Privacy policy

Last updated: 16 October 2026

1. Who processes the data

The data controller is:

Davide Russo
Via Antonio Dal Zotto 38
00127 Roma (RM)
Italy
support@nutricuapp.com

Nutricu is made by one person. For any question about your data, write to support@nutricuapp.com.

2. What data and why

Your account

Email and password, to sign in and connect your devices. We don't know your password: we only keep a fingerprint of it (scrypt). We also keep your language (for emails), the creation date and your plan (free or Plus). Sessions last 30 days; the codes we email you are valid for 15 minutes.
Legal basis: performance of the contract.

The emails we send you

Only service emails: the verification code, the code to change your password, family invitations and the confirmation that your account was deleted. No newsletters or advertising.
Legal basis: performance of the contract.

Device name

When a device connects, it sends us its name (which you can change), so it can be shown to your other devices. It stays in memory while the device is connected and is not saved, except for the camera's name in nights.
Legal basis: performance of the contract.

IP cameras

If you add an IP camera, we save the name and the address you enter, which may contain the camera's username and password, so you have it on all your devices. The video is read directly by the phone, not by the server.
Legal basis: performance of the contract.

Family

When you invite someone, we save their email while the invitation is open and send them an email that contains yours. Family members see each other's email addresses and share cameras, nights and clips.
Legal basis: performance of the contract.

Nights (Nutricu Plus)

While a monitor is listening, the app recognises the moments of the night. We send the server the listening times and, for each moment, its start and end, how long the sound lasted, how loud it was and what kind of sound it was (for example crying, coughing, voice), with the camera's name and time zone. Not the audio.
The baby's birth month is optional: it helps read sounds better from one year of age, and you can remove it whenever you like.
Legal basis: performance of the contract.

Audio clips of moments

For each moment the phone records a short clip, which stays on the phone. It goes to the server only if you choose so: if you send the sounds, if you label a sound or, on Android, if you turn on the detailed night log. We use them to teach Nutricu to recognise your family's sounds. We don't use them to improve recognition for others without asking you first. Clips may contain the voice of the baby and of anyone in the room.
Legal basis: consent, which you withdraw by deleting the clips.

Logs for support

Android: the detailed night log (optional, for 3 nights) sends sound levels, not audio.
iPhone: the diagnostic log (off by default) sends the app's log lines from the last 48 hours, stripped of passwords and codes, with the phone model, the iOS and app versions, the time zone and a random identifier of the phone.
They are used only to understand and fix problems.
Legal basis: consent, which you withdraw by turning them off.

Subscription

Purchases go through the App Store or Google Play: we never see payment details. To know whether you have Plus we use RevenueCat, to which the app gives only a random identifier of your account, not your email. The server keeps the type of purchase, the expiry date and whether you are on a trial.
Legal basis: performance of the contract and legal obligations.

Technical logs and security

The server's logs may contain your IP address and email, for example in errors, rejected requests or at sign-up. To slow down password guessing, the server remembers the attempts from each IP address for 10 minutes, in memory only. Logs are overwritten automatically after a short time.
Legal basis: legitimate interest in the security of the service.

Support

If you write to support@nutricuapp.com, your email reaches a Gmail mailbox of the controller through Cloudflare's email forwarding, and we keep it as long as needed to reply.
Legal basis: legitimate interest in replying, or performance of the contract.

This website

nutricuapp.com uses no cookies, no analytics and no third-party resources.

3. What we don't do

• We never save live video and audio.
• No ads and no advertising, analytics or tracking SDKs.
• We don't sell or hand over your data.
• No profiling and no automated decisions with legal effects on you.

4. Who we entrust it to

Some providers process data on our behalf, only as needed:

Apple and Google handle App Store and Google Play payments as independent controllers, under their own privacy policies.

5. How long

• Account, settings, IP cameras: until you delete your account. An account that is never confirmed is deleted after 7 days.
• Nights: about the last two months (61 days); older moments are deleted when new ones arrive.
• Audio clips: until you delete them (one by one or with “Delete history”) or delete your account.
• Logs for support: 14 days.
• Identifiers of purchase notifications: 60 days.
• Family invitations: until they are accepted, declined or cancelled.
• Backups: encrypted, they disappear on rotation within [DURATA BACKUP].

How to delete your account and what is deleted: Delete account.

6. How we protect it

Everything travels over HTTPS. Passwords and sessions are stored only as fingerprints. Live video and audio are encrypted from one device to another. The server is in Germany and only the controller can access it.

7. Your rights

You can ask to access your data, correct it, delete it, restrict its processing, receive it in a readable format (portability) and object to processing based on legitimate interest; you can withdraw your consent at any time, without affecting what was done before. Many things you can do yourself in the app; for the rest, write to support@nutricuapp.com. We reply within one month.

If you think we are processing your data unfairly, you can lodge a complaint with the Italian Garante per la protezione dei dati personali or with the authority of the EU country where you live.

8. Children

Nutricu is for parents and for adults who look after a child, not for children: you must be an adult to create an account. The only data about the child is what you choose to give us: the birth month, the moments of the nights and the clips you send.

9. Changes

If we change this policy we publish it here, with the date at the top. We'll tell you about important changes in the app or by email.