Privacy policy

01In brief

You are trusting us with health information. Here is the short version:

• We collect what we need to prepare your plan and support you through it, and nothing for advertising.
• We never sell your information, and we use no advertising or retargeting cookies.
• Your health information is seen only by the people who prepare and review your plan, and by the providers that store or process it for us (see section 05).
• Naap™ photos stay on your phone. We keep only your measurements.
• You can ask to see, correct or delete your information at any time, and you can delete your app account yourself.

The rest of this policy gives the detail.

02Who we are

NutriZaika is a virtual nutrition and metabolic health studio based in Pakistan, serving clients in Pakistan and worldwide. This policy covers our website nutrizaika.com and its pages (such as our plan form at intake.nutrizaika.com), the NutriZaika app, and our messages and plans by WhatsApp and email.

NutriZaika decides how and why your information is used, so we are responsible for it under data protection law as the data controller. We apply the standards in this policy to everyone, wherever you live.

03What information we collect

Information you give us

• Contact details: your name, email address and phone number, from our contact form, our plan form, the app, WhatsApp or email.
• Your messages: whatever you tell us about your goals, questions and concerns.
• Health information: what we need to prepare your plan, such as your age or date of birth, sex, height, weight, body measurements, medical history, diagnosed conditions, medications and supplements, pregnancy or breastfeeding, laboratory results (such as HbA1c, haemoglobin, vitamin D and thyroid tests), body composition scan results, allergies and intolerances, and any pain or injury that affects exercise.
• Food and routine: foods you love, foods you dislike, foods that disagree with you, foods you never eat, your meal times and fasting, activity, water, eating out, budget and work routine.
• Progress and check-ins: your weigh-ins and measurements, and your answers at the day-14 and day-28 check-ins, such as how closely you followed the plan, your hunger, any side effects, any change in your monthly cycle, your exercise sessions and any pain or dizziness, and anything else you tell us about how the plan is going.
• Dish ratings: whether you loved, liked or would rather not have a dish, and any short comment you add.
• Payment details: the amount, date and reference of your payment, and the proof of payment you send us. We never ask for your card number or banking password.
• Consent choices: a record of what you agreed to and when.

In the NutriZaika app

• Your account: your name and email address, and your phone number, country and city if you give them. We use your phone number only so our team can reach you on WhatsApp. The app does not send text messages to sign you in. Your country and city are the ones you type or choose, and the app never reads your phone's location. Your city is used to set Ramadan times in your plan.
• About you: your sex, date of birth, height, weight and waist, which you give once after you first sign in. They start your health profile and fill in your plan form for you.
• Signing in with Google or Apple: we receive your name and email address from them. Google also sends a link to your profile picture, which we do not use. If you choose Apple's Hide My Email, we receive Apple's private relay address instead of your email.
• Naap™: Naap™ measures your body from two photos. The photos are processed on your phone and never leave it, and we never receive them. The app deletes them as soon as you finish, unless you choose to save them to your phone's gallery. Only the measurements are saved to your account.
• Kept only on your phone: your meal answers, water and exercises done, drafts of forms and check-ins, and a copy of your account data for reading offline. They are cleared when you sign out or delete your account.

Information collected automatically

• Website analytics: on nutrizaika.com, Google Analytics 4 records the pages you view, your approximate location (country or city), your device and browser type, the site you came from and how you move through the site. Our plan form at intake.nutrizaika.com does not use analytics.
• Server and security data: our hosting provider and our security check process your IP address and technical details about your browser to serve pages, block spam and keep our forms safe. On our plans page, your IP address is also used to work out your country, so that prices show in PKR or USD.
• App updates: when the app checks for an update, our update provider sees your phone's IP address and the app's version.
• Naap™ usage statistics: to find your outline, Naap™ uses Google's MediaPipe software on your phone. While it runs, MediaPipe sends Google usage statistics about the software, such as which step ran, how long it took and whether it worked. They contain no photos, no measurements and nothing from your account. Google describes this at goo.gle/mediapipe-privacy.

Information about other people

If you give us information about someone else, please make sure they agree first.

04How we use your information

• To prepare and deliver your plan: building your plan, adjusting it after check-ins and revisions, and sending it to you.
• To support you: answering your messages, and running your check-ins and reminders by WhatsApp, email or in the app.
• To run your app account: signing you in, saving your progress and showing your plan.
• To take payment and keep records: confirming payments and keeping the accounts the law requires.
• To keep our services safe: blocking spam and misuse, and protecting your account.
• To improve our service: we look at totals across many clients, such as which dishes are loved most, to improve our recipes, plans, website and app. Totals cannot identify anyone.
• To send you recipes, programme news and offers: only if you ask for them. Marketing is always optional and never a condition of a plan. You can opt out at any time by replying "STOP" to any message or by emailing us.
• To meet our legal duties: keeping records and responding to lawful requests.

What we do not do. We do not sell your information. We do not use it for advertising or share it with advertisers. We do not track you across other companies' apps or websites. We do not make decisions about you by software alone: our nutritionist reviews every plan before it is sent to you.

05Who we share it with

Only the people who prepare and review your plan can see your health information. If your employer or a clinic arranges your plan, we do not share your health information with them unless you agree.

We use a small number of service providers to run our services. Where a provider works for us, it may use your information only to provide its service to us. Google also uses the Naap™ usage statistics described in section 03 to improve its MediaPipe software. Some services, such as WhatsApp, Google and Apple sign-in, and payment providers, also have their own terms and privacy policies, which apply when you use them.

When you pay by JazzCash, Easypaisa or bank transfer, your payment provider handles your payment under its own terms. We receive only the payment confirmation.

We may also share your information:

• When the law requires it, to protect someone's safety, or to establish, exercise or defend legal claims.
• If NutriZaika is sold or merges with another business. The new owner would have to protect your information as this policy describes, and we would tell you first.
• With your consent, for example with your doctor if you ask us to.

06International transfers

NutriZaika is based in Pakistan and serves clients in many countries. Our team works in Pakistan and Canada. Your information is stored and processed in Pakistan, Canada, Singapore, the United States and other countries where our providers operate, which may be outside the country where you live. Their data protection laws may differ from yours. We choose providers that protect your information, and we rely on their contracts and terms to require it.

07How long we keep it

08Deleting your account or your data

In the NutriZaika app: go to Profile, then Delete my account. This deletes your account and everything the app saved with it straight away: your profile, weigh-ins, measurements, plan forms, dish ratings and check-in replies. It also clears the information kept on that phone.

Without the app: email support@nutrizaika.com from the email address you use for your account, or message us on WhatsApp, and ask us to delete your account. We will confirm it is you and delete the account within 30 days.

Your client record: plans, forms and check-ins that our team has already used to prepare your plans are part of your client record, which we keep for 5 years after your last plan cycle (see How long we keep it). If you would like it deleted too, say so in your request and we will delete it, except for payment and accounting records the law requires us to keep.

09How we protect it

• Our website, forms and app use encrypted connections (HTTPS).
• In the app, access rules let each person see only their own information.
• Only the people who prepare and review your plan can see your health information.
• WhatsApp conversations are end-to-end encrypted by WhatsApp itself.
• Naap™ photos never leave your phone.

No method of sending or storing information is completely secure, and we cannot guarantee absolute security. Please avoid sending us documents you would not want stored. If you need to share lab reports, we will tell you the safest way to do it.

If a security breach affects your information, we will tell you, and the authorities where the law requires, as soon as we can.

10Your rights

Wherever you live, you can ask us to:

• Access: give you a copy of the information we hold about you.
• Correct: fix information that is wrong or incomplete. You can also change your name, phone number, country and city in the app at any time.
• Delete: delete your information, where we have no overriding reason to keep it (see Deleting your account or your data).
• Withdraw consent: withdraw any consent you have given, including consent to use your health information or to receive marketing. Withdrawing consent does not affect what we did before you withdrew it.
• Object or restrict: object to some uses of your information, or ask us to limit what we do with it.
• Portability: give you your information in a structured, commonly used format.

To use any of these rights, email support@nutrizaika.com. We will respond within 30 days. We may need to confirm your identity first, and someone acting for you will need your written permission. We do not charge for this, and we will never treat you differently for using your rights. If you withdraw consent to use your health information, though, we cannot continue your plan.

If we turn down a request, we will explain why. You can ask us to look at it again by replying to our answer. You can also complain to the data protection authority where you live (see sections 13 to 15).

11Cookies and similar technologies

• Google Analytics 4 sets cookies on nutrizaika.com to count visits and show us how the site is used. We use it only to understand and improve the site, and its advertising features are switched off. For visitors in the UK, the European Economic Area, Switzerland and Quebec, it runs without cookies.
• Cloudflare Turnstile checks that a form is being sent by a person and not a bot. It reads technical details about your browser to do this.
• Your browser keeps your plan form answers while you fill it in, so a closed tab loses nothing. They are cleared when you send the form or press Start over.
• The app keeps some information on your phone, as described in section 03.

We do not use advertising or retargeting cookies. You can block or delete cookies in your browser settings, or install Google's Analytics opt-out add-on. Blocking them will not affect your ability to use the site or contact us.

Some browsers send "Do Not Track" signals. We do not track you across other websites, so these signals do not change what we do.

12Children

Our services and the app are for adults aged 18 and over. We do not prepare plans for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

13If you live in Canada

• We follow Canada's federal privacy law for businesses (PIPEDA) and the provincial privacy laws that apply to you.
• We ask for your express consent before we collect health information.
• Your information is stored and processed in Canada and in other countries (see International transfers). While it is in another country, the courts, law enforcement and national security authorities of that country may be able to access it under that country's laws.
• Our Privacy Officer is responsible for how we handle personal information. You can reach them at support@nutrizaika.com.
• If a breach creates a real risk of significant harm to you, we will tell you and report it to the Office of the Privacy Commissioner of Canada.
• If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada or, in Quebec, Alberta or British Columbia, your provincial privacy commissioner.

14If you live in the United States

• No sale and no targeted advertising: we do not sell your personal information or your health information, and we do not use or share it for targeted advertising.
• Consumer health data: some states, such as Washington, Nevada and Connecticut, protect consumer health data, which is information that identifies you and relates to your health, such as your conditions, medications, weight and body measurements. We collect and use it only to provide the services you ask for, or with your consent. We share it only with the providers in section 05 that process it for us, or with your consent. You can ask to see it, ask us to delete it, withdraw your consent, and ask for a list of the providers that receive it.
• Your rights: depending on your state, you may have the right to know what we collect, and to access, correct, delete or get a copy of your information. Use the contact details in Your rights. To appeal a decision, reply to our answer with the word "Appeal". If we still decline, you can contact your state's attorney general.
• California: we do not share personal information with other businesses for their own direct marketing.

15If you live in the UK or the European Union

UK and EU data protection law asks us to name the legal basis for each use of your information:

• Contract: preparing, delivering and supporting your plan, and running your app account.
• Explicit consent: using your health information, and sending you marketing.
• Legitimate interests: running, securing and improving our website and app, and understanding how the site is used where consent is not required.
• Legal obligation: keeping payment and accounting records.

Pakistan has not been the subject of a UK or EU adequacy decision. When your information is transferred from the UK or the European Economic Area, we rely on your explicit consent to the transfer and on contracts with our providers. If you would prefer your information not to leave your own jurisdiction, we will not be able to provide the service. Please contact us to discuss this before sharing anything.

You can complain to your data protection authority. In the UK, that is the Information Commissioner's Office.

16Changes to this policy

We may update this policy as our services or the law changes. The "last updated" date at the top of this page always shows the current version. If we make a material change to how we use your information, we will tell clients and app users directly, by email, WhatsApp or in the app, before it applies.

17Contact

Questions about this policy, or about the information we hold about you:

NutriZaika
Pakistan and worldwide
Email: support@nutrizaika.com (Privacy Officer)
Phone / WhatsApp: +92 333 294 2777