Privacy Policy
Last updated: June 2026
This Privacy Policy explains how Ysamihal Labs ("we", "us", "our") collects, uses, and protects your information when you use the Nutricart mobile application ("the App"). We are committed to protecting your privacy and handling your data transparently and in compliance with the General Data Protection Regulation (GDPR).
1. Who we are
Nutricart is published by Ysamihal Labs, a French company (SASU) registered at 6 rue d'Armaillé, 75017 Paris, France. For any privacy-related question, you can contact us at [email protected]. We act as the data controller for the personal data processed through the App.
2. Information we collect
We collect the following categories of data, only as needed to provide and improve the App:
- Account information — your name and email address, obtained when you sign in with Apple or Google.
- Profile and health & fitness data — the information you provide to build your plan, such as your goal, age, weight, height, dietary preferences, target macros and weekly budget, as well as activity data if you choose to connect Strava.
- Purchase information — your subscription status and purchase history, processed through our payments provider.
- Location — your precise location, used to find supermarkets near you. This is only collected when you grant permission.
- Usage and device data — how you interact with the App, along with device identifiers, used for analytics and to keep the App working reliably.
3. How we use your information
- To generate your personalized, budget-optimized grocery lists and calculate your target macros.
- To create and manage your account and your subscription.
- To find supermarkets near you and tailor recommendations to your chosen store.
- To analyze and improve the App's features, performance and reliability.
- To provide customer support and respond to your requests.
4. Third-party services
We rely on trusted third-party providers that process certain data on our behalf, each under their own privacy terms:
- Google Firebase — authentication, database and hosting of your account data.
- RevenueCat — subscription and purchase management.
- Mixpanel — product analytics.
- Strava — only if you choose to connect your account, to import your activity data.
- OpenAI — to help generate and optimize your grocery lists.
- Open Food Facts — open nutritional database used to enrich product information.
We do not sell your personal data, and we do not use it for third-party advertising or to track you across other companies' apps and websites.
5. Legal bases for processing (GDPR)
We process your data on the following legal bases: performance of our contract with you (to provide the App and your subscription), your consent (for example, location access or connecting Strava), and our legitimate interests (to secure, analyze and improve the App).
6. Data retention
We keep your personal data for as long as your account is active and as needed to provide the App. When you delete your account, we delete or anonymize your personal data within a reasonable period, unless we are required to retain it to comply with legal obligations.
7. Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict or object to the processing of your data, and the right to data portability. To exercise these rights, or to delete your account and associated data, contact us at [email protected]. You also have the right to lodge a complaint with your local data protection authority (in France, the CNIL).
8. Data security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss or misuse. No method of transmission or storage is completely secure, but we work to keep your information safe.
9. Children
Nutricart is not directed to children. We do not knowingly collect personal data from children below the age required by law in their country. If you believe a child has provided us with personal data, please contact us so we can remove it.
10. International transfers
Some of our providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) to protect your data.
11. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last updated" date.
12. Contact
For any question about this Privacy Policy or your data, contact us at [email protected].