Product Analytics
We use a first-party analytics provider to understand how the App is used so we can improve it. It receives your account identifier, product events (which features you use and when), your subscription status, and basic device and diagnostic information. We do not use it to track you across other apps or websites, and we do not sell this data.
4c. Subscriptions
We use a subscription-management provider to manage premium entitlements. It receives your account identifier and purchase/receipt data from the App Store. Payment card details are handled entirely by Apple and are never seen by us or by this provider.
4d. International Data Transfers
Some of our providers are based outside your country. Where your data is transferred internationally, we rely on appropriate safeguards — such as Standard Contractual Clauses (SCCs) — under our Data Processing Agreements with each provider, so your data remains protected to the standard required by applicable law.
5. Diary Entries — Health-Related Data
Your food diary entries may constitute health-related data under applicable privacy laws (including GDPR). We treat diary data with heightened protection:
- Diary data is stored in our secure database with access controls
- Diary data is never shared with third parties for advertising or analytics
- You can export or delete your full diary at any time (see Section 9)
6. Data Storage and Security
Your data is stored in a secure cloud database hosted on trusted infrastructure. We use:
- Encrypted connections (TLS) for all data in transit
- Row-level security controls in our database
- Limited access — only authorised team members can access production data
Data retention:
| Data type | Retention period |
|---|---|
| Account data | Duration of account + 30 days after deletion |
| Fridge photos | Not stored — processed in real time and discarded |
| Chat messages | Duration of account + 30 days after deletion |
| Diary entries | Duration of account + 30 days after deletion |
| Usage/analytics logs | 12 months, then anonymised or deleted |
| Financial transaction records | 7 years (legal/tax obligation) |
If you delete your account, all personal data (except legally required financial records) is permanently deleted within 30 days.
7. Legal Bases for Processing (GDPR)
If you are in the EU/EEA or UK, our legal bases for processing are:
| Processing activity | Legal basis |
|---|---|
| Account creation and operation | Contract performance (Art. 6(1)(b)) |
| AI features (data sharing) | Explicit consent (Art. 6(1)(a)) |
| Diary entries | Explicit consent (Art. 9(2)(a)) |
| Analytics and improvement | Legitimate interests (Art. 6(1)(f)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
EU AI Act (Regulation (EU) 2024/1689): The App uses AI systems for ingredient recognition and recipe generation. These are not classified as high-risk AI systems under the EU AI Act. We disclose the use of AI in all relevant features and label AI-generated content accordingly.
Automated decision-making: We do not make any solely automated decisions that produce significant legal or similarly significant effects on you (GDPR Art. 22). Recipe suggestions are informational only.
8. Cookies and Tracking
The App does not use cookies. We do not track you across third-party apps or websites. We do not use your data for targeted advertising.
9. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and associated data
- Export your data in a portable format
- Withdraw consent for AI features at any time — because AI is core to the App, this is exercised by deleting your account (Customize tab → Delete Account), which also erases your data
- Object to certain processing
- Lodge a complaint with your local data protection authority
To exercise any of these rights, contact us at contact@foodnu.io. We will respond within 30 days.
California residents (CCPA): You have the right to know what data we collect, the right to delete, and the right to opt out of the "sale" of your data. We do not sell your data.
10. Children
The App is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child under 13, contact us immediately at contact@foodnu.io and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via an in-app notification. Continued use of the App after changes constitutes acceptance.
12. Contact Us
For privacy questions or to exercise your rights:
Email: contact@foodnu.io