Privacy Policy

Privacy Policy (GDPR)

Nutramilo, operated by International Sci Ink Press Ltd., processes personal data in accordance with the European Union's General Data Protection Regulation (GDPR).

What data do we collect?

We collect data you voluntarily provide: name, email, profile data (weight, height, age, gender), lab values, meal logs, and AI consultation history. This data is used solely to personalize your platform experience.

How do we use the data?

Data is used to calculate health indices, personalize AI consultations, and generate meal plans. We do not share your data with third parties for marketing purposes.

Your GDPR Rights

You have the right to access, correct, and delete your personal data. You can request data export at any time. To exercise these rights, reach us through the contact form.

Storage & Security

Data is stored encrypted in cloud infrastructure. Passwords are hashed with bcrypt. We use HTTPS for all communications.

AI methodology & subprocessors

AI models used

Nutramilo uses large language models via the Emergent integration layer: OpenAI GPT-5.2 · Anthropic Claude Sonnet 4.5 · Google Gemini 3. Calculations and simulations use transparent rule-based algorithms (e.g. CKD-EPI 2021, PhenoAge, KFRE).

Subprocessors

OpenAI Ireland Ltd (EU) / OpenAI LLC (US) — GPT inference · SCC 2021/914
Anthropic PBC (US) — Claude inference · SCC 2021/914
Google Ireland Ltd (EU) — Gemini inference · SCC + EU-US DPF
Stripe Payments Europe Ltd (IE) — payment processing
Wise Europe SA (BE) — alternative payment processing
Twilio SendGrid (US) — transactional email · SCC 2021/914
MongoDB Atlas (EU-hosted) — primary database (Frankfurt region)
Emergent Labs — hosting + integration layer (EU region)

Retention periods

Active account — until you request deletion
Health data — 1 year after account deletion (backups)
Financial records (invoices) — 10 years (accounting law)
AI inference audit log — 6 months (GDPR Art. 30, AI Act Art. 12)
Temporary data (password reset, email verification) — up to 24 hours

Your rights (GDPR)

Art. 15 — access to all your data · 'Export' button in Profile
Art. 17 — right to erasure · 'Delete account' button in Profile
Art. 20 — data portability (machine-readable format)
Art. 22 — explanation of automated decisions · 'Why?' button next to every AI output
Right to lodge a complaint with your supervisory authority

⚕️ Nutramilo is NOT a medical device within the meaning of MDR 2017/745. AI outputs are educational — not a substitute for medical consultation or diagnosis.

DPO contact: privacy@nutramilo.bg · v1.0-2026-02

Disclaimer

Nutramilo is not a medical device. AI assistants act as research tools, not as substitutes for medical professionals. Always consult your doctor before making changes to your diet or treatment.

Data Controller & contact

Controller: International Sci Ink Press Ltd.

EИК: 205414288

VAT No.: BG205414288

Registered office: 57 Antim I Str., Floor 1, Vazrazhdane District, Sofia 1303, Bulgaria

Email: dpo@nutramilo.com · privacy@nutramilo.com

Data Protection Officer (DPO): dpo@nutramilo.com

Right to lodge a complaint: You have the right to lodge a complaint with the Bulgarian Personal Data Protection Commission (CPDP) at www.cpdp.bg.

Right of withdrawal (14 days): Per EU Directive 2011/83/EU you may cancel a paid subscription within 14 days without reason — full refund.

Last updated: April 2026

International Sci Ink Press Ltd.

Nutramilo is a wellness and educational platform — NOT a medical deviceLimitations Dental Risk Breast Health Policies Complaint → CPDP EU↔US transfer