Privacy Policy

1. Who we are

This policy is issued by NurtureTech ApS (“NurtureTech”, “we”, “us”), a Danish company. It covers our website at nurturetech.dk and our mobile applications Ketora and Kcalra (together, the “Services”).

Controller contact: contact@nurturetech.dk

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act.

2. Data we collect

Depending on how you use the Services, we may process:

• Account data — email address, display name, and authentication identifiers.
• Nutrition and health metrics — meals, photos you submit for analysis, macros, calories, nutrients, body measurements, weight, fasting windows, and similar self-reported or device-derived metrics. This may constitute special-category health data under Article 9 GDPR and is processed only as needed to provide the Service you request.
• Usage data — app version, crash logs, coarse device type, and performance diagnostics.
• Support correspondence — messages you send to contact@nurturetech.dk.

Our public website does not use advertising cookies or third-party marketing trackers.

3. Why we process data

• To provide AI nutrition analysis, coaching, logging, and metric tracking.
• To create and secure your account, and to restore purchases.
• To improve reliability, fix bugs, and keep the Services safe.
• To respond to support requests and legal obligations.

Legal bases include performance of a contract (Art. 6(1)(b)), legitimate interests in running a secure product (Art. 6(1)(f)), consent where required (Art. 6(1)(a) / Art. 9(2)(a)), and legal obligation (Art. 6(1)(c)).

4. What we do not do

• We do not sell personal data.
• We do not use your health or nutrition data for third-party advertising.
• We do not provide medical diagnosis. Ketora and Kcalra are wellness tools, not medical devices.

5. Sharing and processors

We share data only with processors who help us operate the Services (for example cloud hosting, analytics that we control, crash reporting, and app-store billing). Each processor is bound by a data processing agreement. We may disclose data if required by law.

If we transfer data outside the EEA, we use an appropriate safeguard such as the European Commission’s Standard Contractual Clauses.

6. Retention

We keep account and health-log data for as long as your account is active. If you delete your account, we delete or irreversibly anonymise associated personal data within 30 days, unless a longer period is required by law (for example invoices).

7. Your rights

You may request access, rectification, erasure, restriction, portability, and objection, and you may withdraw consent at any time without affecting prior lawful processing. Contact contact@nurturetech.dk.

You also have the right to lodge a complaint with Datatilsynet, the Danish Data Protection Agency.

8. Children

The Services are not directed at children under 16. We do not knowingly collect personal data from children.

9. Security

We use industry-standard technical and organisational measures, including encryption in transit, access control, and least-privilege administration. No method of transmission is perfectly secure; we work to reduce risk continuously.

10. Changes

We will update this page when the policy changes and revise the date above. Material changes will be flagged in the apps where required.