Nuggy ("we", "us") helps you find restaurant orders that fit your calorie and protein targets. This policy explains what we collect and why. We aim to collect as little as possible.
What we collect
On your device (always):
- Your macro targets and preferred restaurants.
- Your saved orders and recent picks.
- A first-run onboarding flag and a local entitlement record.
This data lives in on-device storage. If you never sign in, it never leaves your phone.
If you sign in (optional):
- Your email address, used only to send a one-time sign-in code and to associate your saved orders with your account so they sync across devices.
- Your saved orders (restaurant, item, modifiers, calories, protein).
We do not collect your name unless you provide one, and we do not sell your data or use it for advertising.
Analytics
We use lightweight, on-device analytics (event counters such as "app opened" or "order saved") to understand which features are used and to improve reliability. These events are not tied to advertising identifiers and we do not track you across other apps or websites. The app does not use Apple's App Tracking Transparency because no cross-app/website tracking occurs.
AI meal analysis
The "Nuggy Knows" scan feature lets you estimate macros by submitting a meal photo or a text description. When you use this feature:
- Your photo or text is sent to Google's Gemini API (gemini-2.5-flash model), a third-party AI service operated by Google, solely to estimate the nutritional content of your meal.
- Images are resized on your device to at most 512 px before being transmitted, limiting the data sent.
- Nuggy does not store your photo or text. The data is held in memory only for the duration of the Gemini API call and then discarded. It is not written to our database or any file storage.
- Google receives and processes the image or text under its own privacy policies (policies.google.com/privacy). Google acts as a data processor for this feature.
Only signed-in users can access the scan feature.
How sign-in works
Sign-in is passwordless: we email you a 6-digit code. We store only a hashed form of the code, and it expires after 10 minutes. Your session is a random token; we store only its hash on the server.
Data sharing & processors
When you sign in or sync, data is processed by:
- Supabase (database hosting) — stores your account row and saved orders.
- Resend (email delivery) — sends your one-time sign-in code.
We share only what each processor needs to perform that function.
Data retention & deletion
You can delete your account and all associated data at any time from Profile → Delete account and data. This removes your saved orders from the server and clears local data on the device. Expired sign-in codes are purged automatically.
Children
Nuggy is not directed at children under 13 and we do not knowingly collect their data.
Nutrition disclaimer
Nutrition values are estimates and vary by location, preparation, serving size, and substitutions. Nuggy is not medical or dietary advice.
Contact
Questions or data requests: privacy@dirtymacros.app