Privacy Policy

Who we are and what this covers

Dietrio is a nutrition platform operated from Amman, Jordan, connecting clients with nutrition experts.

This policy covers the Dietrio mobile app for iOS and Android, and this website. It explains what we collect, what we do with it and what you can ask us to do about it.

Children and young people

Dietrio does not set a minimum age for clients.

Where a client is under 18, a parent or guardian sets the account up and agrees to the Terms on their behalf. They can see, correct or delete the data held under that account at any time.

A young person's health information is protected in exactly the same way as anyone else's. Everything in the rest of this policy applies to it just the same: what we collect, why we use it, who sees it, how it is stored and how long we keep it.

What we collect

Depending on who you are and what you do on Dietrio, we hold:

• Account details: username, first and last name, email address, a hashed version of your password rather than the password itself, and your settings (timezone, language, theme and currency). We also record when you were last active.
• Client health information: height, weight, gender, date of birth, activity level, primary goals, dietary preferences, food allergies, medical conditions and the kind of consultation you prefer. This is sensitive information about your health, and we treat it as such.
• Expert credentials: professional title, specialties, license number, the scanned professional license and CV you upload, your bio and your date of birth.
• Profile details: phone number and dialling code, country, email address, website, bio, profile photo and cover photo.
• Payment records: transactions, invoices and credit notes, your wallet balance and its ledger, top-up requests and any CliQ transfer proof you send us. We do not store card numbers.
• Device and technical data: a device fingerprint, device type, browser, operating system, IP address, the approximate city, country and coordinates that address maps to, and when the device was last used.
• Request logs and security events: the requests made to our servers, with method, path, query, body, headers, IP address, user agent, status code and duration, plus events such as sign-ins, one-time codes and failed attempts.
• Change history: for the records we audit, a snapshot of the row each time it is created, changed or deleted.
• On this website only: the browser localStorage we use for your waitlist email and session token, and our website analytics, which loads only on dietrio.com.

Why we use it

We use what we collect to:

• Run the service and keep your account working.
• Match clients with a suitable expert.
• Check that an expert is qualified and is who they say they are.
• Take subscription payments and issue invoices.
• Keep accounts secure and detect fraud and abuse.
• Answer you when you contact support.
• Meet our legal and accounting obligations.

Health information

We collect your health information with your consent, and only to do the thing you came for: matching you with a suitable expert and letting them advise you properly.

It is shared with the expert you are subscribed to, and with the administrators who need it to handle a review or a support request. It goes no further than that.

You can withdraw your consent at any time by writing to [email protected]. An expert cannot advise you safely without this information, so the parts of Dietrio that rely on it stop working once you do.

Expert document review

When you apply as an expert, Dietrio administrators open and read the professional license and CV you upload. That is how an application is approved or rejected.

Those documents are kept in private storage and are reachable only through links that expire after fifteen minutes.

Automated content checks

Images uploaded to Dietrio are checked automatically for explicit content, so that unlawful or harmful material does not reach other people on the platform.

Who we share data with

We do not sell personal data. Beyond the expert you are subscribed to, described above, we share it only with:

• The company that hosts our infrastructure and stores the files uploaded to Dietrio.
• Our email provider, which delivers verification codes and notifications.
• Our analytics provider, which measures how this website is used. It does not run in the app.
• Authorities, where the law requires us to.

How we protect it

Your data is encrypted in transit between your device and our servers, and it is encrypted again at rest on the servers that hold it.

The most sensitive fields, including your health information and the credentials experts upload, are encrypted individually on top of that, so they stay unreadable to anyone who reaches the database without the keys. We hold those keys, which is what lets our systems use the fields to run the service for you.

Files you upload are never left in the open. They sit in private storage and can only be opened through a signed link that we create when it is needed and that stops working after fifteen minutes.

Inside Dietrio, access is limited to the people whose work requires it.

Every session is tied to the device you signed in from, so signing in on one device does not open your account on another. We also block addresses that abuse the service.

No system is perfect. If something about your account ever looks wrong to you, write to [email protected] and we will look into it.

How long we keep it

While your account is open we keep your data so that the service works.

When you delete your account we hold your data for 90 days and then delete it permanently. During those 90 days you can ask us to restore the account.

Invoices, transaction records and security logs are kept beyond that period where accounting or legal rules require it.

Your rights

Write to [email protected] from the address on your account to ask us to:

• Give you a copy of the data we hold about you.
• Correct anything that is wrong.
• Export your data.
• Delete your account and the data under it.
• Stop relying on your consent, where we asked for it.
• Stop a particular use of your data.

Where your data is held

Your data sits on servers operated for Dietrio and with the providers described above, some of which may process it outside Jordan.

Wherever it is held, the protections described in this policy apply to it.

Changes to this policy, and how to reach us

If this policy changes, the date at the top of this page changes with it, and we will tell you in the app or by email when the change affects you.

Write to [email protected] with any question about your data or about this policy.