Privacy Policy

NutraBox is a meal-preparation and delivery service operating in Lahore, Pakistan. This policy covers our website, our customer app, and the staff app our own team uses.

Account details — your name, email address, phone number, and password. We need these to create your account, sign you in, and contact you about your deliveries. Passwords are stored only as an irreversible cryptographic hash; nobody at NutraBox can read yours.

Delivery addresses and location — the addresses you save, their map coordinates, and any delivery instructions you add. Coordinates come either from the address you type or from a map pin you place yourself; we use them to group deliveries into routes and to help the rider find your door.

Assessment form answers — age, gender, occupation, height, current and goal weight, and how you heard about us. These size your portions and let us recommend a plan.

Health information — medical conditions, medications, supplements, recent surgery, food intolerances, allergies, and foods you dislike or avoid. You choose whether to give us these. Allergies and avoid-lists are screened against every dish the kitchen plans for you, which is the main reason we ask. We treat all of it as sensitive.

Emergency contact — a name and phone number, so we can reach someone if something goes wrong during a delivery.

Payment records — the amount you paid, the date, and the transfer receipt you upload. We do not take card payments and we never receive or store card numbers, CVVs, or bank credentials.

Delivery records — when each order was delivered or failed, and, when a delivery fails, a photo taken by the rider as proof of the attempt.

Usage records — meals you swap, macros you log, messages you send the diet assistant, and notifications we send you.

Our own staff, and only the parts their job needs: the kitchen sees allergy and dislike flags for the meals it is cooking, riders see the delivery address and phone number for the stops on their route, and administrators see the account and payment records. Every one of these views is controlled by a role, and every change to your data is recorded in an audit log with who made it and when.

Service providers who process data on our behalf: our cloud hosting and database provider, our email provider, Cloudinary (which stores uploaded payment receipts and delivery photos), Google Maps Platform (address lookup and route optimisation), and the provider behind our AI diet assistant. They act on our instructions and are not permitted to use your information for their own purposes.

Nobody else. We do not sell your personal information, and we do not share it for advertising.

When you chat with the assistant, your message and the relevant parts of your plan and macro history are sent to a third-party AI provider to generate the reply. Do not use it to share anything you would not want processed this way. The assistant offers general nutrition guidance only — it is not medical advice, and it is not a substitute for your doctor or dietitian.

Account, subscription, payment, and delivery records are kept while your account is open and afterwards for as long as we need them for accounting and dispute-resolution purposes.

If you close your account, we deactivate it and stop using your data to operate the service, but the underlying business and audit records are retained. If you want your personal details erased rather than retained, tell us — we can scrub your name, contact details, addresses, and health answers from our records while keeping the anonymous business history.

You can view and correct your own details, addresses, and assessment answers from your account at any time.

You can turn off non-essential notifications. We will still send you the operational ones — a delivery on its way, a payment approved — because those are part of the service.

You can ask us for a copy of what we hold, ask us to correct it, or ask us to erase it. Write to us using the contact details below and we will respond within 30 days.

Traffic is encrypted in transit. Passwords are hashed. Uploaded payment receipts and delivery photos are served only through short-lived signed links, never from a public URL. Access is limited by role, and data-changing actions are logged. No system is perfectly secure, but if a breach ever affects your information we will tell you.

NutraBox is not intended for children under 13, and we do not knowingly collect their information. A parent or guardian may hold the account and order on a child’s behalf.

If we change this policy in a way that matters, we will let you know in the app or by email before it takes effect. The date at the top always reflects the current version.