Privacy policy

Who is responsible

The controller for your data in Nexxus Nutria is Phillip Kracht, Lübecker Str. 162, 19059 Schwerin, Germany. Phone: +49 175 2059003.

For questions about privacy, write to contact@nexxusnutria.com.

Legal notice

Website, web app and our server

nexxusnutria.com uses no cookies, no tracking, no analytics and no advertising. The site loads nothing from other servers. The fonts also come from our own server.

The web app at app.nexxusnutria.com sets no cookies either.

When you open a page, the server processes your IP address to send you the page. The access log contains no IP addresses. It records only the time, the request, the status, the size, the referring page and the browser details. This applies to the website and to the web app.

The log consists of no more than three files of 10 MB each. After that, the oldest file is overwritten.

The web app and the apps talk to our server api.nexxusnutria.com. Its access log contains no IP addresses of your device either. It records the time, the request, the status, the size, the referring page and the browser or app details. Here too, the log consists of no more than three files of 10 MB each. After that, the oldest file is overwritten.

Nutria without an account

You can use Nutria without signing in. The app then creates a guest account on our server. It has only a random ID and no email address.

In the browser, the session for this guest account is kept in local storage. In the app, it is kept in your device’s storage.

To prevent misuse, our server allows no more than 30 new guest accounts per hour from one IP address. The count is kept in memory only. The sign-in log of our server contains no IP addresses.

Recipe suggestions are only available with an account.

Guest accounts are not deleted automatically. How to have a guest account deleted is explained under “Retention and deletion”.

Nutria with Nexxus ID

Your account for Nutria is Nexxus ID, the shared account for Nexxus products. Signing in needs no password: you get a sign-in link or a six-digit sign-in code by email.

Nexxus ID is also run by Phillip Kracht. Its server is hosted by Hetzner in Germany. Nexxus ID sends the sign-in emails via Scaleway in France. The details are in the privacy policy on nexxus.group.

Your Nexxus ID sign-in is also kept in local storage in the browser. In the app, it is kept in your device’s protected storage.

If you sign up through Nutria, the app tells Nexxus ID that you came from Nutria. It distinguishes between the web app and the app.

Your email address and display name are held by Nexxus ID. Nutria does not store them in its own database. The app does show your address in the “Account” section and includes it in the data export.

If you used Nutria on a device without an account, guest data are stored there. When you sign in on that device, Nutria asks Nexxus ID for your account. This happens when you sign in and, for as long as guest data are still stored there, each time the app starts. When Nutria creates your profile, it takes the language from your Nexxus ID profile. If your account already has a profile or settings in Nutria, they are kept when the data are moved over.

Only entries count as data in your account: pantry, shopping list, meals, garden and details in your profile. If your account has no such entries, Nutria moves the guest data into your account and deletes the guest account.

If you entered nothing as a guest, Nutria deletes the empty guest account without asking. Any feedback you sent as a guest is transferred to your account.

If both your account and the guest account have entries, Nutria merges nothing. The app tells you so in the “Account” section. There you can download the guest data. After that, you can delete them. The app asks before deleting. Until you delete them, they stay stored separately.

From the moment you sign in, this device’s notifications belong to your account. The device no longer receives any for the guest data left behind.

Signing out applies only to this device and this app. Before signing out, the app makes sure the device no longer receives your account’s notifications.

What Nutria stores

What you enter in Nutria is stored on our server at Hetzner in Falkenstein, Germany. This applies with or without an account.

For your pantry, we store each item’s name, quantity, unit, storage place, expiry date and barcode. We also store its status (active, used up, saved or thrown away) and who added it. This lets Nutria show you what you have and what needs using first. Items that are gone appear in the archive.

We store your meals with their nutritional values. They make up the overview of your meals, shown in the app under “Eaten today”. Nutria also deducts them from your pantry.

We store your shopping lists and their items so you can plan your shopping.

Your pantry and shopping list belong to a household. We store who belongs to it and in which role. Today each household has one person. You cannot invite anyone.

For your garden, we store the food you have saved and your plants. It shows you in a playful way what you have saved.

Your profile holds your language and whether you may manage Nutria. The profile also has fields for allergies, goals and diet. The app does not fill them in.

For reminders, we store which ones are due and which you have already received. Each reminder covers up to ten foods that will expire soon. It also covers up to ten that expired yesterday. For each one, we store the name, expiry date and storage place. This lets Nutria remind you before the expiry date. The day after, Nutria asks once whether the food is still good. The list under “Notifications” in the app is also built from this.

So that a reminder reaches you, we store the following for each device where you allow notifications: the push address or token, a key, the device name and when the device was last active. In the app, the device name is the make and model. In the browser, it is the browser details.

We count how many recipe suggestions you request each week. The limit is seven requests a week.

If you send us feedback from the app, we store the category, the text, the app version and the ID of your account or guest account. We use it to improve Nutria. We store no contact details with it. Replying to feedback is not planned.

For barcodes, we store product data from Open Food Facts in a product database shared by everyone. It does not record who looked up a product.

What stays on your device

On nexxusnutria.com, your browser remembers your choice on the light and dark switch. It is kept in local storage under “nx_thema” and stays until you delete it.

In the web app and the apps, your session is kept on your device. The app uses it to identify itself to our server, as a guest or with Nexxus ID. In the browser, the session is kept in local storage. In the apps, a guest session is kept in your device’s storage. A Nexxus ID session is kept in your device’s protected storage.

These entries are added: “nutria.locale” records the language you chose. “nutria.showNovaHints” records whether the hint about heavily processed products is on or off.

Only the apps also have these entries: “nutria.storeupdate.geschlossen” records that you closed the hint about a new version in the store. “nutria.bewertung.erster”, “nutria.bewertung.starts” and “nutria.bewertung.zuletzt” record the first start, the number of starts and the last request for a rating. This way the app asks for a rating only rarely. The apps also store an ID for this installation. They use it to ask Expo for updates and to register for notifications.

In the web app and the apps, all of this stays on your device until you delete the app’s data or remove the app. Apart from the session, none of it is sent to us.

Camera

The apps use the camera to read barcodes. Your device analyses the image. It is neither stored nor uploaded. Nutria does not recognise food in photos.

In the browser, Nutria does not use the camera. There you type in the barcode or search for the food.

Recipe suggestions with Anthropic

Recipe suggestions come from Claude, Anthropic’s AI model. They are only available with an account. You only get them when you request them in the app.

We then send Anthropic up to 60 items from your pantry, each with name, storage place and expiry date. We also send today’s date and a selection of public recipes from our collection. We do not send your ID, your email address, your meals or your shopping list.

Our contract partner is Anthropic Ireland, Limited in Ireland. Anthropic processes the data under its data processing agreement (Data Processing Addendum). It is part of Anthropic’s terms for business customers (Commercial Terms).

Anthropic passes data on to its own subprocessors. They include cloud providers, also in the USA. The list is at anthropic.com/subprocessors.

Anthropic does not train models on these data.

Anthropic deletes the data within 30 days of receiving them. There are exceptions. If a request breaches Anthropic’s usage policy, Anthropic keeps inputs and outputs for up to two years. For such a request, Anthropic keeps the assessments of its safety systems for up to seven years. If a law requires it, Anthropic keeps data longer.

Barcodes and Open Food Facts

If we do not know a barcode or our entry for it is older than 30 days, your device asks Open Food Facts directly. Open Food Facts is a non-profit association in France.

The request contains the barcode number. Open Food Facts sees your device’s IP address. Nutria does not load product images from there.

Reminders

In the browser, reminders go through the push service of your browser’s maker. Depending on the browser, this is Google, Mozilla, Apple or Microsoft. All of them are based in the USA. The content is encrypted. The service sees your browser’s push address and when a message arrives.

In the app for iPhone, reminders go through Expo (650 Industries, Inc., USA). Expo passes them on to Apple. At Expo and at Apple, the title and text are in plain text. There is no app for Android yet. Once there is one, Expo will pass reminders there on to Google, also in plain text.

A reminder names up to three foods that will expire soon. It also names up to two that expired yesterday. If nothing will expire soon, it names up to three that expired yesterday.

If you allow notifications in the app, the app sends Expo the following: the device’s push token, an ID for this installation and the app’s ID. This happens when notifications are set up and then at every start. In return, Expo provides its own push address. We store this address.

App updates

Each time they start and each time you return to them, the apps ask Expo for a newer version. Expo receives the IP address, the platform, the app version and a permanent ID for this installation.

At start-up, the app also fetches our own file nexxusnutria.com/versions.json. What is said under “Website, web app and our server” applies to it.

Testing on iPhone

The apps are not yet in any store. On iPhone, Nutria is only available through Apple’s TestFlight. If you test Nutria there, Apple has invited you with your email address. We can see the testers’ addresses in TestFlight.

Emails to us

Emails to contact@nexxusnutria.com are stored with Neue Medien Münnich (All-Inkl.com) in Germany. From there they are forwarded to our mailbox nutria@nexxus.group at United Domains, also in Germany. We delete them once your request has been dealt with. At the latest, we delete them after twelve months.

Who receives data

Hetzner Online GmbH runs our server in Falkenstein and keeps our encrypted backups, both in Germany. Hetzner works on our behalf.

Anthropic Ireland, Limited receives pantry data when you request a recipe suggestion. Open Food Facts receives barcode numbers. Expo receives the apps’ reminders, the details for setting up notifications and the update requests. The browser makers’ push services deliver reminders in the browser. In the app for iPhone, Apple delivers them. In the app for Android, Google will.

When you sign in, Nexxus ID receives your email address. Scaleway sends the sign-in emails. Through TestFlight, Apple receives the email addresses of the testers. Emails to contact@nexxusnutria.com are stored with Neue Medien Münnich (All-Inkl.com) and, once forwarded, with United Domains, both in Germany.

We do not sell data. We pass data on to no one else.

Data outside the EU

Anthropic Ireland, Limited is based in Ireland. However, Anthropic passes data on to subprocessors, also in the USA. For transfers to countries outside the EU, the agreement with Anthropic provides for standard contractual clauses to the extent that applicable data protection law requires them.

Expo (650 Industries, Inc.) is based in the USA. Expo states that it participates in the EU-US Data Privacy Framework.

Reminders in the browser go through the push service of your browser’s maker. Google, Mozilla, Apple and Microsoft are based in the USA. Google LLC and Microsoft Corporation state that they participate in the EU-US Data Privacy Framework.

In the app for iPhone, Expo passes reminders on to Apple. Once there is an app for Android, they will go to Google there. Apple and Google are based in the USA. Through TestFlight, Apple also receives the email addresses of the testers.

Backups

We back up the data on our server every day, in encrypted form. The backups are stored with Hetzner in Germany. Each backup is kept for no more than 30 days. Until then, data you have deleted may still be contained in them. We only access the backups to restore operations after an outage.

Retention and deletion

In the app, you can delete items on your shopping list. After signing in on a second device, you can also delete the guest data left behind there. Pantry, archive, meals, garden and reminders cannot be deleted one by one. They stay stored until your account or your guest data are deleted.

We do not delete guest accounts automatically, not even after a long time without use.

You delete your account at Nexxus ID: in the portal on nexxus.group or by email to id-delete@nexxus.group. Nutria then deletes all data linked to your account. This does not include guest data left behind on another device. Delete those in the app on that device first.

We delete a guest account if you ask us to. Write to contact@nexxusnutria.com with the ID from your data export. You start the export in the app under “Account” with “Export my data”.

After deletion, the data remain in our backups for up to 30 days. Whatever has already gone to Anthropic is deleted by Anthropic according to its own deadlines. They are listed under “Recipe suggestions with Anthropic”.

Legal bases

We process what Nutria stores for you to perform the contract for using Nutria (Art. 6(1)(b) GDPR). This covers pantry, meals, shopping lists, household, garden, profile, reminders with their devices and the number of your recipe requests. The contract is governed by the terms of use on nexxus.group. They are linked in the footer of this page and in the app.

We rely on our legitimate interest (Art. 6(1)(f) GDPR) for running the website, the web app and our server api.nexxusnutria.com and keeping them secure. The same basis covers feedback from the app, which we use to improve Nutria, as well as our answers to your emails. If your email is about your use of Nutria, the contract is a further basis for our answer (Art. 6(1)(b) GDPR).

These entries on your device are strictly necessary for the feature you want to use (Section 25(2) no. 2 TDDDG): the session, the language you chose, the switch for the hint about heavily processed products, the light and dark switch, the closed hint about a new version in the store and the installation ID for updates and notifications.

We also base the recipe suggestion at Anthropic and the barcode lookup at Open Food Facts on the contract (Art. 6(1)(b) GDPR), because you trigger both yourself. We base the update check at Expo and the limit on new guest accounts on our legitimate interest in an app that works and is secure (Art. 6(1)(f) GDPR).

Nutria makes no automated decisions about you and builds no profiles.

Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability. To use these rights, write to contact@nexxusnutria.com.

You can export your data yourself: in the app under “Account” with “Export my data”. This also works as a guest.

You can complain to a data protection authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Mecklenburg-Western Pomerania.