NutriomealsPrivacy policy
This policy explains what data we collect when you use the Nutriomeals app, why we collect it, who we share it with, how long we keep it, and your rights over it.
On this page
Who we are
Nutriomeals is a daily meal subscription service in Riyadh, provided by Qantara TimePieces Company (شركة كانتارا تايمبيسز), commercial registration 7054103382, address: 4097 Al-Yahsabi Street, Al-Arid District, Additional No. 8425, Riyadh 13332, Saudi Arabia. We are the controller of your personal data under the Saudi Personal Data Protection Law (PDPL).
Data we collect
| Category | What we collect | Purpose |
|---|---|---|
| Account | Mobile number, name or nickname, email (optional), contact preferences | Create your account, sign you in with a verification code, send service messages and invoices |
| Body and goal | Sex, age in years, height, weight, target weight, body fat (optional), activity and exercise level, goal (lose, maintain or gain) | Calculate your daily calorie and nutrient needs and size your meals |
| Food allergies | Allergens you select, and any other allergy you describe yourself | Exclude meals that aren't safe for you. Our team reviews a described allergy before your subscription starts |
| Delivery | Address name, description and details, and location coordinates | Check that the address is within delivery coverage and deliver your meals |
| Logs | Meals eaten, food outside your plan, water, weight, meal ratings and comments, weekly ingredient preferences | Show your progress and reports, and improve your upcoming meals |
| Subscription and payments | Plan and term, freezes, payments and refunds, in-app credit, discount codes, invoices | Run your subscription, issue invoices, and meet legal requirements |
| Technical | Session data, request logs on our servers, and internal usage events that contain no identifying details | Run and protect the service and fix faults |
Sensitive data: body measurements, weight and food allergies may count as health data. We only collect them when you enter them, use them to tailor your meals and show your progress, and for nothing else.
Location: we only read your location when you tap "Use my current location" while adding an address, with your permission and only while the app is open. We never track your location in the background. You can type the coordinates instead.
Card details: you enter your card in the payment form of Moyasar, a Saudi payment gateway. Card details never reach our servers and we don't store them; we keep only the payment's status, amount and reference.
Assistant: questions you type to the in-app assistant are answered automatically by fixed rules from your own data and reports. They aren't sent to any outside AI service and we don't keep the conversation.
What we don't do
- We don't sell your personal data.
- We don't show ads or track you across other companies' apps or websites.
- We don't use third-party analytics or crash-reporting tools in the app.
- We don't offer meals or advice for treating medical conditions.
Messages we send
- WhatsApp: your sign-in verification code, and service messages such as renewal reminders and payment links.
- Email: invoices and refund notices, if you add your email.
- In the app: updates on your subscription and deliveries.
You can turn off non-essential WhatsApp and email messages in Account (حسابي) → Contact preferences (تفضيلات التواصل). Verification codes still go by WhatsApp because that's the only way to sign in.
Who we share your data with
We share only what each service needs:
- Moyasar, a Saudi payment gateway, to process payments, refunds and renewal payment links. We send the amount, the payment reference and your account ID, not your name or number.
- Meta (WhatsApp Business Platform), to send verification codes and service messages to your number.
- Resend, to email invoices and refund notices.
- Cloudflare, which hosts our servers and database.
- Our kitchen and delivery team: your name, address, delivery time and the allergies needed to prepare and deliver your meals.
- Authorities, when the law requires it, for example the Zakat, Tax and Customs Authority (ZATCA).
Meta, Resend and Cloudflare may process data on servers outside Saudi Arabia. We limit this to the data each service needs and follow the PDPL's rules on transferring data outside the Kingdom.
How long we keep data
- We keep your account data and logs while your account is active; you can edit or delete most of it in the app.
- Verification codes are deleted when they expire (after five minutes).
- When you delete your account, we delete or anonymize your personal data and logs, as described on the Delete account page.
- We keep issued invoices and credit notes for the legal retention period of at least six years; they include the name shown on them.
- We keep payment, subscription and delivery records with identifying details removed, for accounting and fraud prevention.
- We keep the mobile number of a deleted account to prevent abuse; it can't be used to create a new account for 90 days.
Your rights
Under the PDPL you have the right to be informed about how your data is processed, to access it and get a copy, to correct and update it, to request its destruction, and to withdraw your consent. You can edit your profile, addresses, body details and preferences directly in the app; for anything else, email support@nutriomeals.app. We'll respond within the period the law sets. You can also file a complaint with the Saudi Data and AI Authority (SDAIA).
Security
- All data between the app and our servers is encrypted in transit.
- Your sign-in credentials are stored on your device in the iOS Keychain.
- Access to your data is limited to team members who need it for their work, and administrative actions are recorded in an audit log.
- We limit repeated sign-in attempts to protect your account.
We'll never ask for your verification code, so don't share it with anyone.
Changes to this policy
We may update this policy. We'll show the last-updated date at the top of this page and notify you in the app before any significant change takes effect.
Contact us
For any privacy question, email support@nutriomeals.app, or write to Qantara TimePieces Company, 4097 Al-Yahsabi Street, Al-Arid District, Additional No. 8425, Riyadh 13332, Saudi Arabia.