Privacy Policy

The data controller is Luca De Filippi (“Nett”, “we”). You can reach us about anything on this page at contact@nett.health.

This policy covers the Nett iOS app, this website, and the backend that serves the app.

• We collect what you tell the coach and what your devices report, and we use it to log your meals, track your progress, and answer you.
• Your meals, photos, voice notes and health metrics are processed by AI models run by OpenAI and Google on our behalf. They are not used to train anyone's models.
• We do not sell your data, we do not use it for advertising, and Apple Health data is used only inside the coaching features.
• You can export everything or delete your account from Settings → Account at any time.

Account. Your email address, and the identifier your sign-in provider gives us (Google, or the Apple subject id when you use Sign in with Apple, including a private relay address if you choose to hide your email). Session and refresh tokens.

Profile. Name, sex, date of birth, height, activity level, diet type, training routine and any notes you add.

Health and nutrition data. Weigh-ins, meals and their ingredients, meal photos and label photos, saved foods, recipes and supplements, fitness goals, calorie and macro targets, fasting plans, and the daily summaries computed from them.

Apple Health data. If you allow Apple Health access on your iPhone: weigh-ins, steps, active and resting energy, workouts, sleep, resting heart rate, heart-rate variability and VO₂max.

Conversations. The messages you send the coach and its replies, images and PDFs you attach, and voice notes you dictate (kept as text after transcription). A short “memory” of facts the coach has learned about you, which you can inspect and ask it to forget.

Technical data. Server logs (IP address, timestamps, endpoints, errors), rate-limit counters, push-notification subscriptions if you enable reminders, and aggregate metering of AI usage and cost per account.

• To provide the service — logging meals, computing targets, answering you, sending the reminders you switched on. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
• To process health data — weight, nutrition, sleep, heart-rate and related metrics are special-category data. Legal basis: your explicit consent (Art. 9(2)(a) GDPR), which you give during onboarding and can withdraw at any time by deleting your account or disconnecting a device.
• To keep the service running and safe — debugging, abuse and rate limiting, cost control. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
• To meet legal obligations — where the law requires us to keep or disclose something (Art. 6(1)(c) GDPR).

Nett is built around large language models. When you write to the coach, send a meal photo, scan a label or dictate a note, that content — together with the context the coach needs (your targets, recent meals, profile facts) — is sent through our own model gateway to the providers that run the models: OpenAI and Google (Gemini). Voice notes are transcribed by OpenAI; meal and label photos are read by Google’s vision models.

These providers act as our processors under contract: they may use the content only to return the answer, not to train their models, and they delete it after the retention window their API terms set for abuse monitoring.

The coach’s output is an estimate produced by a model. It is not a decision with legal or similarly significant effect on you, and nothing on Nett is decided about you by automated means alone.

On iOS, Nett can read the metrics listed above from Apple Health after you grant permission in the system prompt. That data is used only to personalise your coaching, targets and recaps.

• We never use Apple Health data for advertising, marketing or similar services.
• We never sell it, and we never share it with third parties for their own purposes.
• We only send it to the processors listed in this policy, and only to deliver features you asked for.
• You can revoke access at any time in the iOS Settings → Privacy & Security → Health.

We use a small set of providers, each under a data-processing agreement:

• Google Cloud (Ireland/Belgium) — application hosting, database, and storage of the photos you upload. Data at rest lives in the EU (europe-west1).
• OpenAI — language, transcription and reasoning models, via our gateway.
• Google (Gemini) — vision and lightweight language models, via our gateway.
• Vercel — hosting of this website, which collects nothing about you.
• Apple — Sign in with Apple, and app distribution. Apple Health data stays on your device until Nett reads it with your permission.
• FatSecret and Open Food Facts — food and barcode lookups. We send the product name or barcode only, never anything about you.

We do not sell personal data, and we do not share it with advertisers or data brokers. We may disclose data if the law compels us, or to protect the rights and safety of our users.

Your account, meals, photos and metrics are stored in the European Union. The AI providers named above process content in the United States. Those transfers rely on the European Commission’s Standard Contractual Clauses, and where applicable on the EU–US Data Privacy Framework.

• Account, profile, meals, foods, goals and metrics: for as long as your account exists.
• Conversations: the last 30 days, so you can scroll back and the coach has context; older messages are deleted automatically every night.
• Server logs: a short rolling window for debugging and security.
• After you delete your account: the data is removed from the live systems immediately and disappears from encrypted backups within 30 days.

Under the GDPR you can ask for access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. Two of these are built into the app: Settings → Account → Export Data gives you everything we hold in a machine-readable file, and Delete Account erases it.

For anything else, write to contact@nett.health. You also have the right to complain to your supervisory authority — in Italy, the Garante per la protezione dei dati personali.

Traffic runs over TLS; data at rest is encrypted by our cloud provider; sessions use signed tokens with a short life and rotating refresh tokens. Access to production data is limited to what running the service requires. No system is perfectly secure, and we will tell you and the supervisory authority about a breach when the law requires it.

Nett is not for children. You must be at least 16 to use it, or 14 in Italy and other countries that set the digital-consent age there. If you believe a child has given us data, write to us and we will delete it.

We use no advertising or analytics cookies. This website sets no cookies and stores nothing in your browser. The iOS app keeps your session in the system Keychain, which is strictly necessary to keep you signed in.

If we change this policy materially, we will update the date at the top and tell you in the app before the change takes effect.