Privacy policy

Tawazun is an online nutrition clinic run by Sharekat Nutrihealth LL Layaqa Al Badanyyah ("Nutrihealth", "we"), based in Nablus, Palestine. This policy covers the Tawazun app for iPhone and Android, the itawazun.com website, and messages between you and our team.

The app used to be called Synbio. This policy also covers accounts created under that name.

We collect the following when you create an account, use the app or contact us:

• Account details: name, phone number, email, date of birth and sex, and your Apple ID identifier if you sign in with Apple.
• Health and body data that you or your dietitian enter: weight, height, body measurements and body-composition readings, your goals, food preferences, and any allergies, conditions or medication you choose to share, plus meal plans, water and steps.
• Appointments and consultations: bookings, dietitian notes, chat messages, and photos and files you send.
• Purchases: your subscription status and history as reported by Apple or Google. We never receive your card number.
• Device and usage data: device model, operating system, app version, crash reports, push notification token, and which screens you open and where you tap.

Some services cannot work without this data. For example, your dietitian cannot build a meal plan without your weight and goal.

The app reads from and writes to Apple Health or Health Connect only after you allow it, and only for the data types you allow:

• Apple Health: read steps, and read and write water.
• Health Connect on Android: read steps, hydration and nutrition, and write hydration and nutrition.

We use this data only to show your steps and water in the app and to follow your plan. We do not use it for advertising or marketing, we do not sell it, and we share it with no one except the hosting providers that store it for us. You can turn access off at any time in the Health settings on your iPhone or in the Health Connect app.

If you pair a body-composition scale over Bluetooth, the app reads its measurements and saves them to your account.

• Camera and microphone: for video calls with your dietitian, and only during the call. We do not record calls.
• Photos: when you pick a photo to send or share your screen during a call.
• Notifications: reminders for appointments, messages and check-ins.
• Location: Tawazun's customer features do not use your location. The permission exists only for the Nutrihealth staff attendance screen.

You can withdraw any permission in your device settings. The feature that depends on it may stop working.

• To create and manage your account and confirm who you are.
• To suggest a dietitian, book appointments and run video calls.
• To prepare meal plans and track your progress.
• To send reminders and notifications about your care.
• To answer your questions and requests.
• To activate subscriptions, prevent fraud and protect accounts.
• To fix crashes and improve the app.
• To send offers about our services. You can stop these at any time.
• To measure our advertising, as described under sharing.

We never use your health data for advertising, and we do not sell your personal data.

We share only what each party needs to provide the service:

• Nutrihealth dietitians and clinic staff, to run your consultations and follow-ups.
• Zoom, to run video calls.
• Apple, Google and RevenueCat, to process in-app subscriptions.
• Google Gemini: when you use the AI assistant, your messages or voice go to Google to generate the reply.
• Microsoft Clarity records app sessions, such as the screens you open and where you tap, so we can find and fix problems.
• Meta: when you create an account or complete a purchase, we may send Meta a record of that event with your email and phone number hashed, to measure our ads. We never send Meta health data, measurements, plans or messages.
• Hosting, storage, email and notification providers, including Microsoft Azure, Hetzner, Microsoft 365, Apple and Google Firebase.
• Authorities, when the law requires it or to protect someone's safety.

Crash reports go to a server we run ourselves and are not shared with an outside company.

These providers may process your data outside your country. We choose providers that commit to protecting data, and we limit their use of it to providing their service to us.

We keep your data while your account is active. When you ask us to delete your account, we delete your data within 30 days of confirming the request, except:

• Invoice and payment records the law requires us to keep.
• Consultation records the law requires us to keep, which we delete when that period ends.
• Backups, which are overwritten in the normal backup cycle.

If we keep anything for one of these reasons, we tell you what and why when we confirm the deletion.

• Ask for a copy of your data.
• Correct your data in the app or by writing to us.
• Delete your account and data.
• Withdraw Apple Health, Health Connect, camera and notification access at any time.
• Stop marketing messages.

For any other request, write to info@nutrihealthme.com. We may ask you to confirm your identity first.

Data travels between the app and our servers encrypted over HTTPS, and only staff who need your health data to care for you can see it. No transfer or storage method is completely secure, so keep your device and password protected.

The app is not meant for children under 13. Anyone under 18 needs a parent or guardian's consent before using our nutrition services. If we learn we have collected data from a child under 13, we delete it.

When we change this policy we post the new version here and update the date. If a change is significant, we tell you in the app before it takes effect.

For any privacy question, write to info@nutrihealthme.com or use the contact form.

Sharekat Nutrihealth LL Layaqa Al Badanyyah, Nablus, Palestine.