Privacy Policy

1. Introduction

Nouri: Five A Day is a fruit and vegetable tracking and habit-building app. It helps you log daily portions, follow a personalised daily goal, see progress and streaks, and optionally enable reminders and Premium features. Nouri is a general wellness and lifestyle tool — it is not a medical device and does not provide medical diagnosis or treatment.

This policy describes what information the App may store or process, how that information is used, what may be transmitted to third parties, and the choices available to you.

2. Who is responsible

The data controller for personal data processed in connection with the App (where UK data-protection law applies) is:

Three Two One Global Ltd

Company number: 17295075

Registered office: 47 Old Bath Road, Sonning, Reading, England, RG4 6SY

Email: [email protected]

Website: https://threetwooneglobal.com/

This policy applies to users of the Nouri: Five A Day iOS application and visitors to related support, privacy and terms pages on threetwooneglobal.com.

3. Information Nouri processes

Nouri does not require you to create an account or sign in. We do not operate a custom food-log cloud backend for syncing your daily logs.

Depending on how you use Nouri, information may include:

• fruit and vegetable logging information you enter (for example food items, quantities, portions credited, category and time logged);
• daily goals, progress, streak and history information generated in the App;
• reminder preferences and scheduled local reminder settings;
• in-App preferences such as theme, mascot name and onboarding choices;
• purchase and entitlement information processed by Apple and RevenueCat when you buy or restore Nouri Premium; and
• limited product-analytics and technical information processed by PostHog (see below).

We distinguish between (a) food logs, goals, streaks, reminders and preferences stored locally on your device, and (b) purchase, entitlement and limited product-analytics information processed off-device so paid features and product improvement can work.

Fruit and vegetable logs are lifestyle and habit-tracking information. They are not medical records. We do not use them to diagnose conditions or provide clinical advice. Because these logs stay on your device and are not uploaded to our servers, we do not treat them as special-category health data for cloud processing. If you include sensitive detail in a support email, we will handle that correspondence carefully.

4. Local app data

Most information you enter into Nouri — including food logs, daily progress, streak-related history, reminder configurations and many preferences — is stored locally on your iPhone using on-device storage (including SwiftData and UserDefaults). Widget-related progress snapshots may also be shared with the App's widget extension through an App Group on your device.

Three Two One Global does not operate a Nouri account system that stores your food logs on our servers. Because there is no Nouri cloud food-log backend, we cannot remotely access, export, recover or delete your local logs from your device.

You can remove locally stored App data by deleting the App from your device, subject to device and iCloud backup behaviour controlled by Apple and your settings. The current App implementation does not provide a separate "Delete all data" button in Settings.

5. Purchases, Apple In-App Purchase and RevenueCat

Nouri offers optional Nouri Premium purchases through the Apple App Store. Based on the current App Store product configuration used by the App, Premium may be available as:

• a monthly auto-renewing subscription (App Store product identifier: nouri.monthlymain); and/or
• a one-time lifetime non-consumable purchase (App Store product identifier: nouri.lifetime).

Exact products, prices and availability are shown in the App and on the App Store before you purchase and may vary by region and storefront. Expected UK display prices for these products are £1.99 per month for the monthly subscription and £9.99 for the lifetime purchase, but the price Apple shows at checkout is controlling.

Payment is processed by Apple. We do not receive or store your full payment-card details.

We use RevenueCat to help manage products, purchase validation, subscription and lifetime entitlements, Premium access status and Restore Purchases. Apple and RevenueCat may process information such as:

• an anonymous app user / customer identifier;
• product and transaction identifiers;
• purchase receipts and related receipt information;
• subscription, lifetime-purchase and entitlement status;
• App Store region, platform and device-related technical information; and
• information used for purchase validation, restoration and fraud prevention.

We use this information to provide purchased features, restore purchases, prevent entitlement errors and support purchase-related enquiries. Purchase and entitlement information is separate from your locally stored food logs.

RevenueCat processes data under its own terms and privacy policy: https://www.revenuecat.com/privacy

Apple also processes purchase-related data under Apple's privacy terms: https://www.apple.com/legal/privacy/

6. Product analytics (PostHog)

Nouri uses PostHog as an active product-analytics provider so we can understand how the App is used and improve features, performance and reliability.

Based on the current App implementation:

• PostHog is configured to use PostHog's EU host (eu.i.posthog.com);
• analytics starts when the App launches;
• the App uses a Keychain-backed installation identifier (a UUID generated on your device — not IDFA);
• the App registers technical properties such as app version, build number and platform;
• session recording / session replay is disabled;
• automatic element-interaction capture is disabled;
• automatic screen-view capture is disabled;
• automatic application-lifecycle capture is disabled in the current configuration; and
• the deliberate product events currently sent through the App's analytics facade are app_installed and app_opened.

PostHog may therefore process limited technical and product-usage information, including the installation identifier, those app properties, and the product events described above. PostHog's service may also receive standard technical data associated with network requests to its servers (for example IP address), according to PostHog's own practices.

Based on the current product design and code path, Nouri does not intentionally include food-log contents, goal values, streak details or reminder message text in analytics events. We do not use PostHog for behavioural advertising, and we have not identified IDFA or App Tracking Transparency-based advertising tracking in the current App implementation.

The installation identifier is pseudonymous — it can distinguish installs over time, but it is not your name or email address. Claims that analytics are "completely anonymous" would be inaccurate.

The current App does not provide an in-App toggle to disable PostHog. If you do not want this processing, do not use the App, or contact us for help with analytics-related requests where UK data-protection law applies.

Product analytics is not the same as cross-app advertising tracking. PostHog acts as a service provider/processor on our behalf. Information is handled in accordance with PostHog's privacy practices: https://posthog.com/privacy

7. Notifications

Nouri can send local reminders to help you reach your daily fruit and vegetable goals. These are scheduled on your device through Apple's notification system. We do not use a separate third-party push-notification marketing provider for Nouri at this time.

You can enable or disable notifications in Nouri's reminder settings and in your device notification settings. Free users can use a basic reminder; Premium unlocks additional reminder options where available in the App.

8. Support correspondence

If you contact us by email (for example at [email protected]), we process the information you provide — typically your email address, message content and any attachments — solely to respond to your enquiry and improve our support.

9. How information is used and lawful bases

We use information to:

• provide fruit and vegetable tracking, goals, progress, streaks, history and related App features;
• save your preferences and reminder settings on your device;
• validate and manage Nouri Premium purchases through Apple and RevenueCat;
• understand product usage and improve the App through limited PostHog analytics;
• respond to support requests you send us by email;
• operate, maintain and improve the App; and
• comply with legal obligations where applicable.

Where UK GDPR applies, we rely on the following lawful bases as appropriate:

• Performance of a contract — providing the App features you request and fulfilling Premium purchases you make through Apple;
• Legitimate interests — understanding limited product usage via PostHog to improve reliability and features, and securing purchase entitlements against abuse, where those interests are not overridden by your rights;
• Consent — where Apple requires permission for notifications, and where other consent is required by law; and
• Legal obligation — where we must retain or disclose information to comply with law.

We do not sell your personal information. We do not use your food logs for behavioural advertising.

10. Data sharing and service providers

We may share limited information with service providers that help us operate the App, including:

• Apple — App Store distribution, StoreKit payments, local notifications and device operating-system features;
• RevenueCat — purchase validation and entitlement management; and
• PostHog — limited product analytics.

We do not use a separate authentication provider, custom cloud host for food logs, or dedicated crash-reporting SDK in the current App implementation.

We may disclose information if required by law, regulation, legal process or enforceable governmental request, or to protect rights, safety and security.

11. International processing

Apple, RevenueCat and PostHog may process information in the United Kingdom, European Economic Area, United States or other countries. PostHog is configured to use an EU host for this App. Where required, appropriate safeguards apply under applicable law and the provider's terms. We do not claim a specific transfer mechanism beyond what those providers document for their services.

12. Data retention

Food logs, goals, streaks, reminder settings and related progress information you enter generally remain on your device until you remove them through in-App controls where available, or by deleting the App.

If you email us for support, we retain correspondence for as long as reasonably needed to resolve your request and meet legal obligations.

Apple, RevenueCat and PostHog may retain purchase, entitlement and analytics records according to their own retention practices and legal requirements. We have not independently audited those providers' exact retention periods for this App.

13. Your rights

Depending on applicable law (including UK data-protection law), you may have rights to request access, rectification, erasure, restriction, objection or data portability in respect of personal data we control, and to withdraw consent where processing is based on consent.

Because most food-log and progress content stays on your device, contact us for help with purchase, analytics or support-related personal data. For local App content, use in-App controls where available, or delete the App.

To exercise rights that apply to information we control, email [email protected]. You also have the right to complain to the UK Information Commissioner's Office (ICO): https://ico.org.uk/

14. Children's privacy

Nouri is intended for a general audience and is not directed to children under 13 (or under 16 where a higher age is required by local law). We do not knowingly collect personal information from children under those ages through our support channels. If you believe a child has provided personal information to us by email, contact us and we will take appropriate steps.

Parents and guardians who permit a young person to use Nouri on a shared device should review notification and purchase settings on that device.

15. Security

We take reasonable technical and organisational measures appropriate to a consumer wellness app, including relying on Apple platform protections for on-device storage and using reputable processors for purchases and analytics. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

16. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective and last-updated dates above. Where required by applicable law, we will provide additional notice or obtain consent before material changes take effect.

17. Contact

Questions about this Privacy Policy:

Three Two One Global Ltd

Email: [email protected]

Website: https://threetwooneglobal.com/