1. Who We Are

NutraSafe is operated by Aaron Keen, sole trader, United Kingdom ("NutraSafe", "we", "us", "our").

Contact: contact@nutrasafe.co.uk

3. Data We Collect

Provided by you

• Account details: email (required for login).
• App content: food logs, reactions, allergens, expiry-tracking entries, and optional photos.
• Support messages you send to us.

Automatically collected

• Device and app information (e.g., IP address, device model, OS version, app version).
• Notification token (if you enable push notifications).

Passwords are handled securely by Firebase Auth and are never visible to us.

4. How We Use Your Data

• To provide and personalise your NutraSafe account.
• To sync, back up, and display your entries.
• To troubleshoot, secure, and improve the service.
• To reply to support requests.

We do not use your data for advertising or profiling.

5. Access and Storage

Your data is stored with Google Firebase (Google LLC), which encrypts all data in transit (TLS) and at rest (AES-256).

As the app operator, Aaron Keen may technically access user data through Firebase Console solely for:

• Bug investigation
• User support
• Maintaining database integrity and security

No data is used for any other purpose.

6. Legal Basis (UK GDPR)

• Contract (Art. 6(1)(b)) – to deliver the app and its features.
• Legitimate Interest (Art. 6(1)(f)) – to maintain reliability and security.
• Consent (Art. 6(1)(a)) – for optional features such as notifications or camera access.

7. Data Sharing and Transfers

Data is shared only with:

• Google Firebase (hosting, authentication, storage).
• Authorities or law enforcement if legally required.

Where data is processed outside the UK/EU, Firebase relies on Standard Contractual Clauses to ensure adequate protection.

We never sell, rent, or trade data.

8. Retention Periods

• Active accounts: data retained while the account remains active.
• Deleted accounts: data removed or anonymised within 30 days; backups purged within 90 days.
• Support emails: kept up to 24 months for audit and dispute resolution.

9. Your Rights

Under UK GDPR you can request to:

• Access your personal data
• Correct inaccurate information
• Delete your data ("Right to be Forgotten")
• Restrict or object to processing
• Receive a portable copy of your data

Contact contact@nutrasafe.co.uk to exercise these rights.

You may also contact the Information Commissioner's Office (ICO) at ico.org.uk.

10. Security

We use industry-standard security controls (encryption, access restrictions, monitoring). No system is 100% secure; please keep your device updated and use a strong password.

11. Children

NutraSafe is not intended for use by anyone under 16. If we learn we hold data for a child under 16 without consent, we will delete it promptly.

12. Changes to This Policy

We may update this policy periodically. Updates will be posted in-app and on our website with a new effective date. Material changes will be clearly communicated before they take effect.