Last updated 2 October 2026
The controller under the EU General Data Protection Regulation (GDPR) is:
Manas Behera
Im Stöckig 125b, 90765 Fürth, Germany
Email: shrutikaiq@gmail.com
See also our Impressum.
If you use Nutivio as a guest (no account), we receive no personal data from you. Everything below under "on your phone" applies.
If you create an account or sign in with Apple or Google:
We use this to create and secure your account, let you sign in, send the verification and password-reset emails you ask for, and prevent abuse. Legal basis: performing our agreement with you (Art. 6(1)(b) GDPR) and our legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR). The same bases apply to product lookups, which are needed to show you what you scanned.
On your phone only (not sent to us): your scan history, your shopping list, a temporary copy of product information you have looked up (so repeat scans are quick and work offline), your food preferences (allergies, nutrients and ingredients you want to avoid, which can reveal health information), your appearance settings (colour theme, light/dark mode, text size), and how many guest scans you have used. You can set up preferences for several people you shop for (for example a child with an allergy); their names and preferences are stored the same way, only on your phone. Your food preferences are only ever used on your phone, to compare the products you scan against what you told us; they are never sent to us, to Open Food Facts or to anyone else. Nutivio does not upload these. They are removed when you choose Profile → Delete my data or delete the app.
Camera. Nutivio asks for camera access only to read product barcodes. Barcodes are read on your phone; no photos or video are saved or sent anywhere. You can withdraw permission at any time in iOS Settings.
Product lookups. After a barcode is read, the app asks Open Food Facts for that product's information. What is sent is the barcode number (never a photo). Open Food Facts' servers also see your IP address and the type of device, as any web service does. We do not send your name, email address or account details with these requests, and the lookups are not linked to your account by us.
Adding a missing product. If a product isn't in the database, you can add it. The photos you choose are read for text on your phone (nothing is uploaded for that step). Products you add are stored on your phone, together with the shop you named. Only if you tick the box to share, the product details (name, brand, pack size, the shop where you found it, nutrition values, ingredients, allergens) and the photos you took of the pack are sent to Open Food Facts, where they become public under open licences (data: Open Database Licence; photos: Creative Commons Attribution-ShareAlike) and cannot be withdrawn from copies others have made. Photos of the pack can only show what is on the pack, so please don't include people or personal items in the frame. We send a random identifier generated on your phone, not linked to your name, email or account, so that Open Food Facts can tell contributions apart. Shared entries use the app's own contributor account at Open Food Facts, not yours.
What we don't do. No advertising, no analytics or tracking tools, no location data, no sale or sharing of your data for marketing. The app does not collect health data about you: the scores describe food products, not you.
Some processing may take place outside the European Economic Area, for example in the United States. Where that happens we rely on safeguards such as the EU–US Data Privacy Framework or Standard Contractual Clauses.
Account data is kept until you delete your account. In the app, Profile → Delete account removes your account immediately (and revokes the Sign in with Apple link if you used it). Short-lived technical logs and backups at our provider may remain for a limited time afterwards.
You have the right to access your data, have it corrected or erased, restrict or object to its processing, receive it in a portable format, and withdraw any consent you gave (Art. 15–21 GDPR). To use these rights, write to the address in section 1. You can also lodge a complaint with a data protection authority, for example the one responsible for your place of residence, or the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) for the controller's location in Bavaria.
Nutivio is meant for everyone who shops for food. If you are under 16, please ask a parent or guardian before creating an account.
If we change what data the app handles, we will update this page and the date above, and tell you in the app where the change is significant.
Questions about privacy: shrutikaiq@gmail.com