NutriomealsPrivacy policy
This policy explains what data we collect when you use the Nutriomeals app, why we collect it, who we share it with, and your rights over it.
Draft for legal review before publishing. Highlighted items need to be completed.
On this page
Who we are
Nutriomeals is a meal subscription service operating in Saudi Arabia, run by [legal entity name], commercial registration [CR number], address [national address]. We are the controller of your personal data under the Saudi Personal Data Protection Law (PDPL).
Data we collect
| Category | Examples | Purpose |
|---|---|---|
| Account | Mobile number, name, email (optional) | Create your account, sign you in with a verification code, contact you |
| Delivery | Addresses, address location on the map, delivery notes | Deliver your meals and check delivery coverage |
| Food preferences | Allergies, preferred and disliked ingredients | Prepare meals that respect your choices |
| Logs and measurements | Meals, water, weight and measurements you log | Show your progress and reports in the app |
| Subscription and payments | Plan, transactions, invoices, refunds | Run your subscription, issue invoices, meet legal requirements |
| Technical | Device type, app version, IP address, error logs, notification token | Operate and protect the service, send notifications |
Measurements and some food preferences may count as health data. We only collect them when you enter them yourself, and use them only to show them to you and tailor your meals.
Card details: payments are processed by the Moyasar payment gateway. We don't store your full card number or security code.
What we don't do
- We don't sell your personal data.
- We don't use your data for advertising or to track you across other companies' apps and websites.
Who we share data with
We share only the minimum needed to provide the service, with:
- Payment provider Moyasar, to process payments and refunds.
- Messaging providers (SMS, WhatsApp, email), to send verification codes and notifications.
- Delivery staff: name, mobile number, address and delivery notes.
- Hosting and infrastructure providers such as Cloudflare, to run the app and store data.
- Authorities, when the law requires it.
Some of these services may process data outside Saudi Arabia; where they do, we follow the applicable data transfer rules. [confirm processing locations and safeguards]
Retention
- We keep your account data while your account is active.
- When you delete your account, we delete or anonymize your profile, addresses, settings and logs.
- We keep issued invoices for the period the law requires, at least six years under ZATCA requirements.
- We keep your mobile number for 90 days after deletion to prevent abuse; it can't be used to sign up during that time.
Your rights
Under the PDPL you have the right to be informed about how your data is processed, to access and obtain a copy of it, to correct it, to request its deletion, and to withdraw your consent. You can edit most of your data directly in the app, or write to support@nutriomeals.app. You may also lodge a complaint with the Saudi Data and AI Authority (SDAIA).
Deleting your account
You can delete your account from inside the app at any time. See Delete account.
Security
We encrypt data in transit, limit access to people who need it for their work, and review our practices regularly. No protection is perfect, so never share your verification code with anyone.
Children
The service is intended for people aged [18] and over. If you learn that a child gave us data without a guardian's consent, contact us and we'll delete it.
Changes to this policy
We may update this policy. We'll show the last-updated date at the top of this page and notify you in the app about significant changes.
Contact
For any privacy question, write to support@nutriomeals.app.