How we look after the information you share with Nourish.
Version 2026-09-07-draft · effective 2026-09-07
The data controller for Nourish is Anna Harris. You can reach us about anything in this notice at anna@thenutritionnurse.co.uk.
Your account details (email, display name) and the wellbeing information you choose to enter — including your GLP-1 medication, journey stage, symptoms, mood, hormonal status, fasting glucose readings, journal entries, and milestones. This is special-category health data and is given extra protection (see "Our legal basis"). We never ask for calorie counts, weight-loss targets, BMI, or clothing sizes.
We use your data only to run the app and personalise your experience: to show your check-ins and trends, tailor coaching content to your journey, and keep your account secure. We do not sell your data and we do not use it for advertising.
For your account and general use of the app, our legal basis is your consent (UK GDPR Article 6(1)(a)). Because the health and wellbeing information above is special-category data, we rely on your explicit consent (UK GDPR Article 9(2)(a)), which you give when you create your account. You can withdraw your consent at any time.
Your data is held in our managed database and authentication provider (Supabase, via Lovable Cloud), hosted in the United Kingdom (London region).
We keep your data for as long as your account is active. If you ask us to delete your data, or you delete your account, we will remove your personal data within 30 days. We may retain a minimal record where the law requires it.
Under UK GDPR you have the right to:
We handle deletion requests manually at this stage and will complete them within 30 days.
This is an early draft and will change as the product and our legal review progress. When we make material changes, we will update this page.