Privacy Policy

Last updated: February 19, 2026

NourishFlow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at nourishflow.baby (the "Service"). Please read this policy carefully. By using the Service, you consent to the practices described in this Privacy Policy.

1. Information We Collect

Personal Information You Provide

When you create an account, we collect information you provide directly, including:

  • Your name and email address
  • Password (stored in encrypted form)
  • Expected due date (optional, used to personalize your experience)

Information Generated Through Use

As you use NourishFlow, we store the data you create within the platform, including:

  • Meal plans and meal planning preferences
  • Shopping lists and shopping list items
  • Freezer inventory entries and tracking data
  • Recipe bookmarks and favorites
  • Newsletter subscription preferences

Automatically Collected Information

When you access our Service, we may automatically collect certain information, including:

  • Device information (browser type, operating system, device type)
  • IP address and approximate geographic location
  • Usage data (pages visited, features used, time spent on pages)
  • Referring website or source

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Create and manage your account and authenticate your identity
  • Personalize your experience, including meal recommendations and nutrition content
  • Store and sync your meal plans, shopping lists, and freezer inventory across devices
  • Send you transactional emails (account confirmation, password resets)
  • Send you marketing communications, such as newsletters, if you have opted in
  • Analyze usage patterns to improve our features and user experience
  • Detect, prevent, and address technical issues or abuse
  • Comply with legal obligations

3. Data Storage & Security

Your data is stored securely using Supabase, a trusted cloud database platform. Supabase provides enterprise-grade security including encryption at rest and in transit, and regular security audits.

Our application is hosted on Vercel, which provides secure, globally distributed hosting with automatic HTTPS encryption for all traffic.

We implement Row Level Security (RLS) policies on our database to ensure that users can only access their own data. Passwords are hashed and never stored in plain text. Authentication sessions are managed through secure, HTTP-only cookies.

While we take reasonable measures to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

4. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: You can request a copy of the personal data we hold about you.
  • Correction: You can request that we correct any inaccurate or incomplete personal data.
  • Deletion: You can request that we delete your personal data. You may also delete your account at any time through your account settings.
  • Portability: You can request a copy of your data in a structured, machine-readable format.
  • Opt-Out: You can opt out of marketing communications at any time by clicking the unsubscribe link in any email or contacting us directly.

To exercise any of these rights, please contact us at privacy@nourishflow.baby.

5. Cookies

We use cookies and similar technologies to operate and improve the Service. The cookies we use include:

  • Essential Cookies: Required for authentication and session management. These cookies keep you logged in and ensure the security of your account. They cannot be disabled.
  • Analytics Cookies: Help us understand how visitors interact with our website so we can improve the user experience. These cookies collect anonymous usage data.

Most web browsers allow you to manage cookie preferences through their settings. However, disabling essential cookies may prevent you from using certain features of the Service.

6. Third-Party Services

We use the following third-party services to operate the platform:

  • Supabase: Database hosting, authentication, and data storage
  • Vercel: Application hosting and content delivery
  • Email Service Provider: Transactional and marketing email delivery (newsletter)

These third-party providers have their own privacy policies governing how they handle your data. We encourage you to review their policies. We do not sell, rent, or trade your personal information to any third parties for marketing purposes.

7. Children's Privacy

The Service is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 16, please contact us at privacy@nourishflow.baby.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending you an email notification. We encourage you to review this Privacy Policy periodically for any changes.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

NourishFlow

Email: privacy@nourishflow.baby