Last updated: 8 September 2025
This Privacy Policy explains how Nutrea ("Nutrea", "we", "us", or "our") collects, uses, shares, and protects your personal data when you use our website and mobile application (together, the "Services"). Nutrea acts as the data controller under the EU General Data Protection Regulation (GDPR). Where processing is based on consent, you may withdraw it at any time (this will not affect the lawfulness of processing before withdrawal).
"Personal data" means any information relating to an identified or identifiable natural person.
"Special category data / health data" includes, for example, dietary habits, meal photos, weight, body metrics, intolerances, and goals. We only process such data with your explicit consent (GDPR Art. 9(2)(a)).
"Cookies/SDKs" are trackers placed on your browser or device (see Section 9).
| Purpose | Examples | Legal basis |
|---|---|---|
| Provide and operate the Services | Create/maintain your account; personalize content; core app features | Contract (Art. 6(1)(b)) |
| Nutrition features involving health data | Storing/viewing weight, goals, meal photos, recommendations | Explicit consent (Art. 9(2)(a)) |
| Customer support & communications | Responding to requests; service notifications | Contract (Art. 6(1)(b)) / Legitimate interests (Art. 6(1)(f)) |
| Security, fraud prevention, abuse | Access controls; monitoring suspicious activity | Legitimate interests (Art. 6(1)(f)) / Legal obligation (Art. 6(1)(c)) |
| Analytics & product improvement | Aggregated usage metrics, crash diagnostics | Legitimate interests (Art. 6(1)(f)); where required, consent |
| Marketing (emails, in-app, push) | News, offers, features | Consent (Art. 6(1)(a)) or legitimate interests with opt-out, per e-privacy rules |
| Comply with laws | Tax/audit, user rights requests | Legal obligation (Art. 6(1)(c)) |
| Business changes | M&A, reorganization | Legitimate interests (Art. 6(1)(f)) |
You may withdraw consent at any time in the App settings or by contacting us (see Section 17).
We do not sell your personal data. We share it only with:
Processors are bound by data processing agreements, confidentiality, and security obligations.
We primarily store data in the EEA. If personal data is transferred outside the EEA to a country without an adequacy decision, we use Standard Contractual Clauses (SCCs) and, where appropriate, supplementary measures; if a US recipient participates in the EU-US Data Privacy Framework, we may rely on that certification.
Subject to conditions and exemptions under the GDPR, you have the right to access, rectify, erase, restrict, object, data portability, and to withdraw consent at any time.
To exercise your rights, contact us (see Section 17). You also have the right to lodge a complaint with the Belgian Data Protection Authority (APD/GBA).
We use cookies (on the Site) and SDKs (in the App) to make the Services work, remember preferences, measure usage, improve features, and (with consent) deliver or measure marketing.
Types: Strictly necessary; Preferences/functional; Analytics; Marketing (only with consent).
On the Site, you can manage cookies via our [Cookie Banner/Preferences Center] and your browser settings. In the App, you can manage consent in Settings > Privacy.
We implement technical and organizational measures appropriate to the risk, including encryption in transit and at rest, access controls, least-privilege, monitoring, and staff confidentiality commitments. No system is 100% secure; we continuously improve our safeguards.
Our Services are not intended for children below the age at which they can lawfully consent to online services. Where consent is the legal basis, parental consent is required below that age. In Belgium, the age of digital consent is 13 for information society services.
If you believe a child has provided personal data without appropriate consent, contact us and we will take steps to delete such data.
Some features may request device permissions (e.g., camera or photos to log meals; notifications for reminders). You can change permissions in your device settings. Certain features may not work without the relevant permission.
We do not engage in automated decision-making that produces legal or similarly significant effects. We may use limited profiling (e.g., tailoring nutrition insights) to improve your experience; you can disable such features where based on consent.
The Services may link to third-party sites or services. We are not responsible for their privacy practices. Review their policies before providing data.
We may update this Policy from time to time. We will post the updated version on this page and, if changes are material, notify you via email or in-app notice before they take effect. The "Last updated" date shows the latest revision.
Questions about this Policy or about your data?
Email: contact@foodways.be
Postal address: Elif Ergun, Avenue des pagodes, 430, 1020 Brussels, Belgium
Supervisory authority: APD/GBA, Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be