Privacy Policy

Who we are

Nuneo is a diabetes-friendly food and wellness app operated by Nuneo LLC from Texas, USA. You can reach us any time at our contact form.

Information we collect

• Account information: your email address and password (passwords are stored securely by our authentication provider, not by us in plain text).
• Profile information: details you provide during setup, such as your name or nickname, age, gender, diabetes type, dietary needs, and allergy notes.
• Health information: glucose readings you enter manually or that we retrieve from a connected device (e.g., Dexcom), meals and food you log, and photos of food or nutrition labels you scan.
• Payment information: handled by our payment processor (Stripe). We do not see or store your full card number.
• Usage information: basic technical and usage data needed to operate and improve the app.

How we use your information

• To provide the app and personalize recipes, food suggestions, and guidance to your profile and (where available) your current glucose.
• To process your subscription and payments.
• To communicate with you about your account and the service.
• To maintain, secure, and improve Nuneo.
• To comply with legal obligations.

How your information is shared

We do not sell your personal information. We share information only with service providers who help us run Nuneo, and only as needed:

• Supabase — secure database and account authentication.
• Stripe — payment processing and subscription management.
• Anthropic (Claude) — powers AI features. When you use the craving assistant, dining guide, nutrition estimates, or package scan, the relevant text or image (and limited context such as your dietary needs and current glucose status) is sent to Anthropic to generate a response. Per Anthropic's API terms, this data is not used to train their models.
• Dexcom — if you connect a Dexcom device, we access your glucose data through Dexcom's API with your authorization.
• Vercel — app hosting.
• RevenueCat — manages app store subscriptions and purchase status.
• Email provider (Google Workspace) — account-related communication.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and Nuneo.

De-identified information

We may create de-identified information — data stripped of anything that identifies you, such as your name, email, and account ID — and use it to understand how Nuneo is used, to improve our recipes and features, and to report on the service in aggregate. We do not attempt to re-identify this information, and we do not sell it. Your individual glucose readings, meals, photos, and notes are never shared in identifiable form for these purposes.

A note on health data

Nuneo is a direct-to-consumer wellness app and is generally not a “covered entity” under HIPAA. However, we recognize your glucose and health information is sensitive, and we apply reasonable safeguards. As a health app, we are subject to the FTC Health Breach Notification Rule and will notify you and the appropriate authorities of a breach of your unsecured health information as required by law.

Data security & retention

We use industry-standard measures (including encryption in transit and access controls through our providers) to protect your information. No system is perfectly secure, but we work to keep your data safe. We keep your information for as long as your account is active and as needed to provide the service or meet legal obligations. You can ask us to delete your account and associated data at any time.

Your choices & rights

Depending on where you live (including under the Texas Data Privacy and Security Act and similar U.S. state laws), you may have the right to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain processing. To exercise any of these rights, use our contact form. You can disconnect a CGM device or stop using AI features at any time within the app.

If you live in Washington or Nevada, your glucose readings, meals, and other health-related information are “consumer health data” under state law and carry additional rights. Those are set out in our Consumer Health Data Privacy Policy.

International users

Nuneo is operated from the United States, and your information is stored and processed there. If you use Nuneo from outside the U.S., you understand that U.S. privacy laws may differ from those where you live. We are not currently set up to offer the specific rights provided under the EU/UK GDPR, so Nuneo is intended for use in the United States.

Children

Nuneo is intended for adults aged 18 and over. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, notify you.

Contact us

Questions about your privacy? Use our contact form.