Nutrishift Privacy Policy
Who we are
Nutrishift Ltd runs the Nutrishift website and mobile app, and is responsible for your personal data. Our registered address is 57 Walham Grove, London SW6 1QR, UK and our company number is 15665203.
This policy explains what we collect, why, who sees it, how long we keep it and what you can ask us to do. It covers www.nutrishift.co.uk and the Nutrishift app for iPhone and Android.
You can reach us at contact@nutrishift.co.uk.
What we collect
We collect what you give us when you join and use Nutrishift, plus basic usage data from the website. We don't show advertising or sell your data, and the app doesn't track you across other companies' apps or websites.
| Information | Where it comes from |
|---|---|
| Your first and last name, email address and language | You, during registration. Google gives us your name and email if you sign in with Google |
| Your password | You. It is held by our login provider, and we can't see it |
| Your phone number | You, during registration. |
| Your application answers: why you are joining, whether you have done a similar programme, how you heard about us, and any allergies or dietary restrictions | You, during registration. |
| The date you passed our health check | You, during registration. We store only the date, not your answers to each question |
| The programmes you are enrolled in | Created when you register, or by staff |
| Payment records: amount, currency and Stripe's reference | Stripe. Your card details go directly to Stripe, and we never see them |
| Your recipe ratings and comments, with their dates | You, in the app |
| The comments you hide, and who hid them | You, in the app |
| Messages you send us | You, through our Contact page or by email |
| Pages visited and page performance on the website | Collected automatically by Vercel Analytics |
On your phone. The app keeps you signed in, and remembers your language and a copy of the information it has loaded. This stays on your phone until you sign out or remove the app. The Continue with Apple button sends us nothing: we don't receive or store your Apple account details.
How we use it
We use your information only to run Nutrishift, keep it safe and meet our legal duties. UK data protection law requires a legal basis for each use. If you live in the EU, the EU GDPR also applies to how we handle your data.
| What we do | Legal basis |
|---|---|
| Create and run your account, sign you in and show your language | Our contract with you |
| Enrol you in programmes and show you their recipes | Our contract with you |
| Take payment and keep payment records | Our contract with you, and our legal duties for tax and accounting |
| Consider your allergies and dietary restrictions | Your explicit consent, because this can be health information |
| Record that you passed our health check | Your explicit consent, because this says something about your health |
| Add you to your programme's WhatsApp group and contact you about your programme | Our contract with you |
| Show your ratings and comments to other participants | Our contract with you |
| Review hidden comments and act on abuse | Our legitimate interest in keeping the community safe |
| Answer your messages | Our legitimate interest in supporting you |
| Understand how the website is used | Our legitimate interest in improving it |
You can withdraw your consent at any time by emailing contact@nutrishift.co.uk. This doesn't affect anything we did before you withdrew it. If you withdraw consent for your health check date, you can't take part in a programme until you complete the check again.
Ratings, comments and blocking
Your ratings and comments are visible to other participants, shown with your first name only. Everyone who can see a recipe can read its ratings, whichever programme they are in. We never show them your last name, email address or programme. Please don't put personal information in a comment.
You can change or delete your own rating at any time. If your account is deactivated, your ratings and comments are hidden from other participants and left out of recipe averages. They come back if your account is reactivated.
If you block a comment. The rating and its comment are hidden from all participants straight away, and the rating no longer counts towards the recipe's average. We then email our team the recipe, the stars and comment, the writer's first name and participant number, and your login account, so we can review it. The writer can't see who blocked their comment.
If your comment is blocked. You will still see it in the app, but other participants won't, and we don't tell you it was blocked. You can delete it yourself at any time. If we find it breaks our community rules, we may delete it and deactivate your account. We aim to review blocked comments within 24 hours.
WhatsApp groups
Each programme has a WhatsApp group. We use your phone number to add you to it.
Who can see what. Everyone in the group, including our team, can see your phone number, your WhatsApp name and photo, and anything you post. Members could save or share this, even though our community rules forbid it, so please share only what you are comfortable with, especially about your health.
WhatsApp itself. WhatsApp is a separate service run by Meta. It doesn't act for us: it decides how it uses your data under its own terms and privacy policy.
You can leave a group at any time. Your messages may stay visible to the group unless you delete them in WhatsApp.
Who we share it with
We share your information only with the service providers below, who act for us, with the other members of your WhatsApp group as described above, and with authorities when the law requires it. We don't sell it.
| Provider | What they do | Information they handle |
|---|---|---|
| Supabase | Database, login and recipe image storage | Your account, application answers, enrolments, payment records, ratings and comments |
| Vercel | Website hosting and analytics | Information passing through the website and app, and website usage |
| Stripe | Card payments | Your payment and card details, and our reference for you and your programme |
| Resend | Sending email | Your email address, and the contents of invite, password reset, Contact page and blocked comment emails |
| Sign-in, only if you choose it | Your name and email address |
Each provider must give your data the same or equal protection as this policy and the Apple and Google app store rules require.
Some providers process data outside the UK, including in the United States. Where they do, we rely on safeguards recognised under UK law and, where it applies, EU law, such as the UK government's adequacy decisions or standard contractual clauses.
How long we keep it and how to delete it
We keep your information while your account exists, and delete it when you ask us to, except where the law requires us to keep it.
| Information | How long we keep it |
|---|---|
| Your account, application answers, health check date and enrolments | Until you delete your account |
| Ratings and comments | Until you delete them or your account, or we remove them |
| Payment records | 6 years after the payment, as tax and accounting law requires |
| Blocked comment emails and messages to us | 2 years |
| Registrations that were never completed | 12 months |
Deleting your account. Go to Settings in the app and choose Delete account, or email contact@nutrishift.co.uk. We will delete your account, your application answers, your health check date and your ratings and comments within 30 days.
Deleting a rating. Open the recipe's Ratings tab and press Delete.
Withdrawing consent. Email contact@nutrishift.co.uk. You can also stop using Google sign-in in your Google account settings.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or send it to you in a portable format. You can also object to uses based on our legitimate interests. Email contact@nutrishift.co.uk, and we will reply within one month.
You have the right to complain to us about how we handle your data. Email contact@nutrishift.co.uk: we will acknowledge your complaint within 30 days and tell you the outcome without undue delay. You can also complain to the UK Information Commissioner's Office at ico.org.uk, or to your local data protection authority if you live elsewhere.
Children
Nutrishift is for adults aged 18 or over. We don't knowingly collect data from children. If you think a child has given us their data, please contact us and we will delete it.
Changes to this policy
We will update this page when our practices change, and tell you in the app or by email about important changes. Last updated: 1 November 2026.