How NutriMax uses and protects data

1. About this policy

NutriMax is an informational app for analysing food products, nutrition labels and ingredient lists. An account is not required for basic local use. Users may voluntarily create an account for authenticated features such as submitting product contributions.

This policy applies to the NutriMax mobile app and nutrimax.com.hr.

2. Data Controller and App Distribution

NutriMax is developed and operated by Igor Magić. The application is distributed on Google Play through the developer account Magical studio, owned by Leon Magić. Igor Magić determines the purposes and means of processing personal data and acts as the data controller within the NutriMax application for the purposes of this Privacy Policy.

Leon Magić / Magical studio acts as the developer account holder and publisher through which the app is made available on Google Play, while operational management of NutriMax and decisions regarding personal data processing are carried out by Igor Magić.

Privacy and data protection contact: igormagichr@gmail.com

3. Data stored on the device

Most working data is stored locally. This may include scan history; barcodes, nutrition values, ingredients and analyses; manual corrections; preferences and priorities; language; data used for general and personal ratings; and unsent reports or corrections.

Local data also includes favourites, shopping lists, comparison selections, saved product photos, recent search results and contributions queued for sending.

Local data remains until the user deletes it, clears app data or uninstalls the app. Automatic recovery after removing the app or changing devices may not be possible.

4. Account and authentication

Users may create an account with an email address and password. Authentication is provided by Supabase Auth. NutriMax cannot see the original password. Registration and account security may process the email address, technical user identifier, session data, registration and login times, and limited security logs.

5. Camera and label scanning

The camera is used only after the user starts barcode, nutrition-table or ingredient scanning. It is not activated in the background. Text recognition is normally performed on the device, and starting a scan does not by itself upload the photo to NutriMax.

A signed-in user may voluntarily submit selected product photos for verification and moderation. OCR may be inaccurate, so the original package must be checked, especially for allergies, intolerances and special dietary needs.

6. Barcodes and external data sources

A scanned barcode may be sent to the NutriMax service and external product-data sources, including Open Food Facts, to find product information. Providers may technically process an IP address, request time and data needed for network communication under their own privacy terms.

When product search is used, the search text and selected language may be sent to the NutriMax service to retrieve results. Open Food Facts is used for barcode lookup; general text search is not sent to that source. Some results are cached locally for later access.

7. Preferences and personalisation

Users may select dietary preferences and priorities such as calories, sugar, salt, sport-related goals, vegetarian or vegan choices, and ingredients to avoid. They customise app information and the Personal NutriMax Rating; they are not medical records and are not used to diagnose a condition. Do not enter diagnoses, medical reports or other sensitive health data.

8. Product contributions and photos

A signed-in user may submit a new product or a correction. A contribution may include account and contribution identifiers, barcode, product name and brand, ingredients, nutrition values, language, submission time, app version and selected photos.

After the user requests submission, the contribution and data needed to send it may remain in a local queue associated with the account. Sending can resume when a connection is available and the app is active or reopened. Saving a local correction alone does not submit it to the shared database.

The data is used to receive, review and moderate contributions, prevent abuse, communicate status and potentially add verified facts to the NutriMax database. Accepted factual product data may remain without a public link to the account.

9. Messages, reports and suggestions

Voluntary messages may include the name and email entered by the user, message content, product barcode or name, problem description, app version and limited technical context. Do not include passwords or sensitive personal or health data.

10. Website technical data

The hosting provider may automatically log standard technical data such as IP address, access time, requested page and browser type for security and reliable operation. The site may store the light or dark theme choice locally in the browser; it is not used for advertising or user tracking.

11. Purposes and legal bases

Data is processed only as needed to perform user-requested functions; store local settings and history; register and protect accounts; receive and moderate voluntary contributions; answer messages; secure and operate the service; and comply with legal duties. Depending on the activity, the legal basis may be action requested by the user, consent, legitimate interests in security and service improvement, or a legal obligation.

12. Service providers and data sharing

NutriMax does not sell personal data, share it with advertisers or use it to create advertising profiles. Limited data may be processed by Supabase for authentication, database, API and storage; Open Food Facts for public barcode-based product lookup; and hosting or email providers for website operation and message delivery.

Sharing a shopping list passes its current text to an app selected by the user. That app and the recipients then handle the shared content under their own rules. Later changes to the local list are not synchronised automatically with recipients.

13. Retention

Local data remains until the user deletes it or removes the app. Account data remains while the account is active and until deletion, subject to limited security or legal retention. Contributions and photos remain while needed for review, product records or justified retention. Contact messages and reports remain for communication, verification and reasonable legal protection periods. Hosting logs follow the provider's retention terms.

14. Data protection

Reasonable technical and organisational safeguards include encrypted network transfer, access control and separation of public and protected data. No electronic storage or transmission method can guarantee absolute security.

15. Children's privacy

NutriMax is not specifically directed to children. Minors should use it under the supervision of a parent or legal guardian. NutriMax does not knowingly request children's personal data.

16. Medical notice

NutriMax is an informational tool and not a medical device. Data, ratings and warnings are not medical advice, diagnosis or treatment. Product information may be incomplete, outdated or incorrectly recognised; always check the official package label.

17. User rights and account deletion

Depending on applicable law and circumstances, users may request access, correction, deletion, restriction, portability where applicable, objection, and withdrawal of consent without affecting earlier lawful processing.

Delete an account in Profile → User account → Delete user account, use the public deletion page, or email igormagichr@gmail.com from the address associated with the account. Users may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).

18. Changes to this policy

This policy may change when app features, processing activities, external services or legal requirements change. The updated version and date will be published on this page.

19. Contact

App: NutriMax
Development, Operation & Data Controller: Igor Magić
Google Play Distribution: Magical studio (Account holder: Leon Magić)
Privacy & Support Email: igormagichr@gmail.com