Privacy Policy

Compliance & Standards

NutriMeal Planner is designed with privacy-by-default. We comply with international data protection laws:

Who We Are

NutriMeal Planner ("we", "us", "our", "the Service") is a free, browser-based nutrition and meal planning application available at nutrition.kanzulilm.com.

For the purposes of applicable data protection legislation, NutriMeal Planner acts as the Data Controller for personal data we collect through the Service.

What Data We Collect

2.1 Data You Enter Directly (Health Data)

When you use the BMI & Calorie Calculator, you may enter:

• Age, gender, weight (kg), height (cm)
• Activity level preference
• Dietary preferences (vegetarian, high-protein, low-carb)

2.2 Data Stored Locally (localStorage)

With your implicit consent by using the Service, we store the following data only in your browser's localStorage (on your device):

You can clear all locally stored data at any time by clearing your browser's localStorage (Settings → Privacy → Clear browsing data) or by using your browser's developer tools.

2.3 Automatically Collected Data (Analytics)

We may collect the following anonymous, aggregated technical data through our hosting provider (Cloudflare):

• Country-level geolocation (not city or IP address)
• Browser type and operating system (generic)
• Pages visited and time on page
• Referral source (how you found the site)
• Device type (mobile/desktop/tablet)

2.4 Advertising Data (Google AdSense)

We display advertisements through Google AdSense to keep the service free. Google may collect data to serve personalised ads. See Section 5 for full details.

2.5 Data We Do NOT Collect

• ❌ No name, email address, or password
• ❌ No account registration or login required
• ❌ No precise location data or GPS coordinates
• ❌ No payment or financial information
• ❌ No photographs, voice recordings, or biometric data
• ❌ No social media account data
• ❌ No exact IP address stored by us

How We Use Your Data

We use the limited data we collect solely for the following purposes:

Cookies & Tracking Technologies

4.1 First-Party Cookies

NutriMeal Planner does not set any first-party cookies. We use browser localStorage instead of cookies for saving preferences, which means this data is never transmitted with HTTP requests.

4.2 Third-Party Cookies (Google AdSense)

Google AdSense may set the following cookies to serve personalised advertisements:

4.3 Service Worker (PWA)

As a Progressive Web App, we use a Service Worker to cache assets for offline use. The Service Worker does not track users or collect any personal data. It only caches static files (HTML, CSS, JavaScript) to improve performance.

4.4 Your Cookie Choices

• Opt out of Google personalised ads: google.com/settings/ads
• NAI opt-out: optout.networkadvertising.org
• DAA opt-out: optout.aboutads.info
• European users (EDAA): youronlinechoices.eu
• Browser settings: Block all third-party cookies in your browser's privacy settings

Third-Party Services & Processors

We carefully select third-party services and ensure they meet high privacy standards. We do not share personal health data with any third party.

Data Storage & Security

6.1 Where Data Is Stored

The vast majority of your data (health metrics, preferences, favourites) is stored exclusively on your device using browser localStorage. We have no access to this data.

Anonymous analytics data is processed by Cloudflare on servers globally, with primary infrastructure in the European Union and United States.

6.2 Security Measures

• ✅ HTTPS/TLS 1.3 – All connections are encrypted in transit
• ✅ HTTP Strict Transport Security (HSTS) – Prevents downgrade attacks
• ✅ Content Security Policy (CSP) – Prevents XSS attacks
• ✅ Cloudflare DDoS Protection – Infrastructure-level security
• ✅ No server-side data storage – Health data never reaches servers
• ✅ No database – No central store of user data that could be breached
• ✅ Regular security audits – Code reviewed for vulnerabilities

6.3 Data Breach Protocol

In the unlikely event of a data breach affecting any personal data we hold (e.g., analytics), we will:

• Notify relevant supervisory authorities within 72 hours (GDPR requirement)
• Notify affected users without undue delay if high risk to their rights
• Document the breach and our response in accordance with Article 33 GDPR

Data Retention

Your Rights & Choices

Depending on your jurisdiction, you have the following rights regarding your personal data:

How to Exercise Your Rights

Since we store almost no personal data on our servers, most of your rights can be exercised directly:

• Delete local data: Clear your browser's localStorage (Settings → Privacy → Clear site data)
• Opt out of Google ads: google.com/settings/ads
• Contact us directly: privacy@kanzulilm.com

We will respond to all rights requests within 30 days (or 45 days where permitted by law with notice). There is no charge for exercising your rights.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority:

• EU/EEA: Your national Data Protection Authority (list here)
• UK: Information Commissioner's Office (ico.org.uk)
• Pakistan: Personal Data Protection Authority (PDPA)
• California: California Privacy Protection Agency (cppa.ca.gov)

Children's Privacy

If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately at privacy@kanzulilm.com. We will promptly delete any such information.

Children aged 13–17 may use NutriMeal Planner with parental consent. The BMI calculator results are informational only and parents should consult a paediatrician for children's health advice.

This Service complies with:

• COPPA – US Children's Online Privacy Protection Act
• GDPR Article 8 – Children's consent requirements
• UK GDPR Age Appropriate Design Code

International Data Transfers

NutriMeal Planner operates globally. When you use our Service, your data (primarily anonymous analytics) may be processed in countries outside your own, including:

• United States – Cloudflare headquarters; Google infrastructure
• European Union – Cloudflare EU data centres
• Other countries – Via Cloudflare's global CDN network

Safeguards for EU/EEA Users

For transfers of personal data outside the EEA, we ensure appropriate safeguards are in place:

• Cloudflare: EU Standard Contractual Clauses (SCCs) + EU-US Data Privacy Framework
• Google: Google's Data Processing Terms include EU SCCs

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Displaying a prominent notice on the website for 30 days
• Updating the "Last Updated" date at the top of this page
• Showing an in-app notification for significant changes

Your continued use of NutriMeal Planner after changes become effective constitutes acceptance of the updated policy.

Change History

• Version 1.2 – Added PWA Service Worker section; updated third-party table; added data breach protocol; expanded rights section.
• Version 1.1 – Added LGPD (Brazil) and POPIA (South Africa) compliance; expanded international transfers section.
• Version 1.0 – Initial publication of Privacy Policy.

Contact Us

We take privacy seriously and respond to all enquiries promptly. For any questions, concerns, or to exercise your data rights:

پرائیویسی پالیسی – اردو خلاصہ

نیوٹری میل پلانر آپ کی پرائیویسی کا مکمل احترام کرتا ہے۔ آپ کی صحت سے متعلق معلومات جیسے وزن، قد اور عمر صرف آپ کے براؤزر میں محفوظ ہوتی ہیں اور ہمارے سرورز تک کبھی نہیں پہنچتیں۔ ہم کسی بھی تیسرے فریق کو آپ کا ڈیٹا فروخت نہیں کرتے۔ اگر آپ کو کوئی سوال ہو تو ہم سے رابطہ کریں: privacy@kanzulilm.com