Legal

Privacy Policy

Last updated: 1st August 2026

1. Introduction and Scope

This Privacy Policy describes how Vellemont LLC (“NutritionLedger,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you:

  • visit the NutritionLedger website;
  • create an account or make a purchase;
  • download, install, or use the NutritionLedger desktop application;
  • contact us for support or other inquiries; or
  • otherwise interact with our Services.

This Privacy Policy is incorporated into our Terms and Conditions . Capitalized terms used but not defined in this Privacy Policy have the meanings given to them in the Terms.

In short: We collect your name, email, password and purchase information to create your account and process your order. We do not sell your personal information.

1.1 Important Local-First Notice

NutritionLedger is a local-first application. The health, nutrition, exercise, measurement, and other wellness information that you enter into the desktop application is stored locally on your own device. NutritionLedger does not upload, synchronize, store, or back up that information on our servers.

This Privacy Policy therefore covers two separate categories of information:

  • Website and account information — collected when you create an account, make a purchase, or contact support; and
  • Local health and nutrition information — entered into the desktop application and remaining on your device unless you choose to export or share it.

Because we do not have access to your local health data, we cannot see, recover, or process that information. You are responsible for protecting and backing up your own local data.

2. Definitions

For the purposes of this Privacy Policy:

Account Information means the information you provide when you create or manage your NutritionLedger account, including your name, email address, username, and password.

Cookies means small text files that are placed on your device when you visit the NutritionLedger website. Cookies help us recognize your browser and remember certain preferences or settings.

Device Information means technical information about the device on which the NutritionLedger desktop application is installed, including the operating system version, application version, and device type, which may be used for license verification and update checks.

Local Health Data means the health, nutrition, exercise, measurement, symptom, medication, supplement, and other wellness-related information that you enter into the desktop application. Local Health Data is stored on your device and is not uploaded to NutritionLedger servers.

Personal Information means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual, household, or device. Personal Information may include Account Information and Purchase Information, but does not include Local Health Data, which remains on your device and is not accessible to NutritionLedger.

Personal Agent means the optional companion feature within NutritionLedger that allows you to interact with the desktop application through supported third-party messaging platforms, such as Telegram.

Purchase Information means information related to your one-time license purchase, including transaction identifiers, purchase date, payment status, and license activation details. Payment card details are not included because they are processed by a third-party payment processor.

Services means the NutritionLedger website, the desktop application, the Personal Agent, and any related support or features provided by us.

Third-Party Services means websites, platforms, software components, payment processors, analytics providers, support platforms, or other services not owned or operated by NutritionLedger. This includes Stripe, Google Analytics, Zendesk, GitHub Releases, Telegram, and ZeroClaw.

Usage Information means information about how you interact with the NutritionLedger website, such as pages visited, links clicked, and other browsing activity, collected through cookies and analytics tools.

ZeroClaw means the open-source software component used to provide the Personal Agent functionality. ZeroClaw is not owned or developed by NutritionLedger and is provided under its own separate open-source license terms.

3. Information We Collect

The information we collect depends on how you interact with NutritionLedger. This section explains the categories of information we may collect, why we collect it, and how it is collected.

3.1 Account Information

When you create an account on the NutritionLedger website, we collect the information you provide, such as:

  • name;
  • email address;
  • username; and
  • password or authentication credentials.

Your Account Information is used to create and manage your account, verify your identity, authenticate you when you log in to the desktop application, and provide you with access to the Services.

3.2 Purchase Information

When you purchase a NutritionLedger license, we collect information related to the transaction, including:

  • transaction identifier;
  • purchase date;
  • payment status; and
  • license activation details.

We do not collect or store your full payment card details. Payment processing is handled by Stripe, our third-party payment processor. Stripe collects your payment information in accordance with its own privacy policy and terms of service.

3.3 Local Health Data

The desktop application stores the health and nutrition information you enter locally on your device. This may include:

  • food and meal logs;
  • water intake;
  • exercise and workout records;
  • fasting sessions;
  • body measurements and weight history;
  • symptom and mood check-ins;
  • medications, allergies, supplements, and intolerances; and
  • personal health profile and preferences.

Local Health Data is stored only on your device. NutritionLedger does not upload, synchronize, or store Local Health Data on our servers. We do not have access to this information unless you choose to share it with us, for example by attaching an export to a support request.

3.4 Support Communications

If you contact us for support or send us an inquiry, we may collect:

  • your name and email address;
  • the content of your message; and
  • any information you choose to provide or attach.

Support requests are handled through Zendesk, our third-party customer support platform. Zendesk may process your communications in accordance with its own privacy policy.

3.5 Device and Version Information

To verify your license and check for available updates, the desktop application may transmit limited technical information, including:

  • application version;
  • operating system version; and
  • device type.

This information is used solely to determine whether an update is available and to ensure that your license is valid. Version checks are performed through GitHub Releases.

3.6 Usage Information and Cookies

When you visit the NutritionLedger website, we may automatically collect certain information about your interaction with the site, such as:

  • pages visited;
  • links clicked;
  • browser type;
  • approximate location derived from your IP address; and
  • date and time of your visit.

We use cookies and similar technologies to collect Usage Information. We use Google Analytics to help us understand how visitors use the website and to improve our services. Google Analytics may collect information in accordance with its own privacy policy.

3.7 IP Address and Logs

Like most websites, our website servers log certain technical information, including your IP address, for security, fraud prevention, and diagnostic purposes. This information is used to protect the website and our users from malicious activity.

3.8 Marketing and Promotional Communications

If you choose to receive marketing communications from us, we collect your email address and may use it to send you updates, offers, or other information about NutritionLedger. Every promotional email includes an unsubscribe link. You may opt out of marketing communications at any time by clicking the unsubscribe link or by contacting us at [email protected].

4. How We Use Information

We use the information described in this Privacy Policy for the following purposes:

4.1 To Provide and Operate the Services

We use Account Information and Purchase Information to:

  • create and manage your account;
  • authenticate you when you log in to the website or desktop application;
  • process your license purchase and activate your software; and
  • provide you with access to the Services and any related support.

4.2 License Verification and Updates

We use Device and Version Information to:

  • verify that your license is valid;
  • check whether an update is available through GitHub Releases; and
  • ensure compatibility with supported operating systems.

4.3 Customer Support

We use Support Communications to:

  • respond to your inquiries;
  • diagnose and resolve technical issues;
  • send you service-related information; and
  • improve our support resources.

4.4 Marketing and Promotional Communications

If you have opted in to receive marketing communications, we may use your email address to:

  • send you product updates, tips, and news about NutritionLedger;
  • inform you about features or offers that may be relevant to you; and
  • invite you to participate in surveys or feedback opportunities.

You may unsubscribe from marketing emails at any time by using the unsubscribe link provided in each email. Unsubscribing from marketing communications will not affect transactional emails related to your account, license, or support requests.

4.5 Website Analytics and Improvement

We use Usage Information, including data collected through Google Analytics and cookies, to:

  • understand how visitors use the NutritionLedger website;
  • identify areas for improvement;
  • measure the performance of our content and pages; and
  • improve the overall user experience.

4.6 Security and Fraud Prevention

We use Account Information, IP address logs, and Usage Information to:

  • monitor for suspicious or unauthorized activity;
  • protect the website and our users against fraud, abuse, and security threats;
  • investigate and respond to security incidents; and
  • enforce our Terms of Service.

4.7 Legal and Compliance

We may use and retain certain information as necessary to:

  • comply with applicable laws, regulations, or legal process;
  • meet tax, accounting, or record-keeping obligations; and
  • exercise or defend our legal rights.

4.8 What We Do Not Do

We do not sell your Personal Information. We do not use your Personal Information for targeted advertising. We do not use generative AI to process your Account Information or Local Health Data. The desktop application uses only rule-based insights and calculations that are performed locally on your device.

4.9 Local Health Data Is Not Used by NutritionLedger

Because Local Health Data is stored only on your device, NutritionLedger does not collect, access, use, or share that information. Any processing of Local Health Data occurs locally within the desktop application on your own device.

4.10 Legal Bases for Processing (EU and UK)

Where the GDPR or UK GDPR applies, we rely on the following legal bases for processing personal information:

  • Performance of a contract — for account creation, license verification, and payment processing.
  • Legal obligation — for tax, accounting, and other legal record-keeping requirements.
  • Legitimate interests — for security, fraud prevention, website analytics, and providing effective customer support.
  • Consent — for marketing communications and non-essential cookies where required by law.

You can find additional information about your rights and our processing activities in our Regional Privacy Policy

Important: We only use the website, account, purchase, and support information described above. Your health and nutrition records remain under your control and are not used by NutritionLedger for marketing, analytics, or AI training.

5. Local-First Architecture and Your Responsibilities

5.1 Local Storage

NutritionLedger is designed as a local-first application. The health, nutrition, exercise, measurement, symptom, and other wellness information that you enter into the desktop application is stored in a local database on your own device. This information is not uploaded, synchronized, or backed up to NutritionLedger servers.

We do not have access to your Local Health Data, and we cannot view, recover, restore, or provide you with a copy of that information. If you choose to export your data, the exported file is created locally on your device.

5.2 Your Responsibilities

Because Local Health Data remains on your device, you are responsible for:

  • maintaining the security of your device and operating system;
  • protecting your local data from unauthorized access;
  • creating and maintaining regular backups of your data;
  • restoring your data if your device is lost, damaged, or replaced; and
  • exporting or deleting your data before uninstalling the application or closing your account.

5.3 Account Deletion and Local Data

Deleting your NutritionLedger Account on the website does not automatically delete the Local Health Data stored on your device. If you wish to remove that information, you must delete it using the controls provided in the desktop application, or delete the local application data from your device manually.

5.4 Data Loss Risk

Because we do not store or back up your Local Health Data, we are not responsible for any loss, corruption, or unavailability of that information. You acknowledge and accept that the security and preservation of your Local Health Data is solely your responsibility.

Important: Regularly back up your device and use the built-in export features to protect your health and nutrition records.

6. Payment Processing

NutritionLedger uses Stripe, a third-party payment processor, to process payments for the one-time license purchase. When you purchase NutritionLedger, you are providing your payment information directly to Stripe, not to NutritionLedger.

6.1 Information Processed by Stripe

Stripe may collect, process, and store payment-related information necessary to complete your transaction, including:

  • your name;
  • payment card details or other payment method information;
  • billing address;
  • email address; and
  • transaction details.

Stripe’s use of your payment information is governed by Stripe’s own privacy policy and terms of service. We encourage you to review Stripe’s privacy policy before making a purchase.

6.2 Information NutritionLedger Receives

We do not collect or store your full payment card details. When you complete a purchase, Stripe provides us with limited transaction information necessary to manage your license, including:

  • transaction identifier;
  • purchase date;
  • payment status; and
  • license activation details.

This information is used to verify your purchase, activate your license, and provide you with access to the desktop application.

6.3 Purchase Records and Retention

We retain purchase records for legal, tax, and accounting purposes as required by applicable law, even if you later delete your NutritionLedger account. These records are limited to the transaction information described above and do not include your payment card details.

6.4 Refunds

If you are eligible for a refund under our Terms of Service, any approved refund will be processed through Stripe. Refund processing may take several business days depending on your payment provider. We do not control the timing of refunds once they are initiated.

6.5 No Recurring Billing

NutritionLedger is sold as a one-time purchase. There are no subscriptions, recurring charges, or automatic renewals. You will not be billed again after your initial purchase unless you make a separate purchase or we agree otherwise in writing.

6.6 Third-Party Payment Terms

By making a purchase, you agree to Stripe’s terms and conditions and privacy policy. NutritionLedger is not responsible for any errors, delays, or failures caused by Stripe or by your bank or payment provider.

7. Personal Agent, ZeroClaw, and Telegram

7.1 Optional Personal Agent

NutritionLedger includes an optional companion feature called the Personal Agent. You are not required to enable or use the Personal Agent to use the core features of NutritionLedger.

When enabled, the Personal Agent allows you to interact with the desktop application through supported third-party messaging platforms, such as Telegram.

7.2 ZeroClaw Open-Source Component

The Personal Agent is powered by ZeroClaw, an open-source software component. ZeroClaw is not owned, developed, or controlled by NutritionLedger. It is provided under its own separate open-source license terms, which are independent of this Privacy Policy.

ZeroClaw may store certain logs locally on your device to support its operation. We do not have access to those logs unless you choose to share them with us for support purposes.

7.3 Telegram and Third-Party Messaging

To use the Personal Agent, you must have an account with a supported third-party messaging platform, such as Telegram. Your use of Telegram is subject to Telegram’s own terms of service and privacy policy.

Messages sent through the Personal Agent may be processed, transmitted, or stored by Telegram before they reach the Application on your device. NutritionLedger does not control, and is not responsible for, the availability, security, or data-handling practices of Telegram or any other messaging platform.

7.4 Health Information and Third-Party Platforms

If you use the Personal Agent to log or query health-related information, that information may leave your local environment and pass through third-party messaging servers. You should carefully consider the sensitivity of the information you choose to send through the Personal Agent.

Important: Health-related messages sent through Telegram or any other third-party platform are subject to that platform’s privacy practices. Only connect the Personal Agent if you understand and accept these risks.

7.5 Your Responsibilities

If you choose to enable the Personal Agent, you are responsible for:

  • complying with the terms and policies of the messaging platform you connect;
  • complying with any applicable ZeroClaw open-source license terms;
  • configuring the Personal Agent correctly and securely;
  • protecting your messaging account credentials and personal information; and
  • understanding the privacy and security implications of sending health-related messages through a third-party platform.

7.6 No Endorsement or Control

NutritionLedger does not endorse or control Telegram, ZeroClaw, or any other third-party service used with the Personal Agent. We are not responsible for the content, accuracy, or reliability of any third-party service, and we do not guarantee that the Personal Agent will function without interruption, error, or security risk.

7.7 Availability and Support

The Personal Agent may be modified, limited, suspended, or discontinued at any time without notice. NutritionLedger has no obligation to provide support for issues arising from third-party messaging platforms, open-source components, or your local network environment.

8. Cookies and Analytics

8.1 Cookies

The NutritionLedger website uses cookies and similar technologies to recognize your browser and remember certain preferences. Cookies are small text files that are stored on your device when you visit the website.

We use the following categories of cookies:

  • Strictly Necessary Cookies — required for the website to function, including account login and secure areas. These cookies cannot be disabled.
  • Preference Cookies — remember choices you make, such as language or display preferences.
  • Analytics Cookies — help us understand how visitors use the website by collecting information about pages visited, time on site, and referring sources.
  • Marketing Cookies — may be used to measure the effectiveness of our marketing efforts and to show relevant content.

8.2 Cookie Consent

When you first visit the NutritionLedger website, you will be presented with a cookie consent banner that allows you to manage your cookie preferences. You may accept or decline non-essential cookies. Strictly necessary cookies will always be active because they are required for the website to operate.

Non-essential cookies, including analytics and marketing cookies, are not placed on your device until you provide consent through the cookie banner or Cookie Preference Center. If you choose to reject all non-essential cookies, only strictly necessary cookies will be used.

You can change your choices at any time by visiting our Cookie Preference Center

You can also control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, if you disable certain cookies, some parts of the website may not function properly.

8.3 Google Analytics

We use Google Analytics to understand how visitors interact with the NutritionLedger website. Google Analytics uses cookies to collect information such as:

  • pages visited;
  • time spent on pages;
  • referring website or source;
  • browser type and device category; and
  • approximate geographic location based on IP address.

Google Analytics may process this information in accordance with its own privacy policy. We use this data in aggregate form to improve the website and understand user behavior. We do not use Google Analytics to collect Local Health Data from the desktop application.

To learn more about how Google Analytics uses data, please review Google’s Privacy Policy.

8.4 IP Address Logs

Our website servers automatically log certain technical information, including IP addresses, for security, fraud prevention, and diagnostic purposes. This information is used to protect the website and our users from malicious activity. IP address logs are not combined with Local Health Data, which is stored only on your device.

8.5 Do Not Track

Some browsers offer a “Do Not Track” (“DNT”) signal. The NutritionLedger website does not currently respond to DNT signals. However, you can manage cookie preferences through our cookie consent banner or your browser settings.

8.6 Local Storage

In addition to cookies, the website may use browser local storage to remember certain preferences and improve your experience. Local storage is stored on your device and is not transmitted to NutritionLedger servers unless necessary for the operation of the website.

9. Third-Party Services

NutritionLedger uses a limited number of third-party services to operate the website, process payments, provide support, send emails, and deliver the Personal Agent feature. This section explains the third parties that may receive information and why.

9.1 Payment Processor — Stripe

We use Stripe to process one-time license purchases. When you make a payment, Stripe collects and processes your payment details, billing information, and transaction data in accordance with Stripe’s privacy policy. NutritionLedger does not store your full payment card details.

9.2 Website Analytics — Google Analytics

We use Google Analytics to understand how visitors use the NutritionLedger website. Google Analytics may collect Usage Information such as pages visited, browser type, device category, referring source, and approximate location derived from your IP address. Google processes this information according to its own privacy policy.

9.3 Customer Support — Zendesk

Support requests are handled through Zendesk. If you contact us for help, Zendesk may process your name, email address, and the content of your support request. Zendesk’s use of that information is governed by its own privacy policy and terms.

9.4 Transactional Email — AWS SES

We use Amazon Web Services Simple Email Service (“AWS SES”) to send transactional emails related to your account, license purchase, and support requests. AWS SES may process your email address and the content of those emails. AWS processes this information in accordance with its own privacy policy.

9.5 Marketing Email — ConvertKit

If you choose to receive marketing communications, we use ConvertKit to manage and send promotional emails. ConvertKit may process your email address, subscription preferences, and email engagement information. ConvertKit’s use of that information is governed by its own privacy policy.

9.6 Live Chat — Tawk.to

We may use Tawk.to to provide live chat support on the NutritionLedger website. Tawk.to is loaded only after you provide consent for optional cookies through our cookie consent banner or Cookie Preference Center.

If you use the chat feature, Tawk.to may process your IP address, browser information, and the content of your chat messages. Tawk.to’s use of that information is governed by its own privacy policy.

9.7 Update Checks — GitHub Releases

The desktop application may contact GitHub Releases to check for available updates. During this process, limited technical information such as application version, operating system version, and device type may be transmitted. GitHub processes this information in accordance with GitHub’s privacy policy.

9.8 Messaging Platform — Telegram

If you choose to use the Personal Agent, messages may be processed through Telegram. Telegram is an independent third-party platform, and any information sent through Telegram is subject to Telegram’s privacy policy and terms of service.

9.9 Open-Source Component — ZeroClaw

The Personal Agent is powered by ZeroClaw, an independent open-source software component. ZeroClaw is not owned, developed, or controlled by NutritionLedger, and it is provided under its own separate open-source license terms, which are independent of this Privacy Policy.

ZeroClaw may store certain logs locally on your device to support its operation. NutritionLedger does not have access to those logs unless you choose to share them with us for support purposes.

Because ZeroClaw is third-party software, NutritionLedger does not guarantee its security, reliability, or compatibility. We are not responsible for any errors, defects, security issues, or limitations in ZeroClaw, and we do not provide support or warranties for it. You are responsible for complying with any applicable ZeroClaw open-source license terms when using the Personal Agent.

9.10 Website Hosting and Infrastructure Providers

We use website hosting and infrastructure providers to operate the NutritionLedger website and manage account information. These providers may process Account Information, IP address logs, and related technical data as necessary to provide their services.

9.11 Legal and Business Disclosures

We may disclose Personal Information to third parties when required by law, such as to comply with a legal process, court order, or governmental request. We may also disclose information to professional advisers, auditors, or potential buyers in connection with a merger, acquisition, or business transfer, subject to confidentiality obligations.

Important: We do not sell your Personal Information to third parties, and we do not share your Local Health Data with any third-party service because it remains on your device.

10. Data Retention

We retain information only for as long as necessary to provide the Services, meet our legal and tax obligations, resolve disputes, and enforce our agreements. The specific retention periods vary depending on the type of information and the purpose for which it was collected.

10.1 Account Information

If you delete your NutritionLedger account, we will delete or deactivate your Account Information within a reasonable period, subject to any legal or tax requirements. In general, Account Information is retained for no longer than one (1) year after account closure unless a longer retention period is required by law.

10.2 Purchase Information

Purchase Information, including transaction identifiers, purchase dates, and payment status, is retained for as long as necessary to comply with tax, accounting, and other legal record-keeping obligations. This may be longer than one year after your last interaction with NutritionLedger. Purchase Information does not include your payment card details.

10.3 Local Health Data

Local Health Data is stored only on your device and is not under our control. It remains on your device until you delete it using the controls in the desktop application or remove the application data from your device. We do not retain or back up Local Health Data on our servers.

10.4 Support Communications

Support communications are retained for as long as reasonably necessary to respond to your inquiry, resolve technical issues, and maintain a record of support interactions. Support communications may be retained for a period of up to one (1) year after the matter is closed, unless a longer period is required for legal or security purposes.

10.5 Cookies and Analytics Data

Usage Information collected through cookies and Google Analytics is generally retained in aggregate or pseudonymous form. The retention period for analytics data is governed by Google Analytics’ data retention settings and our own configuration. We review and delete or anonymize analytics data when it is no longer needed for legitimate business purposes.

10.6 IP Address Logs

IP address logs collected for security, fraud prevention, and diagnostic purposes are retained for a maximum of thirty (30) days. After this period, IP address logs are deleted or anonymized unless a longer retention period is required by law or necessary for an ongoing security investigation.

10.7 Deletion Requests

If you request deletion of your Personal Information, we will take steps to remove it from our systems within a reasonable time, subject to any legal or regulatory exceptions. We may retain information where necessary to comply with legal obligations, resolve disputes, prevent fraud, or enforce our Terms of Service.

Important: Deleting your website account does not delete Local Health Data stored on your device. You must delete that information separately using the desktop application or your device’s file management tools.

11. Data Security

NutritionLedger takes reasonable technical and organizational measures designed to protect the information we collect and process. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11.1 Website and Account Security

We use industry-standard security practices to protect the NutritionLedger website and your Account Information, including:

  • encryption of data in transit using HTTPS;
  • secure storage of authentication credentials;
  • access controls to limit employee access to Personal Information; and
  • monitoring for suspicious or unauthorized activity.

11.2 Local Health Data Security

Your Local Health Data is stored on your own device and is not transmitted to NutritionLedger servers. The security of that information depends on the security of your device, your operating system, and any security software you use.

We are not responsible for unauthorized access to your Local Health Data that results from device theft, loss, malware, weak passwords, or failure to secure your device.

11.3 Account Credentials

You are responsible for maintaining the confidentiality of your account login credentials. You should:

  • choose a strong, unique password;
  • not share your password with others;
  • log out of your account when you are finished using the website; and
  • notify us promptly if you believe your account has been compromised.

11.4 Third-Party Security

Some services used by NutritionLedger, including Stripe, Google Analytics, Zendesk, Telegram, and GitHub, are operated by third parties and have their own security practices. We are not responsible for the security of information processed by those third-party services.

11.5 Incident Response

If we become aware of a security incident that affects Account Information or other website data, we will take reasonable steps to investigate and address the incident and, where required by law, notify affected individuals and relevant authorities.

Important: Because your Local Health Data remains on your device, NutritionLedger is not able to monitor, secure, or recover that information. You are responsible for protecting your device and backing up your data.

12. Your Privacy Rights

Depending on where you reside, you may have certain rights regarding your Personal Information. This section explains the rights that may apply to you and how you can exercise them.

These rights generally apply to Account Information, Purchase Information, Support Communications, and other information we collect through the website or when you contact us. They do not apply to Local Health Data, which remains on your own device and is not in our possession or control.

12.1 Access and Portability

You may request access to the Personal Information we hold about you. Where applicable, you may also request a copy of that information in a portable, machine-readable format.

12.2 Correction

You may request that we correct inaccurate or incomplete Personal Information we hold about you.

12.3 Deletion

You may request that we delete Personal Information we have collected from you, subject to certain legal exceptions. We may retain information where necessary to comply with legal obligations, resolve disputes, prevent fraud, or enforce our agreements.

12.4 Restriction and Objection

Where required by law, you may request that we restrict or stop processing your Personal Information. You may also object to certain processing activities, such as direct marketing.

12.5 Withdrawal of Consent

If we rely on your consent to process Personal Information, you may withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing that occurred before the withdrawal.

12.6 Marketing Communications

You may opt out of receiving promotional emails at any time by clicking the “unsubscribe” link in any marketing email or by contacting us at [email protected]. You may still receive transactional emails related to your account, license, or support requests.

12.7 California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (“CCPA”), including:

  • the right to know what Personal Information we collect, use, and disclose;
  • the right to access your Personal Information;
  • the right to request deletion of your Personal Information; and
  • the right to non-discrimination for exercising your privacy rights.

We do not sell Personal Information. We do not use Personal Information for targeted advertising. To exercise any California privacy rights, contact us at [email protected].

12.8 EU and UK Privacy Rights

If you are located in the European Union or the United Kingdom, you may have rights under the General Data Protection Regulation (“GDPR”) or UK GDPR, including:

  • the right to access your Personal Information;
  • the right to rectification;
  • the right to erasure (“right to be forgotten”);
  • the right to restrict processing;
  • the right to data portability;
  • the right to object to processing; and
  • the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at [email protected].

NutritionLedger is based in the United States. Because our processing of personal information is limited and does not involve large-scale processing of special category data, we rely on the exemption in Article 27 of the GDPR and UK GDPR and do not currently appoint an EU or UK representative. You may contact us directly at [email protected] with any privacy questions or requests.

12.9 Local Health Data

Because your Local Health Data is stored only on your device, you have direct control over that information at all times. You can view, edit, export, or delete Local Health Data using the controls provided in the desktop application. NutritionLedger does not have access to, and cannot provide access to, your Local Health Data.

12.10 How to Exercise Your Rights

To make a privacy request, please email [email protected] with the subject line “Privacy Request.” We may need to verify your identity before responding to certain requests.

12.11 Verification

To protect your privacy and security, we will take reasonable steps to verify your identity before fulfilling certain requests, such as access or deletion. We may ask you to provide information that allows us to confirm that you are the person associated with the Account.

12.12 Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

Note: Because NutritionLedger is a local-first application, many privacy rights related to your health and nutrition data can be exercised directly from your device by exporting or deleting the data yourself.

13. Children’s Privacy

NutritionLedger is intended for use only by individuals who are at least 18 years of age. The Services are not directed to children, and we do not knowingly collect Personal Information from individuals under the age of 18.

If we become aware that we have collected Personal Information from a person under 18 without verifiable parental consent, we will take reasonable steps to delete that information as quickly as possible.

If you are a parent or legal guardian and believe that a child under 18 has provided us with Personal Information, please contact us at [email protected] so that we can investigate and, if appropriate, delete the information.

Because Local Health Data is stored only on your device, NutritionLedger is not able to access or delete that information remotely. If a child under 18 has used the desktop application, you must delete the Local Health Data from the device using the controls provided in the application or by removing the application data from the device.

Important: By using NutritionLedger, you represent and warrant that you are at least 18 years old, as required by our Terms of Service.

14. International Data Transfers

NutritionLedger is based in the United States, and the website and account-related information we collect is processed and stored in the United States.

When you use the NutritionLedger website or contact us, your Account Information, Purchase Information, and Support Communications may be transferred to, and processed in, the United States and any other country where we or our third-party service providers operate.

Some of our third-party service providers, such as Stripe, Google Analytics, Zendesk, GitHub, and Telegram, may process information in countries outside your own. These countries may have data protection laws that are different from the laws in your jurisdiction.

14.1 Local Health Data

Your Local Health Data remains on your device and is not transferred to NutritionLedger servers. Therefore, international transfer concerns generally do not apply to that information.

If you choose to use the Personal Agent, health-related messages may pass through Telegram’s servers, which may be located outside your country. That transfer is controlled by Telegram and is subject to Telegram’s privacy policy and terms of service.

14.2 Safeguards

Where required by applicable law, we take steps to ensure that appropriate safeguards are in place when Personal Information is transferred internationally. For example, we select service providers who maintain reasonable security and privacy practices and who are subject to their own privacy obligations.

By using the Services, you acknowledge that your information may be transferred to, and processed in, countries other than your country of residence.

Note: Because NutritionLedger is a local-first application, the primary health and nutrition data you enter into the desktop app does not leave your device unless you explicitly choose to export it or use the Personal Agent.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the Services we provide.

When we make material changes, we will update the “Last Updated” date at the top of this page and may notify you by:

  • posting a notice on the NutritionLedger website;
  • sending an email to the address associated with your Account; or
  • displaying a notice in the desktop application where appropriate.

Changes to this Privacy Policy will become effective when the revised version is posted on the website, unless a different effective date is stated. Your continued use of the Services after the updated Privacy Policy has been posted means that you accept the revised policy.

If you do not agree to the updated Privacy Policy, you should stop using the Services and may close your Account.

It is your responsibility to review this Privacy Policy periodically for changes.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us using the details below.

Privacy and Data Requests

To exercise your privacy rights or make a privacy-related request, please email us at:

[email protected]

Support and General Inquiries

For general support or account-related questions, please use the same email address:

[email protected]

We will respond to legitimate privacy requests within a reasonable time and in accordance with applicable law.