Privacy Policy — NutriNest
The short version
Everything you enter stays on your device. NutriNest has no server, no cloud accounts, no analytics, no advertising SDKs and no trackers. We cannot see your data, and we cannot sell what we cannot see.
Who we are
NutriNest is published by AxiomPoint. In this policy, “we” and “us” mean AxiomPoint, and “the app” means NutriNest.
What the app stores, and where
All of the following is stored only in the app's private storage on your device, and is never transmitted to us or to anyone else by the app:
- Account details — your email, display name, and a salted hash of your password. The password itself is never stored.
- Child profiles — name, birthdate, sex, allergies, dietary notes and any custom nutrition goals.
- Your records — food logs, reactions, meal plans, lunchboxes, recipes, pantry and grocery lists.
- Photos you attach — to a child's profile, a recipe, or a scanned product. These are stored only on your device, never uploaded anywhere, and are deleted when you delete the profile or your account.
Your NutriNest account is local to the device. It exists to keep separate families' data apart on a shared phone or tablet — it is not an account with us, and signing in does not reach any server of ours.
What leaves your device
There are exactly two things, and both are optional.
1. Food and barcode lookups
If you use the “Search USDA database” button, the app sends your food-name search text (for example, “greek yogurt”) to the U.S. Department of Agriculture's public FoodData Central API to fetch nutrition data. Name searches go only to USDA, never anywhere else.
If you scan or type a product barcode, the app sends only that barcode number — first to USDA FoodData Central, and only when USDA has no match, to Open Food Facts, a public community-maintained food database, as a fallback for the product's label data. The barcode number is also sent to Open Food Facts to find a product photo for the scan card; your device then loads that photo directly from Open Food Facts' servers. The photo is decoration only and never affects allergen or nutrition information. The app caches the photo's address — a URL of a few kilobytes, cleared when you delete your account — not the picture itself, though the picture may pass through your operating system's own image cache, which deleting your account cannot clear.
As with any web request, USDA and Open Food Facts each see the network (IP) address the request comes from, and handle their API traffic under their own privacy policies. What the app sends is food identifiers only — never names, profiles, allergies, or any health information. If you paste your own api.data.gov key into Settings, that key accompanies USDA requests. Camera barcode scanning reads the number on the spot; no photo is captured or stored.
2. Retailer links
Tapping a “Buy” or “Shop” button opens your browser at a retailer's search page. What happens on the retailer's site is governed by their privacy policy. Where affiliate programs are active, the link carries a tag identifying NutriNest — never you. The app discloses this where the links appear.
That is the complete list. The app makes no other network requests.
Children's privacy
NutriNest is directed at parents and guardians, who enter and control all information about their children. The “Kid Choice” feature lets a child briefly handle the device to pick foods from a parent-approved list; during this the app collects nothing from the child — taps simply select foods locally, and a parent must confirm the result.
We do not collect personal information from children, or from anyone, because no data is transmitted to us at all. Child profile data exists solely on the family's own device, under the parent's control.
What we never do
No analytics or telemetry. No advertising or ad identifiers. No sale or sharing of data — there is nothing to sell. No cloud backup by us, though your device's own operating-system backup may include app data under your platform account and settings. No third-party SDKs that phone home.
Security
Data is stored in the app's sandboxed private storage. Passwords are salted and hashed. Because the data is local-only, its security also depends on your device's own protections — please use a passcode and keep device encryption on.
Your choices and rights
Review or edit anything in the app directly. Export nutrition summaries from the Pediatrician Summary screen. Delete everything through More → Delete account & all data, or by uninstalling the app — see the account deletion page for step-by-step instructions. Because we hold no data, there is nothing for us to provide, correct, or erase on request; you hold all of it.
Changes and contact
We will update this policy if the app's behavior changes. If optional cloud sync ever ships, it will arrive with its own explicit consent flow and a revised policy. Material changes will be noted in the app.
AxiomPoint — support@axiompointlabs.com