Privacy Policy

Last updated: 18 March 2026

1. Who We Are

NutriScanner is operated by Longevia Group Ltd, a company registered in England and Wales. Throughout this policy, 'we', 'us', and 'our' refer to Longevia Group Ltd.

Data Controller:

Longevia Group Ltd
United Kingdom
Email: longeviagroupltd@gmail.com

2. What This Policy Covers

This Privacy Policy explains how we collect, use, store, and share your personal data when you use the NutriScanner iOS application and our associated website at nutriscanner.app. It applies to all users in the United Kingdom and European Economic Area (EEA) and is written to comply with the UK GDPR, the EU GDPR, and the Data Protection Act 2018.

3. Personal Data We Collect

3.1 Data You Provide Directly
Email address (for account creation and communications via MailerLite)
Dietary preferences, health goals, and food log entries you input into the app
Support requests and communications you send to us

3.2 Apple HealthKit Data

With your explicit permission, NutriScanner may read from and write to Apple HealthKit. The types of health data we access include:
Dietary energy and macronutrient data (calories, protein, carbohydrates, fat)
Body measurements you have stored in Health (e.g. body weight, height)

HealthKit data is used solely to provide and improve the in-app nutrition tracking experience. We will never use HealthKit data for advertising, marketing, or any purpose unrelated to health and fitness. HealthKit data is never shared with third parties for their independent use.

3.3 Automatically Collected Data

Device type, operating system version, and app version
Crash reports and diagnostic data (collected anonymously via Apple's crash reporting)
Subscription status and purchase history (managed by RevenueCat)

3.4 Food Scan Data

When you photograph food for analysis, images are sent to OpenAI's API for processing. Images are not stored by us after the analysis is returned. Please refer to OpenAI's privacy policy for how they handle data in transit.

4. Legal Basis for Processing

We process your personal data on the following legal grounds under UK/EU GDPR:

Contract performance: to provide you with the NutriScanner service you have subscribed to
Legitimate interests: to improve app performance, prevent fraud, and ensure security
Consent: for HealthKit access (you grant or revoke this via iOS Settings at any time) and for marketing communications via email
Legal obligation: to comply with applicable laws and regulations

5. How We Use Your Data

To provide, operate, and improve the NutriScanner app and its features
To process food images and return nutritional analysis via OpenAI
To manage your subscription and billing via RevenueCat
To sync dietary data with Apple HealthKit where you have granted permission
To send you product updates and newsletters where you have consented (via MailerLite)
To respond to support queries
To detect and prevent fraudulent or unauthorised activity

6. Third-Party Services and Data Sharing

We work with the following third-party processors. Each is bound by a Data Processing Agreement and appropriate safeguards:

6.1 OpenAI

Purpose: food image analysis and nutritional inference.
Data sent: food photographs at the point of scan.
Transfer mechanism: OpenAI's Standard Contractual Clauses cover EEA and UK data transfers to the United States.
Policy: platform.openai.com/privacy

6.2 RevenueCat

Purpose: in-app purchase management, subscription entitlements, and receipt validation.
Data sent: anonymised user ID, device identifiers, and purchase transaction data.
Transfer mechanism: RevenueCat's EU Standard Contractual Clauses.
Policy: revenuecat.com/privacy

6.3 Railway

Purpose: backend API hosting for app requests.
Data sent: API payloads routed through our server. No personal data is persistently stored on Railway beyond ephemeral request logs.
Policy: railway.app/legal/privacy

6.4 MailerLite

Purpose: email marketing, product updates, and recipe content delivery.
Data held: email address and first name (where provided).
Transfer mechanism: MailerLite's EU Standard Contractual Clauses.
Policy: mailerlite.com/legal/privacy-policy

6.5 Apple

The App Store, HealthKit, and StoreKit frameworks are provided by Apple Inc. Apple's privacy practices govern their own collection of data. We do not control Apple's data processing.

We do not sell your personal data to any third party.

7. International Data Transfers

Some of our third-party processors (notably OpenAI and RevenueCat) are based in the United States. Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission and the UK International Data Transfer Agreement (IDTA) where applicable.

8. Data Retention

Account and food log data: retained for the duration of your account and deleted within 30 days of an account deletion request
Email marketing data (MailerLite): retained until you unsubscribe or request deletion
Purchase records: retained for 7 years to meet HMRC legal requirements
HealthKit data: not stored by us; it remains within Apple's HealthKit on your device
OpenAI image data: not retained by us after the analysis response is returned

9. Your Rights Under UK/EU GDPR

You have the following rights in relation to your personal data:

Right of access: request a copy of the data we hold about you
Right to rectification: ask us to correct inaccurate or incomplete data
Right to erasure ('right to be forgotten'): request deletion of your data where no legitimate retention basis applies
Right to restriction: ask us to limit how we process your data in certain circumstances
Right to data portability: receive your data in a structured, machine-readable format
Right to object: object to processing based on legitimate interests or for direct marketing
Rights related to automated decision-making: we do not make solely automated decisions with significant legal or similar effects on you

To exercise any of these rights, email us at longeviagroupltd@gmail.com. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. Apple HealthKit: Specific Commitments

In accordance with Apple's App Store Guidelines and HealthKit terms, we confirm:
HealthKit data will not be used for advertising or sold to data brokers
HealthKit data will not be shared with third parties for purposes unrelated to health and fitness functionality
HealthKit data will not be used for market research or user profiling
You can revoke HealthKit access at any time via iOS Settings > Privacy and Security > Health > NutriScanner

11. Children's Privacy

NutriScanner is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us at longeviagroupltd@gmail.com and we will delete it promptly.

12. Cookies and Tracking

The NutriScanner iOS app does not use browser cookies. Our website (nutriscanner.app) may use essential cookies to ensure the site functions correctly, and analytics cookies where you have consented. You can manage cookie preferences via the banner on the website.

13. Security

We take appropriate technical and organisational measures to protect your data, including encrypted data transmission (HTTPS/TLS), access controls on our backend infrastructure (Railway), and regular reviews of our security practices. No method of transmission over the internet is completely secure; we cannot guarantee absolute security, but we strive to use commercially acceptable means to protect your data.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you via the app or by email. The 'Last updated' date at the top of this document indicates when the most recent version was published. Continued use of NutriScanner following notification of changes constitutes your acceptance of the updated policy.

15. Contact Us

For any privacy-related queries, requests, or complaints:

Longevia Group Ltd
Email: longeviagroupltd@gmail.com
Website: nutriscanner.app

For complaints not resolved directly with us, you may contact the Information Commissioner's Office (ICO):
Website: ico.org.uk

Longevia Group Ltd | nutriscanner.app | longeviagroupltd@gmail.com


Terms of Use

Effective Date: February 2026

Subscription Terms

NutriScanner Pro is an auto-renewable subscription service provided by Longevia Group Ltd.

Subscription title: NutriScanner Pro

Free trial: 7 days

Price:

£4.99 per month (UK) / $5.99 per month (US and rest of world. May adjust automatically to local currency)

Payment will be charged to your Apple ID account at confirmation of purchase

Subscription automatically renews unless cancelled at least 24 hours before the end of the current period

Your account will be charged for renewal within 24 hours prior to the end of the current period

Manage or cancel your subscription in Settings > Apple ID > Subscriptions

Any unused portion of a free trial period will be forfeited when you purchase a subscription

General Terms

NutriScanner is provided for informational purposes only and is not a medical device. It should not be used to diagnose or treat any medical condition. Always consult a qualified healthcare professional before making lifestyle changes.

This app is subject to Apple's standard End User Licence Agreement: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/

Longevia Group Ltd reserves the right to modify or discontinue the service at any time. Continued use of the app following any changes constitutes acceptance of the revised terms.

For questions regarding these terms, contact us using the support form on this page.