WholeLiv is a nutrition and wellness application that helps you log meals, understand ingredients, track nutrition patterns, and receive personalised insights through artificial intelligence.
This Privacy Policy explains how Nouri Life LTD, registered in England, collects, uses, stores, shares, and protects your personal information when you use WholeLiv, including our mobile application, website, APIs, and related services.
In this Policy, “we”, “us”, and “our” mean Nouri Life LTD, which operates the WholeLiv application. “You” and “your” mean the person using WholeLiv.
For the purposes of UK data protection law and EU data protection law, including the UK GDPR and EU GDPR, Nouri Life LTD is the data controller of the personal information described in this Policy.
We do not sell your personal information. We do not share your health data with advertisers or marketing partners. We use personal information to provide, improve, secure, and support WholeLiv.
We collect information you provide directly, information generated when you use WholeLiv, information from your device, and limited information from service providers such as authentication and subscription providers.
We collect information needed to create, secure, and manage your account, including:
To personalise your experience and provide nutrition guidance, we may collect information such as:
Some of this information may be health-related or otherwise sensitive under applicable privacy laws. See “Health and Sensitive Data” below.
When you log meals, we may collect:
Meal and nutrition data can reveal information about your health, lifestyle, allergies, beliefs, or medical needs. We treat this data carefully and do not share it with advertisers.
If you use voice meal logging, we collect your voice recording only for the purpose of transcription and meal analysis.
WholeLiv does not store voice recordings after transcription. The audio is sent for transcription, converted into text, and then immediately discarded by WholeLiv. The resulting transcript, extracted ingredients, and meal log may be stored in your account if you save the meal.
Our AI services provider may retain API inputs and outputs, including transcription inputs, for up to 30 days for abuse monitoring before deletion, as described in “How Does WholeLiv Use Artificial Intelligence?”.
If you use the Nouri AI assistant, we collect and store:
Chat messages may include health, nutrition, or lifestyle information if you choose to include it.
If you subscribe to a paid plan or trial, we collect and receive subscription-related information such as:
Payments are processed by the applicable app store and subscription service providers. We do not receive or store full payment card numbers.
We collect technical information needed to operate, secure, and improve WholeLiv, including:
We collect product usage data to understand how WholeLiv is used and to improve the service. This may include:
Session recordings are configured to mask inputs and sensitive fields. They are used to diagnose usability issues and improve product experience, not for advertising.
If you contact us or submit feedback, we may collect:
We use your information for the purposes described below.
We use your information to:
We use your profile, preferences, wellness responses, goals, and meal history to tailor WholeLiv to you, including by:
We use account and authentication information to:
We use subscription data to:
We use analytics, feedback, usage data, and anonymised or aggregated information to:
We do not use your identifiable health data for advertising.
We use information to:
We may use your contact information to:
You can opt out of marketing communications at any time.
We may use and retain information where necessary to:
WholeLiv uses artificial intelligence services to provide meal analysis, transcription, nutrition insights, chat, and content safety features.
When you upload a meal photo for analysis, the image and any meal context you provide may be sent to our AI services provider to identify visible ingredients, estimate amounts, generate a meal title, and support nutritional summaries.
When you use voice meal logging, your audio is sent to an AI transcription service to convert speech into text.
WholeLiv does not store the voice recording after transcription. The transcript may be used to identify ingredients and create a meal log if you save it.
If you type a meal description, that description may be analysed by our AI services provider to identify ingredients, estimate amounts, and create a meal log.
WholeLiv may use meal data, ingredients, nutrition estimates, and your active goals to generate summaries, suggested questions, and personalised insights.
When you chat with the Nouri AI assistant, your message and relevant context, such as recent meal information, goals, dietary preferences, and allergens, may be sent to our AI services provider so the assistant can respond.
Uploaded images may be checked using AI-based moderation tools before they are stored or used. If an image appears to violate our safety policies, it may be rejected.
Our AI services provider does not use API data submitted by WholeLiv to train its models.
Our AI services provider may retain API inputs and outputs for up to 30 days for abuse monitoring and security purposes, after which they are deleted, unless a longer period is required by law. WholeLiv may separately store meal logs, transcripts, chat messages, and related outputs in your account as described in this Policy.
WholeLiv uses AI to provide recommendations, estimates, summaries, and coaching-style support. We do not use AI to make decisions about you that have legal effects or similarly significant effects.
WholeLiv is designed for general wellness and nutrition support. It is not a medical diagnosis service, and AI outputs should not be treated as medical advice.
If you are in the United Kingdom, European Economic Area, or another jurisdiction with similar data protection laws, we rely on the following legal bases under the UK GDPR and EU GDPR.
| Purpose | Examples of information used | Legal basis |
|---|---|---|
| Providing the WholeLiv service | Account data, meal logs, profile settings, chat messages, sync data | Performance of a contract with you |
| Personalised nutrition and wellness features | Health goals, body metrics, dietary preferences, allergens, reproductive health information, meal and nutrition data | Explicit consent for special category data, and performance of a contract or consent for related processing |
| AI-powered meal analysis, transcription, insights, and chat | Meal photos, voice audio for transcription, transcripts, meal descriptions, chat messages, meal context | Performance of a contract; explicit consent where health or sensitive data is involved |
| Account security and abuse prevention | Authentication data, IP address, device data, moderation results, operational logs | Legitimate interests in securing and protecting WholeLiv |
| Product analytics and service improvement | Usage events, app version, platform, subscription status, masked session recordings | Legitimate interests in improving WholeLiv, subject to your rights |
| Subscription management | User identifier, entitlement status, purchase metadata | Performance of a contract and legal obligations |
| Support communications | Email address, support messages, diagnostic information | Performance of a contract, legitimate interests, or consent depending on the request |
| Marketing communications | Email address and communication preferences | Consent, or soft opt-in where permitted by law |
| Legal, tax, and compliance matters | Billing records, account records, legal correspondence | Legal obligation and legitimate interests |
Where we rely on legitimate interests, we balance our interests against your rights and freedoms. You may object to processing based on legitimate interests as described in “What Are Your Privacy Rights?”.
WholeLiv collects information that may be classified as health-related, sensitive, or special category data under applicable privacy laws, including the UK GDPR, EU GDPR, and California privacy law.
This may include:
Under the UK GDPR and EU GDPR, where this information is special category data, we process it with your explicit consent under Article 9(2)(a), alongside an Article 6 legal basis such as performance of a contract or consent.
You may withdraw your consent at any time by deleting your account, removing information where the app allows, or contacting us at privacy@nouri.app. If you withdraw consent for health or sensitive data processing, some personalised features may no longer work.
We do not share health data with advertisers, marketing partners, or data brokers.
We share personal information only where necessary to operate, secure, improve, or support WholeLiv, or where required by law.
We use trusted service providers that process personal information on our behalf. They may access personal information only to provide services to WholeLiv and must protect it under appropriate contractual obligations.
| Service provider category | Data categories processed | Purpose | Location |
|---|---|---|---|
| Cloud database and authentication provider | Account identifiers, email, authentication tokens, profile data, meal logs, ingredients, preferences, chat messages, feedback, and operational records | Authentication, account management, database storage, synchronisation, and account deletion | United States |
| Media storage provider | Meal photos, profile photos, media object identifiers, and related metadata | Secure storage and retrieval of user-uploaded media | Provider-managed automatic region routing |
| AI services provider | Meal photos, voice audio for transcription, transcripts, meal descriptions, chat text, meal and nutrition context, moderation inputs, and AI outputs | Meal analysis, voice transcription, nutrition insights, chat, and content safety | United States |
| Subscription management provider | User identifier, subscription status, purchase receipt metadata, entitlement status, trial or promotional status | Subscription access, entitlements, purchase restoration, and subscription support | United States |
| App store provider | Purchase receipts, billing status, subscription metadata, refund or renewal information | In-app purchase processing and subscription management | As applicable |
| Authentication providers | Identity tokens, email address, name, private relay email where used, and authentication metadata | Apple, Google, or other supported sign-in methods | As applicable |
| Product analytics provider | User identifier, subscription status, app version, platform, authentication provider, product usage events, normalised page paths, and session recordings with inputs masked | Product analytics, usability analysis, and service improvement | United States |
| Backend observability provider | API performance traces, route metadata, latency, error information, limited identifiers or object references where needed for debugging | Reliability monitoring, error diagnosis, and security | United States |
| Hosting provider | API request data in transit, including authentication headers, sync payloads, uploaded media, voice audio during processing, chat text, profile updates, feedback, and subscription checks | Hosting and operation of the WholeLiv backend | United States or as otherwise configured by the provider |
We do not permit these providers to use your personal information for their own advertising purposes.
We may disclose information if we believe it is reasonably necessary to:
If WholeLiv is involved in a merger, acquisition, financing, reorganisation, sale of assets, or similar transaction, personal information may be transferred as part of that transaction. We will require the recipient to protect personal information consistently with this Policy and applicable law.
We may share information in other ways if you ask us to or give us permission.
We do not sell your personal information.
We do not share your personal information for cross-context behavioural advertising.
We do not share health data with advertisers, marketing partners, or data brokers.
We do not run third-party advertising SDKs in WholeLiv.
Yes. Nouri Life LTD is based in England, United Kingdom, and many of our service providers are located in or process data in the United States.
Where personal information is transferred from the UK, EEA, or Switzerland to countries that may not provide the same level of data protection, we use appropriate safeguards, such as:
Each processor is required to maintain appropriate technical and organisational measures to protect personal information.
We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, unless a longer retention period is required by law.
| Data category | Retention period |
|---|---|
| Account and profile data | Until you delete your account, unless we must retain limited information for legal reasons |
| Authentication and session data | Until expiry, sign-out, account deletion, or earlier invalidation |
| Profile photos | Until you delete the photo or delete your account |
| Meal logs, ingredients, nutrition data, meal photos, and chat messages | Until you delete your account or remove individual items where the app supports this |
| Voice recordings | Not stored by WholeLiv after transcription; audio is transcribed and immediately discarded by WholeLiv |
| Voice transcripts | Stored only if needed to create or support a saved meal log or related account feature |
| Subscription and billing data | For the duration of your account plus any period required by applicable tax, accounting, financial, or consumer protection laws |
| Support and feedback records | For as long as needed to respond and maintain appropriate business records, unless deleted or anonymised sooner |
| Analytics data | Up to 12 months |
| Session recordings | Up to 30 days |
| Backend operational traces | Up to 60 days |
| Server logs | Up to 7 days |
| AI provider processing logs | Up to 30 days, managed by the AI services provider, then deleted unless legally required otherwise |
| Anonymised operational logs and aggregate statistics | May be retained indefinitely in anonymised form |
When you delete your account, we delete or anonymise your personal information as described below. Certain records, such as billing or tax records, may be retained for the legally required period.
You can delete your account in the app where available, or by contacting us at privacy@nouri.app.
When your account is deleted, WholeLiv takes steps to delete or anonymise data associated with your account, including:
Feedback text may be retained in anonymised form for product improvement. AI processing logs, moderation logs, and other operational audit records may also be retained in anonymised form for safety, security, debugging, or compliance purposes.
Data held by third-party service providers is deleted or anonymised according to their retention schedules and our contractual arrangements with them. App store and payment-related records may be retained by the relevant app store or subscription providers under their own legal obligations.
WholeLiv uses on-device storage to make the app faster and to support offline access. This may include:
Local copies remain on your device. Synced copies of your data are handled as described elsewhere in this Policy.
On-device data is cleared on sign-out where technically possible and is removed when you uninstall the app, subject to your device settings and any operating system backups you control. Local-only data that has not synced may not be accessible to us.
We do not itemise on-device storage keys in this Policy, but we use on-device storage only to operate the app, maintain session state, support preferences, and enable offline functionality.
Depending on where you live, you may have rights over your personal information. These rights may include the following.
You can ask us to confirm whether we process your personal information and to provide a copy of it.
You can ask us to correct inaccurate or incomplete personal information. Some information can be updated directly in the app.
You can delete your account in the app where available, or contact us to request deletion. We will delete or anonymise your personal information unless we are required or permitted to retain it by law.
You can ask for certain information you provided to us in a structured, commonly used, machine-readable format.
You can ask us to restrict the processing of your personal information in certain circumstances, such as while we verify a correction request.
You can object to processing based on legitimate interests, including certain analytics or service improvement processing. We will consider your request in accordance with applicable law.
Where we rely on your consent, including explicit consent for health or sensitive data, you can withdraw that consent at any time. Withdrawal does not affect processing that occurred before withdrawal.
We do not use your personal information to make decisions that have legal or similarly significant effects solely by automated means.
If you are in the UK, you have the right to lodge a complaint with the UK Information Commissioner’s Office:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
If you are in the EEA, you may also contact your local data protection supervisory authority.
To exercise your rights, email us at privacy@nouri.app.
We may need to verify your identity before responding. We aim to respond within 30 days. If your request is complex or if the law permits more time, we will tell you.
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, may give you additional rights.
The categories of personal information we may collect include:
We collect these categories from you, your device, authentication providers, app store providers, subscription providers, and our service providers.
You may request information about the categories and specific pieces of personal information we collect, use, disclose, and retain.
You may request deletion of personal information we hold about you, subject to legal exceptions.
You may request correction of inaccurate personal information.
We do not sell personal information. We do not share personal information for cross-context behavioural advertising.
We use sensitive personal information only to provide WholeLiv, personalise features you request, maintain safety and security, and comply with law. We do not use sensitive personal information to infer characteristics for unrelated purposes.
We will not discriminate against you for exercising your privacy rights.
California residents may use an authorised agent to submit a request where permitted by law. We may require proof of authorisation and verification of identity.
To exercise California privacy rights, email privacy@nouri.app.
We use technical and organisational measures designed to protect personal information, including:
No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to protect your information and respond appropriately to security risks.
WholeLiv is not intended for children under 13.
We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly.
If you are under 18, you should use WholeLiv only with the permission of a parent or guardian where required by law.
If you believe a child has provided personal information to WholeLiv, please contact us at privacy@nouri.app.
We may update this Privacy Policy from time to time.
If we make material changes, we will notify you through the app, by email, or by another appropriate method. The effective date and last updated date at the top of this Policy show when it was last revised.
Continued use of WholeLiv after changes take effect constitutes acceptance of the updated Policy, where permitted by law. If we need your consent for a change, we will ask for it.
For privacy enquiries, rights requests, or questions about this Policy, contact:
Nouri Life LTD
Registered in England
Privacy enquiries: privacy@nouri.app
Legal matters: legal@nouri.app
General support: support@nourilife.app
We have not appointed a formal Data Protection Officer. Privacy enquiries are handled through privacy@nouri.app.