Privacy Policy

This Privacy Policy explains how NuLev accesses, collects, uses, shares, retains, and deletes personal and sensitive health data for its nutrition follow-up platform.

Updated on: May 21, 2026

Developer and privacy contact

NuLev is the platform described in this policy. For privacy requests, account deletion, questions, or support, contact suporte@nulev.com.br.

Data we collect

• Account and contact data, such as name, email address, phone number, account ID, and authentication data.
• Health and nutrition follow-up data, such as meal plans, meals, food preferences, restrictions, adherence logs, measurements, progress notes, consultation status, reminders, questionnaire answers, and messages.
• Photos selected by the patient for progress tracking or follow-up answers.
• Device and app data, such as push notification token, device identifier, device model, operating system, app version, language, timezone, and basic app usage events needed to operate the service.

How we use data

We use data to provide secure account access, display nutrition plans assigned by a professional or clinic, track progress and follow-up responses, send reminders and notifications, provide support, maintain security, debug the service, administer the platform, and meet legal, regulatory, and professional record obligations where applicable.

Sharing

Data may be shared with the nutrition professional, clinic, or care team responsible for the patient's follow-up, service providers used to host the backend, deliver notifications, provide support, monitor reliability, or secure the application, and authorities or third parties when required by law or to protect safety and security. NuLev does not sell personal data and does not track users for advertising across apps or websites.

Photos and permissions

The mobile app asks for photo library access only when the patient chooses to upload a progress photo or image answer. The selected image is sent to the NuLev backend for the care workflow. The current mobile app does not use device location, contacts, microphone, camera capture, advertising ID, or cross-app advertising tracking.

Security

Production network communication uses HTTPS. Session tokens are stored in secure device storage when available. Access to patient data requires authentication. No measure can guarantee absolute security, but the service is designed to limit access to authorized users and providers.

Retention and deletion

Account and contact data is retained while the account is active and for up to 30 days after an authenticated deletion request before direct identifiers are removed, unless legal, contractual, security, or professional record obligations require a longer period. Clinical and nutrition records may be retained for the professional or legal record period applicable to the responsible clinic and then deleted or anonymized.

User rights

Patients and platform users can request access, correction, export, or deletion by contacting suporte@nulev.com.br, using the authenticated in-app account deletion request flow, or visiting the account deletion page.

Children

NuLev is intended for patients under the care of a participating professional or clinic. If the app is used by a minor, the responsible provider or guardian must ensure appropriate authorization under applicable law.

Health disclaimer

NuLev supports nutrition follow-up and wellness management. It is not a medical device and does not diagnose, treat, cure, or prevent medical conditions. It does not replace medical care or emergency services.