Privacy Policy

YouNutri ("we", "us", or "our") operates the YouNutri Pro platform, a practice management and nutrition tooling platform for registered dietitians and nutritionists. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our service.

YouNutri is committed to compliance with the Health Insurance Portability and Accountability Act (HIPAA), the General Data Protection Regulation (GDPR), and Brazil's Lei Geral de Proteção de Dados (LGPD) where applicable. By using YouNutri, you agree to the practices described in this policy.

Account Information

When you create an account, we collect your name, email address, professional credentials, and billing information.

Client Health Data (Protected Health Information)

As a platform used by healthcare professionals, YouNutri processes Protected Health Information (PHI) on behalf of your practice. This includes client names, health conditions, dietary restrictions, meal plans, appointment records, and messages exchanged through the platform. You are the covered entity; we act as your Business Associate under HIPAA.

Usage Data

We automatically collect information about how you interact with our platform, including IP addresses, browser type, pages visited, and actions taken. This data is used to improve the service and is never linked to your clients' PHI.

• To provide, operate, and maintain the YouNutri platform
• To process payments and manage your subscription
• To generate AI-assisted meal plans — PHI is never sent to AI providers; only de-identified aggregate health categories are used
• To send transactional emails (login codes, appointment reminders, invoices)
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations and enforce our agreements

We do not sell your data or your clients' data to third parties.

YouNutri operates as a Business Associate (BA) under HIPAA. We sign a Business Associate Agreement (BAA) with every practice that uses our platform for PHI. Key safeguards include:

• PHI is encrypted at rest (AES-256) and in transit (TLS 1.2+)
• All access to PHI is logged and retained for a minimum of 6 years
• Access is role-based — only authorized members of your workspace can view client data
• We maintain a documented breach notification procedure with a 60-day reporting window
• A designated Privacy Officer oversees compliance

To request a BAA or for HIPAA-related inquiries, contact us at hipaa@younutri.com.

We share data only in the following circumstances:

• Service providers: Vendors that help us operate (hosting, payments, email) under BAAs or data processing agreements where required
• Legal requirements: When required by law, court order, or to protect our legal rights
• Business transfers: In the event of a merger or acquisition, your data may be transferred to the successor entity under equivalent privacy protections

We retain account data for the duration of your subscription plus 90 days after termination. PHI in audit logs is retained for 6 years as required by HIPAA. You may request deletion of non-PHI account data at any time; PHI deletion is subject to HIPAA retention requirements and your clients' rights under applicable law.

Depending on your jurisdiction, you may have the right to:

• Access, correct, or export your personal data
• Request deletion of your data
• Object to or restrict processing
• Lodge a complaint with a supervisory authority

To exercise any of these rights, email privacy@younutri.com. We respond within 30 days.

Client rights: Clients of your practice may also have rights over their PHI under HIPAA. As the covered entity, you are responsible for handling those requests. We will assist you as required under our BAA.

We use a single functional cookie (NEXT_LOCALE) to remember your language preference. We do not use tracking or advertising cookies on the pro platform. Analytics (if any) are aggregate and non-personal.

YouNutri Pro is intended for healthcare professionals and is not directed at individuals under 18. We do not knowingly collect personal data from minors.

We may update this policy periodically. We will notify you of material changes by email or via an in-app notice at least 30 days before the change takes effect. Continued use after the effective date constitutes acceptance.

For questions about this policy, contact our Privacy Officer at privacy@younutri.com or write to: