Privacy Policy

Last Updated: May 16, 2026

HK Applications LLC ("we," "our," or "us") operates the Nutrient Wise mobile application and website (collectively, the "Service"). This Privacy Policy describes what information we collect, why we collect it, how we use and share it, and the choices and rights you have. It is written to be specific and readable rather than buried in legalese.

Important note on health data: Nutrient Wise lets you scan supplements, track items you have taken, and (optionally) record medications you take so we can warn you about possible interactions. This information is sensitive. We treat it as health-adjacent data, do not sell it, and do not share it with advertisers. See Sections 1, 3, and 4 for the details.

1. WHAT WE COLLECT

We collect only the information we need to operate the Service.

• Account information: name, email address, and the authentication token issued by your sign-in provider (Apple, Google, or email/password via Firebase Authentication).
• Scan history and product interactions: the supplements and food items you scan, save, like, or compare; the grades and explanations we generate; and any products you submit for review.
• Medication and stack data (optional): if you choose to use Stack Checker or My Medications, the medications, supplements, and dosages you enter so we can check for interactions. You can delete this data at any time from within the app.
• Purchase information: your subscription or scan-pack purchase status. Payment card details are processed by Apple App Store, Google Play, or RevenueCat and are never stored by us.
• Device and usage data: device model, operating system, app version, IP address (used to detect abuse and serve content), crash logs, and aggregated event counts (e.g., number of scans per day).
• Submitted content: photos of supplement labels you upload when submitting a product we do not yet have.

We do not knowingly collect data from children under 13. The Service is not directed to children. If you believe we have inadvertently collected such data, contact us and we will delete it.

2. HOW WE USE YOUR INFORMATION

We use the information we collect to:

• Provide the core features of the Service (scanning, grading, recommendations, interaction checks).
• Personalize the products and ingredient information shown to you.
• Generate AI-assisted explanations and grades using Google Vertex AI (see Section 3).
• Enforce scan and feature limits associated with your plan.
• Detect abuse, prevent fraud, and secure the Service (including server-side rate limits and Firebase App Check).
• Communicate with you about your account, app updates, and changes to this policy.

We do not sell your personal information. We do not use your scan history, medications, or stack data for advertising.

3. SUB-PROCESSORS AND THIRD PARTIES

We use the following third-party services to operate Nutrient Wise. Each is bound by its own privacy policy and, where required, a data processing agreement with us:

• Google Firebase (Authentication, Firestore, Cloud Functions, Cloud Storage, Analytics, Messaging, App Check, Crashlytics) — backend infrastructure, account management, push notifications, and crash reporting. Data processed under the Google Cloud Data Processing Addendum.
• Google Vertex AI / Gemini — used to generate supplement grades, ingredient explanations, and recommendations. Product label text and ingredient lists may be sent to the Vertex AI v1 endpoint for processing. Google processes this data on our behalf and does not use it to train its general-purpose foundation models.
• Google Cloud Fraud Defense (formerly reCAPTCHA) — used internally by Firebase Authentication for abuse prevention on sign-in and certain sensitive flows.
• RevenueCat — subscription and scan-pack purchase management. Receives a pseudonymous user ID and purchase metadata.
• Apple App Store and Google Play — payment processing and app distribution. We never receive your full payment card details.
• Open Food Facts, USDA, NIH Dietary Supplement Label Database (DSLD), FDA CAERS — public reference datasets we use to enrich product information. These are read-only sources; we do not send personal information to them.
• Beehiiv — if you subscribe to the Nutrient Wise newsletter, your email is stored with Beehiiv to deliver the newsletter. Newsletter subscription is separate from your app account; you can unsubscribe from any newsletter email.

4. DATA RETENTION

We retain personal information only as long as needed for the purposes described above or as required by law.

• Account data (name, email, auth tokens): for the life of your account, plus up to 30 days after deletion to allow for recovery and abuse review.
• Scan and history data: for the life of your account. Deleted with your account.
• Medication and stack data: for the life of your account, or until you delete it from the app, whichever is sooner.
• Submitted product photos: retained while the product remains in the catalog. Photos used to add a product to our public database may persist even after your account is deleted, in anonymized form.
• Device and usage logs: typically 90 days.
• Purchase records: retained for as long as required for tax, audit, and regulatory compliance (typically 7 years).

5. YOUR RIGHTS

Regardless of where you live, you can:

• Access the data we hold about you from within the app's Settings > Account screen.
• Correct account information at any time in Settings.
• Delete your account and associated data from Settings > Account > Delete Account. Deletion is permanent after a short grace period.
• Export your scan history and stack data by emailing [email protected].
• Withdraw consent for optional features (medications, stack tracking) by deleting that data inside the app.

5a. For users in the European Economic Area, UK, or Switzerland (GDPR)

You have the right to access, rectify, port, restrict, object to processing, and erase your personal data, and to lodge a complaint with your local supervisory authority. Our legal bases for processing are: (a) performance of a contract for core app functionality, (b) your consent for optional features and the newsletter, and (c) our legitimate interests in operating, securing, and improving the Service. You can exercise GDPR rights by emailing [email protected].

5b. For California residents (CCPA / CPRA)

You have the right to know what personal information we collect, to delete it, to correct it, and to opt out of any "sale" or "sharing" of personal information. We do not sell or share your personal information. The categories of information we collect are described in Section 1. You can submit a request by emailing [email protected]. We will respond within 45 days.

6. SECURITY

We use industry-standard administrative, technical, and physical safeguards to protect your information, including encryption in transit (TLS), encryption at rest for Firestore and Cloud Storage, server-side rate limiting, Firebase App Check to deter abuse, and access controls on internal systems. No system is perfectly secure; if we become aware of a breach that affects your personal information, we will notify you and any relevant authorities as required by law.

7. INTERNATIONAL TRANSFERS

Nutrient Wise is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to, stored in, and processed in the United States. Where required, we rely on Standard Contractual Clauses or the EU-U.S. Data Privacy Framework (via Google) for cross-border transfers.

8. MEDICAL DISCLAIMER

Nutrient Wise provides general informational scores, ingredient breakdowns, and interaction warnings. It is not medical advice and is not a substitute for consulting a licensed healthcare provider. Always speak to a qualified clinician before starting, stopping, or combining supplements and medications. Interaction warnings are a starting point for that conversation, not a final answer.

9. CHANGES TO THIS POLICY

If we make material changes to this Privacy Policy, we will notify you in the app, by email, or on this page before the changes take effect. The "Last Updated" date at the top of this policy will reflect the most recent revision.

10. GOVERNING LAW

This Privacy Policy is governed by the laws of the State of Kansas, United States, without regard to conflict of law principles. The rights granted in Sections 5a and 5b apply regardless of governing law, where applicable.

11. CONTACT US

For privacy questions, data requests, or to report a concern, contact:

HK Applications LLC
Email: [email protected]
Support: [email protected]
In-app: Settings > Help & Support