Last updated: August 26, 2026
This Privacy Policy explains how MyHomey Technologies, Inc., the owner and operator of Nutripath ("Nutripath," "we," "us," or "our") and the controller of your personal data, collects, uses, shares, and protects your information when you use the Nutripath app and related services (the "Service"). By using the Service, you agree to this Policy.
Account and profile information you provide during sign-up and onboarding: your name, email address, age, biological sex, height, weight, activity level, dietary preferences and restrictions, health conditions you choose to enter, fitness habits, and goals.
Content you create in the app: logged meals, metrics, tracked progress, messages you send to the AI coach, product likes/dislikes, and (if you provide it) a delivery address for ordering.
Apple Health data — only with your permission (see Section 8).
Usage and diagnostic data: if crash reporting is enabled, we collect app diagnostics such as crash logs, error events, device model, and operating-system version through Sentry, our error-monitoring provider, to keep the app stable. This diagnostic data is not linked to advertising.
Device and notification data: if you enable notifications, we store a push-notification token so we can send you reminders and updates.
We use your information to: create your account; generate personalized nutrition and fitness plans; provide AI coaching; recommend products and meals; help you order from third-party providers; track your progress; send notifications you have enabled; diagnose and fix problems; protect the security and integrity of the Service; and comply with legal obligations. We do not use your information for third-party advertising, and we do not sell it.
We may create de-identified or aggregated information that does not identify you — for example, aggregate usage statistics or de-identified data used to operate, analyze, and improve the Service and its features. We maintain and use such information only in de-identified or aggregated form and do not attempt to re-identify it, except as permitted by law.
We share information only as needed to operate the Service:
Service providers that process data on our behalf under contract, including: Supabase (database, authentication, and hosting), Anthropic (AI processing — see Section 7), and Sentry (crash and error diagnostics).
Delivery and retail partners: when you choose to order food or products, the Service links you out to third-party providers (for example, Instacart, Amazon, or meal providers). Your transaction with them is governed by their own privacy policies; we do not control their handling of your data.
Legal and safety: we may disclose information if required by law, subpoena, or legal process, or to protect the rights, safety, or property of Nutripath, our users, or the public.
Business transfers: if Nutripath is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.
We do not sell your personal data and do not share it for cross-context behavioral advertising.
Nutripath is a native mobile app and does not use advertising cookies or third-party advertising trackers. We use a limited set of software development kits (SDKs) to operate the Service — currently Sentry (crash and error diagnostics), together with Supabase and Anthropic as described above. We do not track you across other apps or websites for advertising. Because there is no consistent industry standard for browser "Do Not Track" (DNT) signals, we do not currently respond to DNT signals; where required by law, we honor recognized opt-out preference signals such as Global Privacy Control (GPC).
Where the GDPR or UK GDPR applies, we process your data on the bases of: performance of our contract with you (to provide the Service); your consent (for example, Apple Health access and notifications); our legitimate interests (to secure and improve the Service); and compliance with legal obligations. You may withdraw consent at any time where processing is based on consent.
Nutripath uses Anthropic's Claude AI to generate plans and provide coaching. Your profile data and conversation history are sent to the AI for processing to produce your results. We do not use your data, and Anthropic does not use data submitted through our API, to train AI models.
With your permission, Nutripath reads health data from Apple Health — body measurements (weight, height, BMI, body fat percentage, lean body mass, waist circumference), activity (steps, distance, flights climbed, active and resting energy, exercise and stand time, workouts), heart and fitness metrics (heart rate, resting heart rate, heart rate variability, VO2 max), nutrition (calories, protein, carbohydrates, fat, fiber, sugar, water, caffeine), and sleep — so you don't have to enter it manually, and can write body measurements and the nutrition you log back to Apple Health. Apple Health data is used solely to power your in-app metrics, plans, and coaching. We never use Apple Health data for advertising or marketing, never sell or share it with third parties, and never use it for data mining. You can revoke access at any time in iOS Settings → Privacy & Security → Health → Nutripath.
Nutripath is a consumer wellness app, not a healthcare provider, and is not a "covered entity" or "business associate" under the U.S. Health Insurance Portability and Accountability Act (HIPAA). Health-related information you enter or that the Service derives is therefore not protected by HIPAA, although we protect it as described in this Policy. Nutripath does not provide medical advice, diagnosis, or treatment.
We retain your personal data for as long as your account is active or as needed to provide the Service. When you delete your account (Profile → Delete Account), we delete your associated data from our systems, except where we are required to retain certain records to comply with legal obligations or resolve disputes. Diagnostic logs are retained for a limited period and then discarded.
Your data is stored on Supabase infrastructure with row-level security policies ensuring you can only access your own data. All API communications are encrypted in transit via HTTPS. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your information.
You can view, edit, or delete your data at any time through the Profile section, and you can permanently delete your account and associated data via Profile → Delete Account. Depending on where you live, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. California residents have rights under the CCPA/CPRA, including the right to know, delete, and correct, and the right not to be discriminated against for exercising them; because we do not sell or share personal data for cross-context behavioral advertising, no opt-out of "sale/sharing" is required. Residents of certain states (including Colorado, Connecticut, and Virginia) may appeal a denied request by replying to our response or emailing us with "Appeal" in the subject line. To exercise any right, email support@nutripath.ai; we will respond within the time required by applicable law (and delete data within 30 days of a verified deletion request).
The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16 (and never from children under 13). If you believe a child has provided us personal information, contact us and we will delete it.
We are based in the United States and process and store data there. If you access the Service from outside the United States, you understand your information will be transferred to and processed in the United States, which may have different data-protection laws than your country. To the extent we transfer personal data from the EEA, UK, or Switzerland to the United States, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) or another lawful transfer mechanism.
We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, notify you in the app or by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
For privacy questions or requests, contact MyHomey Technologies, Inc. at support@nutripath.ai.