nodiet.ai

Consent to Personal Data Processing

Effective as of October 11, 2026

Which consent applies to you

nodiet.ai runs as two separate services (section 1 of the Privacy Policy):

  • International service (for users outside Russia, controller Iurii Menshikov, Spain). You give consent with checkboxes in the app: a required explicit consent to the processing of your health data (food diary, food photos, weight, height, goals) under Art. 9(2)(a) GDPR and an optional consent to analytics and session recording. What these consents cover is described in sections 4 and 6 of the Privacy Policy. You can withdraw them in the same way as described below.
  • Russian service (for users in Russia, operator Individual Entrepreneur Maxim Dmitrievich Nagovitsin). The consent below, under Article 9 of Federal Law No. 152-FZ "On Personal Data", applies.

This document is published in English and Russian with the same content. If the versions differ, the Russian version prevails for the Russian service.

Consent for the Russian service

By ticking the consent box in the nodiet.ai application, I, acting freely, of my own will and in my own interest, give my specific, informed and conscious consent to Individual Entrepreneur Maxim Dmitrievich Nagovitsin (Yekaterinburg, OGRNIP 325665800292355, INN 668602006513, support@nodiet.ai) (the "Operator") to process my personal data on the following terms.

1. Purposes

  • registration and authentication in the Application;
  • providing the Application's features: food diary, analysis of food photos, voice input and text messages, calculation of calorie and nutrient goals, the AI assistant, synchronisation with Apple Health and Health Connect if I connect it;
  • processing payments and sending receipts;
  • notifications, responses to requests and technical support;
  • improving the Application and personalising recommendations, including analytics and session recording.

2. Personal data

  • first and last name, email address, profile photo;
  • identifiers of accounts used to sign in (Yandex ID, Google, Apple, Telegram) and the Telegram data passed when the Telegram mini app is opened;
  • sex, year of birth, height, weight, activity level and goals;
  • food diary entries, food photos, voice recordings and messages to the AI assistant;
  • step count and active calories imported from Apple Health or Health Connect;
  • payment and subscription data (without the full card number);
  • technical data: device identifiers, IP address, app version, usage statistics and analytics data, including session recordings.

3. Actions and methods

Collection, recording, systematisation, accumulation, storage, clarification (updating, changing), retrieval, use, transfer (provision, access), depersonalisation, blocking, deletion and destruction, with or without the use of automation tools.

4. Processors and cross-border transfer

The Operator may entrust processing to:

  • Selectel (Russia) — servers, database, file storage, sending emails;
  • Servercore (Kenya) — hosting of the Operator's proxy server;
  • OpenRouter, Inc. (USA) and AI model providers behind it: Google LLC, DeepInfra, Together AI, Groq (USA) — analysis of photos, voice and messages;
  • PostHog, Inc. (USA; data stored in Germany) — analytics and logs;
  • Yandex LLC (AppMetrica, Russia) — analytics in the iOS and Android apps;
  • Functional Software, Inc. (Sentry; USA; data stored in Germany) — error monitoring;
  • Google LLC (Firebase Cloud Messaging, USA) — push notifications;
  • Digital Shift OÜ (Capgo, Estonia) — app updates;
  • NBCO YooMoney LLC (YooKassa, Russia) and Robokassa LLC (Russia) — accepting payments;
  • Telegram Messenger Inc. — Telegram bot messages and the team chat with feedback;
  • Timeweb (Russia) — the support mailbox.

I consent to the cross-border transfer of my personal data for the purposes listed above to the USA, Kenya, Germany, Estonia, the United Kingdom and other countries where these services store data, including countries that do not ensure adequate protection of personal data subjects' rights.

5. Term and withdrawal

This consent is valid until the purposes of processing are achieved or until it is withdrawn. I may withdraw it at any time by deleting my account in the Application or by emailing support@nodiet.ai. After withdrawal the Operator stops processing and deletes the data within 30 days, unless the law requires it to be kept longer.

Details are set out in the Privacy Policy.