Nourish Privacy Policy

Last Updated: August 17, 2026

This Privacy Policy (“Privacy Policy” or “Policy”) describes the practices of Nourish, Inc. (“Nourish,” or “we,” or “us,” or “our”) with respect to the collection and use of personal information, including through our website(s) and mobile applications (the “Sites”), and the rights you may have with respect to your personal information.

By using our Sites and otherwise interacting with us, you agree to the terms of our Terms of Service, including this Policy. 

This Policy does not apply to protected health information that is subject to medical privacy laws, such as the Health Insurance Portability and Accountability Act (HIPAA), except for disclosures we make in this Policy in the Health App Data Sharing section, which we include herein for ease of reference. See our Notice of Privacy Practices for information about our privacy practices with respect to medical information, also known as protected health information (“PHI”), that we collect when operating in a capacity other than a business associate (i.e., vendor) and similar roles to a health care provider or health plan. This includes how we use and disclose information that you may agree to provide Nourish access to through Apple HealthKit (available to users as “Apple Health”) on iOS and the Health Connect API on Android. See the Health App Data Sharing section herein and in our Notice of Privacy Practices for more information. 

This Policy also does not cover the personal information we collect about our employees and independent contractors, health care providers, or job applicants. 

Notice at Collection: Personal Information We Collect 

We collect the following categories of personal information:

• Personal identifiers: name, email address, phone number, information related to customer reviews, date of birth, IP address, mobile advertising ID, social media handles when provided to us
• Consumer records and related information: preferred language, cuisine 
• Commercial information: records of services considered, insurance coverage choice in checking coverage potential, testimonials and customer reviews 
• Internet or other electronic activity information: your device and browser type, your browsing and search history on our Sites, and information regarding certain interactions with our Sites and our advertisements
• Professional information: credentials selected prior to onboarding. When working for entities with which we do business: job title, information about your employer
• Geolocation information: state of residency
• Inferences drawn from personal information we collect

We have collected the same categories of personal information in the 12 months prior to the date of this Privacy Policy.   

Notice at Collection - Purposes for Collection of Personal Information

We collect the categories of Personal Information identified for the following purposes:

‍

Notice at Collection: Retention Periods

We retain the categories of personal information we collect for the length of time necessary to provide our services and to comply with legal obligations or to protect our legal rights.  

Notice at Collection: Categories of Personal Information We Sell or Share or Use for Targeted Advertising 

We may sell the following categories of personal information (according to the broad definition of “sell” under select state privacy laws), share them for purposes of cross-context behavioral advertising, or use them for targeted advertising: personal identifiers (including IP address, mobile advertising IDs) and internet or other electronic activity information.  

These categories of personal information are sold to or shared for cross-context behavioral advertising or targeted advertising with advertising networks, data brokers and other companies that facilitate or engage in digital advertising. We engage in such sales and sharing to facilitate personalized advertising.  We do so by allowing third parties to place cookies or other tracking technologies on our Sites that may collect information about your online activities over time and across different websites or applications.  For more information about the use of cookies and other tracking technologies, see the section “Our Use of Cookies and Analytics” below.  

To opt out of such sales and sharing of personal information, click here.

We do not sell or share for cross-context behavioral advertising any of the other categories of personal information we collect.

Categories of Third Parties To Whom We Disclose Personal Information 

We disclose personal information to the following categories of entities that do not operate as our processors and are not our affiliates: Advertising companies and data brokers that process personal information for purposes of providing advertising and marketing services to us and other parties. 

Sources From Which We Collect Personal Information

We collect personal information directly from users of our Sites users, referrals, and representatives of entities with which we do business or may do business.  We also collect personal information from data aggregators and data brokers.

Use or Disclosure of Sensitive Personal Information 

We do not use or disclose sensitive personal information that is subject to US state data privacy laws to create profiles about or infer characteristics about individuals, or for any purposes that would give rise to the right to limit this use of sensitive information under applicable laws.  

No Profiling to Facilitate Decisions with Legal or Other Significant Effects

We do not engage in the automated processing of personal information to create profiles about individuals that are used in furtherance of decisions with legal or other similarly significant effects, such as the access to health services. 

Use of Personal Information to Train LLMs

We do not collect, use or sell personal information for the purpose of training large language models. 

Disclosure of Personal Information For Business Purposes in the Past 12 Months

In the 12 months prior to the date of this Policy, we disclosed the following categories of personal information to our service providers and contractors for a business purpose: 

• Personal identifiers: name, email address, phone number, information related to customer reviews, date of birth, IP address, mobile advertising ID, social media handles when provided to us
• Consumer records and related information: preferred language, cuisine 
• Commercial information: records of services considered, insurance coverage choice in checking coverage potential, testimonials and customer reviews 
• Internet or other electronic activity information: your device and browser type, your browsing and search history on our Sites, and information regarding certain interactions with our Sites and our advertisements
• Professional information: credentials selected prior to onboarding. When working for entities with which we do business: job title, information about your employer
• Geolocation information: state of residency
• Inferences drawn from personal information we collect

‍

Business Purposes for Disclosures of Personal Information 

We disclose personal information for the following business purposes: to manage potential customer relationships, supplier and vendor accounts and relationships; engage in analytics, advertising and marketing; operate our IT systems and secure our systems; prevent fraud and other illegal activities. 

We may also disclose your personal information as required or permitted by law to comply with a subpoena or similar legal process or government request, or when we believe in good faith that disclosure is legally required or otherwise necessary to protect our rights and property or the rights, property or safety of others, including to law enforcement agencies, and judicial and regulatory authorities. We may also disclose your personal information to other persons or entities to help detect and protect against fraud or data security vulnerabilities. And we may disclose or transfer your personal information in the event of an actual or potential sale, merger, reorganization of our entity or other restructuring.

Our Use of Cookies and Analytics

We may use cookies, pixel tags, web beacons and other similar tracking technologies (“tracking technologies”) to automatically collect information through our Sites. Tracking technologies are small data files placed on your computer, tablet, mobile phone, or other devices that record certain pieces of information when you visit our Sites. We may use these tracking technologies to help identify irregular behavior, prevent fraudulent activity and improve security, as well as making it possible for you to save your preferences and help us understand how you interact with us.  

We also allow third parties (including Google and Meta) to use third party cookies, web beacons, and other storage technologies to collect or receive information about how you interact with our Sites and elsewhere on the Internet and use that information to provide analytics and other measurements services, and to deliver and target advertisements tailored to you. Third parties may also use some of these technologies to assist us in determining if you require assistance or are having problems navigating on our Sites, and this may include technologies that record your interactions with the Sites, including without limitation, your keystrokes, mouse clicks, screen touches, and information about when, how and from where you accessed our Sites.  

You may set your browser to notify you when you receive a cookie. Many web browsers also allow you to block cookies. You can disable cookies from your computer system by following the instructions on your browser or at www.youradchoices.com.

We use Google Analytics to evaluate the use of our Sites. Google Analytics uses cookies and other identifiers to collect information, such as how often users visit a website, what pages they visit when they do so, and what other websites they visited prior to visiting our Sites. For information about Google’s privacy practices, please refer to the Google Privacy Policy: https://policies.google.com/privacy?hl=en-US#infocollect.  

Health App Data Sharing – Apple Health and Health Connect

The Apple HealthKit framework (available to users as Apple Health) on iOS and the Health Connect API (on Android) allow third-party health, fitness, and wellness applications to securely share, store, and synchronize health information on your device. If you choose to connect health information using these tools, Nourish may request permission to access the following types of health information, for the following purposes: 

• Weight – To track trends and support goals like weight loss, maintenance, or gain, depending on your health plan.
• Steps and Distance – To provide context on your daily activity, which can influence appetite, metabolism, and nutritional needs.
• Exercise – To understand the type, duration, and intensity of your training sessions and help support personalized guidance based on your workout habits and recovery needs.
• Resting Heart Rate – To give your dietitian a fuller picture of your baseline health and stress levels.
• Sleep – To help you and your dietitian understand how your sleep affects your hunger, energy levels, and eating patterns.
• Active Energy – To help you and your dietitian understand how much energy you burn throughout the day.
• Body Fat Percentage — To provide additional context alongside weight, so your dietitian can better interpret changes over time.

You are always in control of information shared with Nourish through HealthKit/Apple Health and Health Connect. Each tool gives you the ability to consent to sharing the data with us, including different categories of data, and to change your preferences at any time, including revoking your consent to sharing one or more categories of data with us.  

We will use health information you allow us to access through HealthKit/Apple Health and Health Connect to provide you with our services. Such information will constitute PHI and will be subject to our Notice of Privacy Practices. 

Notwithstanding any provisions of this Policy or our Notice of Privacy Practices, Nourish will not use information we collect through HealthKit/Apple Health or Health Connect for marketing, advertising or similar services and will not sell such information. We may disclose information obtained through HealthKit/Apple Health or Health Connect with third parties that provide a health or fitness service to you or that engage in medical research, but will do so only after obtaining your consent, including in accordance with any applicable laws. 

Personal Information of Minors

Our services and Sites are not directed to minors under the age of 13 and we do not knowingly sell or share for cross-context behavioral advertising the personal information of California residents under age 16 without their consent. 

SMS Consent and Terms and Conditions

Information obtained as part of SMS or text messaging consent will not be shared with third parties or affiliates; it will only be shared with service providers that operate our SMS/text messaging service for the purpose of providing that service.  

If you have consented to receive text messages from us, you may receive text messages about your appointments with us, new services, or discounts.  Message rates may apply and messaging frequency may vary.  You may opt out of text messages by texting STOP.  For additional information, you can text HELP.  Links to our Terms of Service and this Privacy Policy may also be provided.

Third Party Websites 

Our Sites may contain links to third-party websites, including social media buttons that link to social media platforms. This Policy does not govern how those third parties or social media platforms collect or use personal information and we do not endorse or have control over their practices.  The privacy policies and terms of use for those third parties’ websites/apps or social media platforms govern those companies’ privacy practices. We are not responsible for the content or privacy practices of any third-party websites or platforms.

Securing Your Personal Information 

We implement and maintain reasonable security appropriate to the nature of the personal information that we collect, use, retain, transfer or otherwise process. This includes that our service providers and third parties with which we share personal information (e.g., analytics tools, third-party SDKs, and ad networks) provide the same or equal level of reasonable security with respect to personal information we provide to them or allow them to access. 

However, there is no perfect security, and reasonable security is a process that involves risk management rather than risk elimination.  Accordingly, it cannot be assumed that the occurrence of any given incident or breach results from our failure to implement and maintain reasonable security.

Changes to This Policy

We will review and update this Policy from time to time.  If changes are made, we will update the Privacy Policy and reflect the date of such modification in the date above. If the changes are material, you will be notified via a notice on our website.

Accessibility

To make accessibility-related requests or report barriers, please contact us at support@nourish.com. 

Data Privacy Rights 

Right to Revoke Consent / Request Deletion of Data 

All users, irrespective of their state of residency, have the right to request that we delete their personal information. To the extent consent was obtained for the collection, use or other processing of their personal information, users also have the right to revoke such consent. To make either type of request, contact Nourish at support@nourish.com. 

Consumer Rights Under Comprehensive U.S. State Data Privacy Laws 

In addition, we provide residents of the following states with rights with respect to the personal information we may collect about them under their state’s data privacy law: CA, CO, DE, MD, MN, NH, NJ, and OR. The rights provided under these laws are similar in many respects, with some differences from state to state, and are subject to all applicable exceptions.  

These rights are in addition to any provided under HIPAA or similar state medical privacy laws.

Right to Know: The right to know whether we are processing your personal information.  

• California’s privacy law gives California residents the right to request the following additional information collected since January 1, 2022: Categories of personal information we have collected about them; categories of sources from which such personal information was collected; categories of personal information that the business sold or disclosed for a business purpose about the consumer; categories of third parties to whom the personal information was sold or disclosed for a business purpose; and the business or commercial purpose for collecting or selling your personal information.

Right to Access / Copy: The right to access or request a copy of your personal information.

Right to Delete: The right to request deletion of your personal information that we have collected about you.

Right to Correct: The right to request that we correct inaccuracies in your personal information.  

Right to Know Third Party Recipients of Personal Information: The right to know the identities of third parties to which a business has disclosed personal information.  This right is provided under Oregon and Minnesota privacy laws. 

Right to Know Categories of Third Parties: The right to know the categories of third parties to which we have disclosed personal information.  This is a right provided under the Maryland privacy law.  

Rights to Opt Out: Various rights to request that we stop using your personal information for one or more of the following purposes: 

• Sale of Personal Information: The right to request that we stop selling your personal information, consistent with the definition of “sale” in each law. 

• Targeted Advertising: The right to request that we stop processing your personal information for targeted advertising, subject to exceptions in some state laws.  This is not a right provided for under privacy laws in California; however, the right to opt out of sharing personal information under that state’s law is similar. 

• Sharing for Cross-Context Behavioral Advertising: California’s law provides the right to request that we stop sharing a California resident’s personal information for cross-context behavioral advertising.  

Exercising Your Rights

We will respond to requests from residents of states with data privacy laws that apply to us and will do so with respect to the rights that are provided as of the effective date of each law. 

To exercise applicable rights other than opt-out rights, submit a request by contacting us at support@nourish.com. 

To exercise opt-out rights, submit your request here.

Opt-out Preference Signals and Do Not Track

An opt-out preference signal is sent by a platform, technology, or mechanism on behalf of consumers and communicates a consumer’s choice to opt out of the sale and sharing of personal information for cross-context behavioral advertising with all businesses that recognize the signal, without having to make individualized requests.  The signal can be set on certain browsers or through opt-out plug-in tools.  

We recognize the Global Privacy Control signal when sent from the following states: CA, CO, DE, MD, MN, NH, NJ, and OR. If you would like more information about opt-out preference signals, including how to use them, the Global Privacy Control website has such information (https://globalprivacycontrol.org/). 

We do not respond to the DNT or “Do Not Track” signal. 

Exercising Your Rights Using Authorized Agents

Agents may submit opt-out requests on behalf of individuals under several state data privacy laws; this is not an option that is available under all state data privacy laws, though.  California residents can designate an agent to submit all other types of requests. 

If the agent submits an opt-out request on your behalf, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the opt-out request on your behalf.  Agents can submit opt-out requests here.  

If you are a California resident and you use an agent to submit other types of requests, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the request on your behalf.  You will also be required to verify your identity directly with us or confirm with us that you provided the agent with permission to submit the request. Agents can submit requests on behalf of California residents (other than opt-out requests) by contacting us at support@nourish.com.

Please note that this subsection does not apply when an agent is authorized to act on your behalf pursuant to a valid power of attorney. Any such requests will be processed in accordance with state law pertaining to powers of attorney.

Verification of Requests 

When you exercise rights other than opt-out rights [and the right to limit collection of sensitive personal information], we will take steps to verify your identity.  We will ask you for at least two pieces of personal information, depending on the nature of the request, and attempt to match those to information that we maintain or collect about you.

If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request.  We will notify you to explain the basis of the denial.

When We Do Not Act on a Request

In some cases, we may not act on your requests (e.g., if we cannot do so under other laws that apply). When this is the case, we will explain our reasons for not providing you with the information or taking the action (e.g., correcting data) you requested.    

Additionally, residents of states other than California have the right to appeal our decision by contacting us at support@nourish.com within 30 days after your receipt of our decision.  

California Shine the Light

With reference to California Civil Code Section 1798.83, also known as the “Shine the Light” law, we allow California residents to opt out of the disclosure of personal information to third parties for those third parties’ direct marketing purposes.  To exercise that opt-out option, click here.

Non-Discrimination

If you exercise any of the rights explained in this Privacy Policy, we will continue to treat you fairly.  

Contact Us

If there are any questions regarding this Privacy Policy or to request a copy of this Privacy Policy in another format you may contact us at support@nourish.com

‍