DietRx Privacy Policy

DietRx is a two-sided platform connecting dietitians and their patients. This policy applies to both dietitian accounts and patient accounts.

• Account information: name, email address, phone number, password (stored encrypted).
• Health and nutrition information: entered by your dietitian on your behalf, including reported symptoms, physical activity level, height, weight, diagnosed condition, assigned diet and food plan, and daily targets for water, sleep, and physical activity.
• Daily activity you log: meal logging (eaten/missed), daily check-ins, and any notes you add.
• Messages: text messages exchanged between you and your dietitian within the app.
• Appointment information: scheduled appointments and, only if your dietitian chooses to connect their Google Calendar, a one-way copy of appointment details sent to that calendar.
• Device information: a push notification token, used only to deliver app notifications to your device.

We do not collect your location, photos, camera or microphone access, contacts, or any payment card information. Payments between patients and dietitians are arranged manually outside the app (e.g., bank/wallet transfer) and are never processed or stored by DietRx.

• To operate the core features of the app (meal plans, logging, messaging, scheduling).
• To let your dietitian monitor your progress and adjust your plan.
• To send you transactional emails (e.g., account confirmation, document requests, approval decisions) and push notifications.
• To calculate clinical reference values (such as BMI, TDEE) from the measurements you or your dietitian provide.

We do not use your information for advertising, and we do not sell your information to any third party.

Your information is stored on Supabase infrastructure hosted in Frankfurt, Germany (EU). Data in transit is encrypted (HTTPS/TLS).

We share limited information only as needed to operate the app:

• Supabase — hosts our database, authentication, and file storage.
• Resend — sends transactional emails on our behalf (receives your name and email address for this purpose only).
• Firebase (Google) — delivers push notifications (receives a device token, not message content).
• Google Calendar API — only if a dietitian actively connects their Google account, appointment details are sent one-way from DietRx to that dietitian's personal Google Calendar.

We do not share your health or nutrition information with advertisers, data brokers, or any party outside the operation of the app itself.

We retain your information for as long as your account is active. If you request account deletion, your personal and health data are removed from our live systems immediately. Backup copies that briefly retain a snapshot of your data are cycled out within 30 days.

You can request deletion of your account and associated data at any time:

• In-app: More tab → tap your profile card → Account Settings → Delete My Account (dietitian accounts with active patients still assigned must reassign or discharge them first before deletion is available).
• On the web (works even if you've uninstalled the app): https://dietrx.zaynovainc.com/delete-account, or by emailing the address below.

You can also request deletion of specific data (for example, a particular note or log entry) without deleting your whole account, by emailing us at the address below — we'll process this request manually.

You may also request a copy of your data, or a correction to inaccurate data, by contacting us.

DietRx is not directed at children and is not intended for use by anyone under 16. We do not knowingly collect information from children.

We may update this policy as the app evolves. We'll update the “Last updated” date above when we do.