Privacy Policy

This Privacy Policy explains how Nutrips ("we", "us", "our") collects, uses, and protects your information when you use our website (getnutrips.com), Telegram bot, and related services (collectively, the "Services").

We are committed to processing your data lawfully, transparently, and responsibly.

1. Who We Are (Data Controller)

The Services are operated by:

Nutrips (Operator Name Available Upon Request)
Berlin, Germany
Email: hello@getnutrips.com

We act as the Data Controller for the personal data we collect.

2. Data We Collect

2.1. Information You Provide Directly

When using Nutrips, you may voluntarily provide:

• First name
• Messaging platform ID (e.g., Telegram)
• Nutrition-related preferences (goals, diet style, struggles, tip types)
• Language or communication preferences
• Any optional information submitted during onboarding

2.2. Information Collected Automatically

When visiting our website or receiving messages:

• Device and browser information
• IP address
• Analytics data (e.g., page interactions, session duration)
• Message delivery logs (timestamp, delivery status)

We do not store the content of your chats with the bot beyond what is required for functionality.

3. Legal Basis for Processing (GDPR)

We rely on the following:

• Consent (Art. 6 & 9 GDPR): for personalized nutrition messaging
• Legitimate interest: to maintain and improve the Services
• Contract performance: when you subscribe to premium features
• Legal obligations: when required by law

4. How We Use Your Data

We use your information to:

• Send personalized daily nutrition tips
• Select appropriate content based on your preferences
• Avoid sending repeated messages
• Improve user experience and content quality
• Provide customer support
• Process payments for premium features
• Maintain service functionality and security

We do not use your data for automated medical diagnosis or profiling with significant effects.

5. How We Store and Protect Data

Your data is stored on secure infrastructure (such as Supabase and Vercel). We apply:

• Encryption at rest and in transit
• Access restrictions
• Security monitoring
• Strict internal access policies

6. Sharing Your Data

We share the minimum necessary data with trusted third parties:

• Messaging platforms (Telegram, WhatsApp, Viber)
• Hosting providers
• Payment processors (Stripe, Lemon Squeezy)
• Analytics tools

We do not sell or lease your personal data.

We do not share it with advertisers.

7. International Data Transfers

If data is transferred outside the EU, we ensure:

• Standard Contractual Clauses (SCCs), or
• Other GDPR-compliant safeguards

8. Data Retention

We retain data only as long as necessary:

• Active users: until you withdraw consent or delete your data
• Inactive users: deleted after 12–24 months
• Payment and tax data: retained as required by law

After the retention period, data is permanently deleted.

9. Your Rights Under GDPR

You can:

• Request access to your data
• Correct inaccurate data
• Request deletion of your data
• Withdraw consent at any time
• Request data portability
• Object to certain processing activities

Send requests to: hello@getnutrips.com

Bot commands such as STOP or /delete may also be used to withdraw consent.

10. Cookies & Tracking

Our website uses cookies for:

• Functionality
• Analytics
• Performance improvement

You can manage or disable cookies in your browser settings.

11. Children's Privacy

Our services are intended for users 18+.

We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy periodically.

The "Last updated" date reflects the latest version.

13. Contact

For questions about privacy or GDPR rights:

Nutrips (Operator Name Available Upon Request)
Berlin, Germany
Email: getnutrips@gmail.com