All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption standards.
Role-based access control ensures only authorized personnel can access member data.
Data is stored on Google Workspace infrastructure with enterprise-grade security and compliance.
We collect only necessary data and implement privacy-first practices throughout our platform.
1. Data Collection: Members fill out the form on your gym's dedicated page. Data is transmitted securely via HTTPS.
2. Processing: Our AI processes the data to generate personalized meal plans. No human access to raw data.
3. Storage: Data is encrypted and stored on Google Workspace infrastructure in compliance with PDPL.
4. Delivery: Meal plans are sent via encrypted email directly to the member.
5. Retention: Data is retained for the duration of the subscription and deleted upon request or contract termination.
NutriGym is committed to compliance with international data protection standards:
PDPL (Personal Data Protection Law) compliant
GDPR-aligned data processing practices
ISO 27001 standards for information security
Regular security audits and penetration testing
Data Processing Agreements (DPA) available for enterprise clients