Privacy Policy

1. Introduction

Natlex IT ("we", "us", or "our") operates the website natlex.it and mobile applications including PlateIQ and Noda (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services.

By accessing or using our Services, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Services.

2. Information We Collect

2.1 Information You Provide

• Account Data: When you create an account, we may collect your name, email address, and password.
• User Content: Photos of food (PlateIQ), voice recordings and uploaded documents (Noda), and other content you submit through our applications.
• Communications: When you contact us via email at info@natlex.it, we retain the content of those communications.

2.2 Automatically Collected Information

• Device Information: Device type, operating system version, unique device identifiers.
• Usage Data: App usage patterns, feature interactions, crash reports, and performance data.
• Log Data: IP address, browser type, pages visited, time and date of visits, time spent on pages.

2.3 AI Processing Data

Our applications use artificial intelligence (including third-party AI services such as Google Gemini) to process user content (e.g., food photos for calorie analysis, voice recordings for transcription). This data is processed solely to provide the requested service functionality and is not used to train AI models. Processed data is handled in accordance with Section 5 (Data Retention).

3. How We Use Your Information

We use your information exclusively for the following purposes:

• To provide, maintain, and improve our Services.
• To process and analyze user-submitted content (photos, recordings, documents) using AI to deliver core app functionality.
• To personalize your experience (e.g., AI-based nutritional coaching in PlateIQ).
• To communicate with you about updates, security alerts, and support.
• To detect, investigate, and prevent fraudulent or unauthorized activity.
• To comply with legal obligations.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Data Sharing and Third Parties

We may share your information only in the following circumstances:

• Service Providers: We use trusted third-party services (Google Firebase, Google Gemini API, cloud hosting providers) to operate our Services. These providers process data only on our behalf and are bound by contractual obligations to protect your information.
• Legal Requirements: We may disclose your information if required by law, legal process, or government request.
• Safety: To protect the rights, property, or safety of Natlex IT, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When data is no longer needed, it is securely deleted or anonymized.

• Account data is retained for the duration of your account and deleted within 30 days of account deletion.
• AI-processed content (photos, voice recordings) is processed in real time and not stored on our servers beyond the time necessary to deliver results, unless you explicitly save it within the application.
• Analytics data is retained in aggregated, anonymized form.

6. Data Security

We implement industry-standard technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Strict access controls and authentication for internal systems.
• Regular security audits and vulnerability assessments.
• Data isolation — each user's data is logically separated from other users' data.

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Data Portability: Request a machine-readable copy of your data.
• Objection: Object to processing of your data in certain circumstances.
• Withdrawal of Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at info@natlex.it. We will respond within 30 days.

8. Cookies and Tracking

Our website uses minimal cookies and local storage:

• Essential: Language preference (natlex-lang) stored in localStorage.
• Functional: Chat widget state and session data.

We do not use third-party advertising cookies or cross-site tracking technologies.

9. Children's Privacy

Our Services are not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly. If you believe we may have collected data from a child, please contact us at info@natlex.it.

10. International Data Transfers and Territorial Restrictions

Natlex IT does not offer its Services to users in the Russian Federation and does not process personal data of Russian residents.

For all other users, personal data may be transferred to and processed in countries outside your country of residence (including the United States, where Google Gemini operates). By using our Services you consent to such transfers. We take appropriate safeguards to protect your data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Services after any changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: