Privacy & Data Protection Policy

When you browse this marketing showcase website or reach out to our team regarding licensing, we collect only the information you voluntarily submit to us:

• Direct Inquiries: Your name, business email address, company name, and project requirements submitted via email or direct WhatsApp consultation.
• Technical Session Data: Standard server logs containing anonymized IP addresses, browser user-agent strings, and visited pages collected purely to optimize page delivery and prevent malicious traffic.
• Localization Preferences: A lightweight browser LocalStorage key storing your preferred interface language (English or Arabic) for consistent presentation across page loads.

We do not sell, rent, monetize, or broker any visitor contact details to advertising networks or third-party marketing entities.

NutriFlow is engineered from the ground up as a fully independent, white-label, self-hosted software product. Once you deploy the platform onto your private servers (such as AWS, DigitalOcean, Hetzner, Google Cloud, or on-premise infrastructure), all business operational data resides exclusively within your own PostgreSQL database.

As the platform licensee and system operator, you retain sole legal ownership, custody, and administrative control over all subscriber profiles, order histories, biometric calibrations, and operational data.

NutriFlow enables modular integrations with third-party infrastructure providers. All third-party communication executes under your organization's direct credentials:

• Stripe PaymentSheet: Payment processing transactions execute directly between your self-hosted backend and Stripe servers under your private API credentials. NutriFlow does not intercept, store, or process raw credit card numbers.
• Anthropic Claude API: Cognitive meal planning queries and nutritional prompt evaluations route directly to Anthropic endpoints utilizing your designated API key, ensuring strict enterprise confidentiality and zero model training on your private culinary data.
• OpenStreetMap & Photon Geocoding: Map queries and delivery boundary polygon lookups route to public or self-hosted Photon caching instances without tracking individual subscriber identities.

NutriFlow captures subscriber physiological parameters (height, weight, physical activity multipliers, metabolic goal baselines) to compute personalized caloric targets via the Mifflin-St Jeor equation. Additionally, 14 major clinical allergen filters prevent accidental recipe inclusion.

Because NutriFlow operates on your private infrastructure, compliance with regional health data standards (such as GDPR Article 9 special category requirements or HIPAA self-hosted privacy standards) can be enforced directly by your internal security protocols and database encryption policies.

Depending on your jurisdiction, you possess distinct legal rights regarding your personal information, including the right to request access, rectification, or complete erasure of communication records held on our inquiry channels.

To request deletion of any pre-sales inquiry records or update your corporate contact details, simply submit a written request via our official communication channels outlined below.

The NutriFlow software architecture is built on hardened industry standards:

• Laravel 12 REST API utilizing encrypted environment variables and Sanctum bearer token authentication.
• Strict PostgreSQL database schemas with foreign key integrity and parameterized query execution to eliminate SQL injection vulnerabilities.
• Native HTTPS and TLS encryption on all mobile and web communication paths.
• Role-based access control (RBAC) across Filament PHP super-admin, kitchen prep, and logistics operator panels.