Политика конфиденциальности
Обновлено: 13 August 2026
Эта страница доступна на русском в приложении. Юридически действующей является английская версия ниже.
This policy explains what NutriSense collects, why, who else sees it, and how you get rid of it. It describes the app as it actually works. If something here stops being true, this page changes.
NutriSense is operated by Red Sentra ("we"). The app is com.redsentra.nutrisense on Google Play.
The short version. We collect what you put into the app — your profile, your meals, your messages to Nova — because that is what produces your nutrition analysis. We do not sell it, there is no advertising in the app, and there are no third-party analytics or tracking SDKs. To provide Nova, the relevant parts of your data are sent to our AI provider (Anthropic) at the moment you use it. You can export everything and delete everything, from inside the app, at any time.
1. What we collect
| Category | What exactly | Why |
|---|---|---|
| Account | Email address, password hash, name, and — if you use them — your Google or Apple account identifier | To create your account and sign you in |
| Profile | Sex, date of birth, height, weight, goals, activity level, preferred nutrient detail, time zone | To calculate your calorie and nutrient targets |
| Body measurements | Weight history and, if you enter them, body fat, muscle mass, water percentage, visceral fat | To track progress and adjust targets |
| Food diary | Every meal you log: foods, quantities, meal type, time, and the full nutrient snapshot recorded at that moment | This is the product |
| Messages to Nova | The text of your conversation with the assistant | To answer you, and to keep the thread readable when you come back |
| Food photos | The image itself, in transit only | To identify the meal. See section 4 |
| Nova's memory | Facts you ask Nova to remember, which can include allergies and medical conditions you choose to tell it, plus preferences and context | So you do not have to repeat them, and so Nova never suggests something you are allergic to |
| Wearable data | If you connect Samsung Health: steps, active minutes, workouts, heart rate and zones, sleep, HRV, stress, resting heart rate | To base your calorie target on measured expenditure instead of a formula |
| Device and session | A public device key and its security level, a device label, app version, time zone, and the sessions currently signed in | To bind your session to your device, so a stolen token cannot be replayed elsewhere |
| Purchases | Google Play purchase token (stored encrypted), product id, subscription status and dates | To verify your subscription and give you Pro |
| Operational | Server request logs, AI processing cost records, Play Integrity verdicts | To run and protect the service and control our own costs |
We do not collect your contacts, your location, your device advertising identifier, or your browsing behaviour. There is no advertising SDK and no third-party analytics in the app.
2. Health data
Most of what NutriSense holds is health-related: what you eat, what you weigh, how you sleep, how your heart behaves during exercise, and — if you tell Nova — your allergies and medical conditions. We treat all of it as sensitive. It is used to give you your own analysis and for nothing else. We do not use it for advertising, we do not sell it, and we do not share it with anyone except the processors in section 5, each of which is there because the feature you used requires it.
3. Nova and AI processing
Nova is powered by Anthropic. This is not a vague "we may use third-party services": here is exactly what happens.
When it happens. Only when you use an AI feature — sending a message or a photo to Nova, generating a weekly report, or logging a food whose nutrient profile is not yet known and has to be estimated. Opening the app, browsing your diary or scanning a barcode with a known product does not send anything to Anthropic.
What is sent. Your message, and the context Nova needs to answer it usefully: your name, sex, age, height, weight, goals and activity level; today's meals and nutrient totals; your current deficiencies; your latest body composition; recent wearable data if connected; and the facts stored in Nova's memory — including allergies and medical conditions you have told it, which are sent precisely so it never recommends something harmful to you. For a photo, the image is sent too.
What is not sent. Your email address, your password, your purchase tokens, your device keys, and your session identifiers are never included.
What is kept. We store the text of the conversation so you can read it later. We do not store the photo. Anthropic processes the request on our behalf under their commercial terms and does not use it to train their models.
4. Food photos
A photo you send to Nova is uploaded, analysed, and then dropped. It is never written to your food diary or your chat history — only the text of Nova's reply is stored, next to a placeholder marking that a photo was sent. For 24 hours we keep a cached copy of the reply keyed by a fingerprint of the image, so sending the same photo twice does not cost a second analysis; the image itself is not part of that cache.
5. Who else processes your data
| Processor | What they receive | Why |
|---|---|---|
| Anthropic | Your messages, food photos, and the profile/diary context described in section 3 | To provide Nova |
| Google Cloud (Cloud Run, Cloud Storage, Secret Manager) | Everything, as our hosting provider; avatars are stored here | To run the service |
| Neon | The application database | To store your data |
| Upstash | Cache and rate-limiting data | To keep the service fast and protected |
| Resend | Your email address and the contents of account emails | To send email verification and security notices |
| Google Play | Purchase tokens and an obfuscated account identifier | To verify your subscription |
| Open Food Facts | The barcode you scanned — nothing that identifies you | To look up packaged products |
| Google Fonts | Your device's IP address, when the app first loads its typeface | To render the interface |
Samsung Health is not a recipient: data flows from it to us, on your device, only after you grant permission, and you can disconnect it at any time in the app.
6. Where your data is
Our servers run in the European Union (Google Cloud, europe-west1) and our database is
hosted in the EU. Some processors — Anthropic in particular — process data in the United States. Those
transfers are covered by the Standard Contractual Clauses.
7. How long we keep it
- While your account exists: your profile, diary, nutrient history, chat and memory are kept until you delete them or delete your account. A nutrition history is only useful if it is long.
- Food photos: not stored. The cached reply expires after 24 hours.
- Sessions: a session expires after 7 days of inactivity, and no later than 30 days after sign-in. Signing out revokes it immediately.
- After account deletion: your personal data is deleted straight away, not queued. See section 9 for the narrow exceptions.
8. Your rights
You have the right to access, correct, export and delete your data, to object to processing, and to complain to your data protection authority. In practice the app implements them directly:
- Export: Profile → Export data. You get a machine-readable file of everything.
- Delete your account: Profile → Delete account, or from our website. Immediate.
- Delete your chat: the clear-history control in the logger.
- Delete a memory: Profile → Nova's memory removes individual facts.
- Correct a value: where a nutrient value is an AI estimate, the app marks it as one and lets you replace it with the number on the label.
- Disconnect a wearable: Profile → Wearable → Disconnect.
9. What survives deletion
Deleting your account deletes your personal data. Three things remain, and none of them describes you:
- Billing records we are required to retain for accounting, held separately from any health data.
- Cost-accounting rows recording what AI processing cost us, with the user identifier removed.
- Nutrient profiles of foods that were resolved while you used the app. These describe foods, not people, carry no identifier, and stay in the shared cache so the next person who logs the same food gets an instant, consistent answer.
10. Children
NutriSense is not intended for children under 13, and we do not knowingly create accounts for them. If you believe a child has an account, contact us and we will delete it.
11. Security
Access tokens are cryptographically bound to the device that obtained them, using a key held in the device's hardware keystore — a stolen token is useless on another device. Signing out revokes the session on the server immediately rather than waiting for it to expire. Purchase tokens are encrypted in the database. Optional biometric locking keeps your session behind your fingerprint or face.
12. Changes
If this policy changes in a way that affects you, we will say so in the app before the change takes effect. The date at the top always reflects the current version.
13. Contact
Write to support@redsentra.tech for anything in this policy, including access, correction, export and deletion requests.