Privacy Policy
Last updated: June 25, 2026
This Privacy Policy explains what information Nuneo (“Nuneo,” “we,” “us”) collects, how we use it, and the choices you have. Nuneo handles sensitive health information, and we take that seriously.
Who we are
Nuneo is a diabetes-friendly food and wellness app operated from Texas, USA. You can reach us any time at our contact form.
Information we collect
- Account information: your email address and password (passwords are stored securely by our authentication provider, not by us in plain text).
- Profile information: details you provide during setup, such as your name or nickname, age, gender, diabetes type, dietary needs, and allergy notes.
- Health information: glucose readings you enter manually or that we retrieve from a connected device (e.g., Dexcom), meals and food you log, and photos of food or nutrition labels you scan.
- Payment information: handled by our payment processor (Stripe). We do not see or store your full card number.
- Usage information: basic technical and usage data needed to operate and improve the app.
How we use your information
- To provide the app and personalize recipes, food suggestions, and guidance to your profile and (where available) your current glucose.
- To process your subscription and payments.
- To communicate with you about your account and the service.
- To maintain, secure, and improve Nuneo.
- To comply with legal obligations.
How your information is shared
We do not sell your personal information. We share information only with service providers who help us run Nuneo, and only as needed:
- Supabase — secure database and account authentication.
- Stripe — payment processing and subscription management.
- Anthropic (Claude) — powers AI features. When you use the craving assistant, dining guide, nutrition estimates, or package scan, the relevant text or image (and limited context such as your dietary needs and current glucose status) is sent to Anthropic to generate a response. Per Anthropic's API terms, this data is not used to train their models.
- Dexcom — if you connect a Dexcom device, we access your glucose data through Dexcom's API with your authorization.
- Vercel — app hosting.
- Email provider (Google Workspace) — account-related communication.
We may also disclose information if required by law, or to protect the rights, safety, and security of our users and Nuneo.
A note on health data
Nuneo is a direct-to-consumer wellness app and is generally not a “covered entity” under HIPAA. However, we recognize your glucose and health information is sensitive, and we apply reasonable safeguards. As a health app, we are subject to the FTC Health Breach Notification Rule and will notify you and the appropriate authorities of a breach of your unsecured health information as required by law.
Data security & retention
We use industry-standard measures (including encryption in transit and access controls through our providers) to protect your information. No system is perfectly secure, but we work to keep your data safe. We keep your information for as long as your account is active and as needed to provide the service or meet legal obligations. You can ask us to delete your account and associated data at any time.
Your choices & rights
Depending on where you live (including under the Texas Data Privacy and Security Act and similar U.S. state laws), you may have the right to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain processing. To exercise any of these rights, use our contact form. You can disconnect a CGM device or stop using AI features at any time within the app.
Children
Nuneo is intended for adults (18+) and is not directed to children under 13. We do not knowingly collect personal information from children under 13.
Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, notify you.
Contact us
Questions about your privacy? Use our contact form.