Privacy Policy
Last updated: 29 October 2026 · Version 1
Ello ("we", "us") is a nutrition tracking app run by Nikolas Casa, an individual based in New Zealand. This policy explains what we collect, why, and your rights. It is written to meet the New Zealand Privacy Act 2020 and the Philippines Data Privacy Act of 2012.
Questions or requests: ello.nutrihealth@gmail.com
What we collect
- Account details: your name, email address and profile picture from Google when you sign in.
- Profile and targets: year of birth, sex (optional: "Prefer not to say"), height, weight, activity level, health goal and daily targets.
- What you log: foods, drinks, water, portion sizes and times.
- Photos you choose to take: nutrition label and packet photos used to read food details.
- Barcodes you scan.
- Basic technical data: sign-in sessions and error logs needed to keep the app working.
Some of this is health information. We treat it as sensitive and only use it to run Ello for you.
How we use it
- To show your daily intake, progress and diet quality score.
- To estimate your calorie target.
- To let a practitioner you choose see your dashboard (see below).
- To keep the app secure and fix problems.
We do not sell your data, show ads, or use your data for advertising.
Who can see it
- You.
- Your practitioner, only if you link to one. They can view your dashboard and adjust your targets. They cannot see other practices' clients.
- The Ello administrator, for support and account management.
- Service providers that run Ello for us, under their own privacy and security terms:
- Vercel (app hosting)
- Turso (database)
- Google (sign-in, and the Gemini AI service that reads label photos you take)
- Open Food Facts, USDA FoodData Central, UPCitemdb and NIH DSLD (food lookups: we send a barcode or food name, never your personal details)
- GitHub (contact form messages are stored as private GitHub issues)
Some of these providers store or process data outside New Zealand and the Philippines (for example in India, the United States or the EU). We use providers with security safeguards comparable to those required by New Zealand and Philippine law.
Food data you add
Foods you create or snap are saved to Ello's shared food list so they can be found by barcode next time. These entries contain food details only, never your name or logs.
How long we keep it
We keep your data while your account is active. If you ask us to delete your account, we delete your account and logs within 30 days, except where the law requires us to keep something.
Your rights
You can ask to:
- see the personal information we hold about you;
- correct it;
- delete your account and data;
- object to or limit how we use it;
- get a copy of your data.
Email ello.nutrihealth@gmail.com. We will reply within 20 working days.
If you are not happy with our response, you can complain to the New Zealand Privacy Commissioner or, in the Philippines, the National Privacy Commission.
Security
Data is sent over HTTPS and stored with our providers' security controls. Access is limited by role. If a privacy breach is likely to cause you serious harm, we will tell you and the relevant regulator as the law requires.
Children
Ello is for people aged 16 and over. If you are under 18 in the Philippines, please use Ello with a parent or guardian's consent.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect.