How Nutrizle keeps your family safe

Nutrizle is built on a simple design rule: the screen is a bridge to the real world, never a destination. These are commitments we hold ourselves to in the product, not just words on a page.

• No advertising and no commercial pressure on children. There is no advertising in Nutrizle, and no third party is allowed to advertise to a child through us. Under EU unfair-competition law it is illegal to directly urge children to buy something, and we do not do it — even indirectly.
• No dark patterns. No streaks to protect, no countdown timers, no "your friend is sad because you left", no leaderboards, no losing. Coming back should feel like a choice, not a debt.
• Adult supervision by design. The AR experience shows a supervision reminder on every fresh launch, and purchases, forms and settings sit behind an adult’s decision.
• Physical safety first. AR asks a child to look at the room through a camera. We tell every grown-up, in the book and on screen: use it in a safe open space, never while walking, never in traffic, and take breaks.
• Age guidance. The books and the AR experience are written for ages 4 and up, with an adult. The app in development is designed for ages 3–6, with a grown-up alongside.
• Honest magic. The "magic" in Nutrizle is a story about real food. We do not promise a child that a bite will make them instantly strong, and we do not use fear, shame or guilt about eating.

The data controller is Nutrizle UG (haftungsbeschränkt), Rheingoldstraße 95, 68199 Mannheim, Germany — represented by its managing director, Masoumeh Shekari, and registered at Amtsgericht Mannheim under HRB 755506.

That one company is responsible for all of it: nutrizle.com and nutrizle.de, the online store, the newsletter, the contact and bulk-order forms, the printables sold through Payhip, the AR experience in the books, and the mobile app when it launches. If any of that ever moves to a different company, this page will say so before it happens.

"Nutrizle Books" is the publishing imprint printed on the books. It is a brand name, not a separate company — the entity named above is the one behind it.

For anything about your data, write to privacy@nutrizle.com. A real person reads it.

We are a very small publisher and we are not legally required to appoint a Data Protection Officer, so we have not appointed one. The person named above is personally responsible for the decisions described on this page.

This website is a static site. There is no analytics tool, no advertising network, no social-media pixel and no tracking cookie anywhere on it. What follows is the complete list of ways data can reach us.

Each printed Nutrizle book carries a QR code that opens the AR experience in a browser. It is free, needs no account, and is the part of Nutrizle a child touches most directly — so it is the part we designed most carefully.

• The camera never leaves your device. The camera is used for two things: reading the QR code inside the book, and showing the room behind the 3D character. The video is processed live in your browser and on your phone’s operating system. Nothing is recorded, uploaded, stored or sent to us. We never see it.
• No account, no name, no email. There is nothing to sign up for.
• No analytics, no ads, no third-party tracking.
• A supervision reminder on every fresh launch. It confirms a responsible adult is present before the experience starts.

The AR experience stores a few small notes in your browser’s local storage so it behaves sensibly. These stay on the device, are not personal identifiers, and are used only to deliver what you asked for:

• nz-lang — the language you chose.
• nz-unlocked-books — which book QR codes have been scanned, so a child does not have to re-scan the book every time.
• nz-book — which book you last opened, so you return to the right characters.
• nz-privacy-ack — the date and version of the safety notice that was acknowledged on this device.
• nz-seen — that the intro video has already played, so it does not replay every time.
• nz-supervision-session — a note, lasting only until you close the tab, that the supervision reminder was acknowledged.

You can erase all of it at any time by clearing website data for nutrizle.com in your browser settings. Like every other page here, the AR experience is served by our web host, which keeps the ordinary server log described in §3.

The commitments the app is being built around:

• A child gives us nothing identifying. No real name, no birthday, no email address, no photo, no voice recording, no contacts, no precise location.
• The avatar is not a portrait. A child chooses from a set of drawn characters. There is no photo upload, no face scan and no face-tracking.
• No camera food-recognition in the first version. The child taps the foods they ate from a short list. If a camera feature is ever added, images will be recognised on the device and never uploaded — and this page will say so before it launches.
• Which foods were tapped stays on the device or in an account the parent controls. It is never used for advertising and never sold.
• Any account belongs to a grown-up, is created behind a parental gate, and can be deleted along with all of its data on request.
• No third-party advertising SDKs, and no personalised advertising — which is also what the Apple Kids Category and Google Play Families rules require.
• Purchases sit behind an adult step, and the core healthy-habit loop will not be locked behind a payment demand aimed at a child.

When the bedtime stories do launch, this is how they will work:

• The stories will be written with AI assistance, and the narration voice will be AI-generated. Nutrizle, Karl the carrot and their friends are drawn and invented characters. No real person’s voice or likeness is imitated.
• No child’s data will ever be sent to an AI provider. Stories are not written per child. A small set of story pieces is generated centrally, ahead of time, for everybody — the app then assembles the pieces a child chose, on the device. The AI receives no name, no age, no device identifier and nothing else about your family.
• Nothing your family does will be used to train an AI model.
• A human reads the stories before any child hears them. Because the pieces are pre-generated rather than improvised per child, they can be reviewed first. That is the whole reason the system was designed this way: we would rather check a small set of stories carefully than let an unreviewed model talk to a three-year-old.
• No AI chatbot for children. There is no open-ended conversation feature for children in Nutrizle, and none is planned.

Nutrizle is sold to grown-ups and used by children. Our answer to every children’s privacy regime is the same one: we do not collect personal data from children at all, so there is nothing about your child to lose, leak or sell. Specifically:

• European Union / EEA (GDPR). Only an adult can send us personal data. Where a service would need consent from a child (GDPR Art. 8 — the age limit is 16 in Germany), we have designed the service so that the situation does not arise. We give information in clear, plain language as Art. 12 requires.
• United Kingdom (UK GDPR, PECR, the ICO Children’s Code). Our defaults are the privacy-protective ones: no profiling, no nudge techniques, no geolocation of children, minimal data.
• United States (COPPA, as amended in 2025). Nutrizle is built so that a child never needs to give personal information in order to use it, and we do not knowingly collect personal information from a child under 13. We disclose no children’s personal information to third parties, never use it for advertising, and hold none — so there is nothing to retain. Parents in the US may ask at any time what we hold about their child; the honest answer will normally be "nothing".
• United States (state laws). We do not sell or share personal information as those terms are used in the California CCPA/CPRA, and we do not use personal information for targeted advertising or profiling under any US state privacy law. Residents of states with privacy laws have the rights listed in §11.
• Canada (PIPEDA, Québec Law 25). We treat any information about a minor as sensitive. Under Law 25, information about a child under 14 requires the consent of the person with parental authority — we avoid this by not collecting it. Marketing email is only ever sent with express consent, as CASL requires.
• Australia. Australia is not a market we sell into directly, and as a small business we fall outside most of the Privacy Act 1988. We mention it only so the position is stated rather than left blank: an Australian family using Nutrizle is treated exactly like everybody else on this page, which is to say we hold nothing about their child either.

Nutrizle sets no advertising cookies, no analytics cookies and no cross-site tracking of any kind. That is why you are not being interrupted by a consent banner — there is nothing to consent to.

What we do use is a handful of small notes stored by your own browser, purely so the site works the way you asked it to: your language choice, whether the language suggestion has already been shown, and — in the AR experience — the items listed in §4. These are strictly necessary for the function you requested and are never read by anyone else.

You can delete all of them at any time through your browser’s "clear website data" setting. Nothing will break; the site will simply ask your language preference again.

We are a tiny team, so some parts of the service are run by specialist providers. Each operates under data-processing terms that limit them to acting on our instructions and forbid them from using your data for their own purposes. This is the complete list — if a provider is not named here, it is not receiving anything.

Beyond these, personal data leaves us only where the law obliges it — for example, tax records to the tax authority. We never sell it and we never share it for anyone’s marketing.

Not every provider in §9 is inside the EU, so here is the position for each one rather than a blanket reassurance. An adequacy decision only helps where it actually applies — the EU–US Data Privacy Framework, for instance, covers a US company only while that company is on the Framework’s published list.

We keep the amount of data involved deliberately tiny: an email address and a message, or an IP address in a log. No information about a child is ever part of it. Where we cannot stand behind a transfer, our answer is to stop making it rather than to paper over it.

• Emails and form messages: until the matter is settled, then deleted — unless the message forms part of a business transaction we must keep for tax purposes.
• Newsletter: until you unsubscribe. One click, in every email.
• Orders and invoices: for as long as German commercial and tax law requires (up to 10 years). We cannot delete these earlier even if you ask — but we will not use them for anything else.
• Server logs: short-term, for security and troubleshooting.
• Anything about a child: we hold none, so there is nothing to retain.

Wherever you live, you can ask us for the following, free of charge, by writing to privacy@nutrizle.com. We answer within one month.

• A copy of what we hold about you, and an explanation of why.
• Correction of anything wrong.
• Deletion of your data, where no legal duty requires us to keep it.
• Restriction of processing, or an objection to it.
• Portability — your data in a machine-readable file.
• Withdrawal of consent at any time, without affecting what was lawful before you withdrew it.
• Freedom from discrimination for exercising any of these rights.

We do not make any automated decisions about you and we do not profile anyone.

If you are in the EU and you think we have handled your data badly, you can complain to a data protection authority — in our case der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, or the authority in the country where you live. In the UK it is the ICO, in Canada the Office of the Privacy Commissioner (or the CAI in Québec), and in Australia the OAIC. We would rather you told us first, but it is your right either way.

• Every Nutrizle site is served over an encrypted HTTPS connection.
• Access to our mailbox and shop accounts is protected by strong, unique passwords and two-factor authentication.
• We practise data minimisation as a security measure: the safest data is the data we never collected.
• Our providers are chosen partly on their security record, and operate under data-processing terms that limit them to acting on our instructions.
• If a breach ever puts your data at risk, we will notify the competent authority within 72 hours and tell you directly where the law requires it.

• Printed books are sold and shipped by Amazon. Returns, delivery and payment for those orders follow Amazon’s terms.
• Printables and digital downloads are sold through Payhip, and we are the seller. As a consumer in the EU or UK you have 14 days to withdraw from an online purchase without giving a reason.
• Free printables are free, with no purchase and no account. Downloading one does not subscribe you to anything.
• Prices shown include VAT where it applies.

Nutrizle is a storytelling brand, not a medical service. The books, printables and app content are for education and fun. They are not medical, dietary or nutritional advice, and they are not a treatment for anything.

If your child has a food allergy, an intolerance, a restrictive-eating difficulty or any medical condition, please follow your paediatrician or dietitian — not a broccoli prince. Nothing in Nutrizle should be used to pressure a child to eat, and nothing here is a substitute for professional care.

If something in a Nutrizle book, page, printable or experience worries you — content that feels wrong for a child, a technical fault, a safety issue, or a privacy question — write to privacy@nutrizle.com or orders@nutrizle.com.

We aim to acknowledge safety reports within 3 working days and privacy requests within one month, which is the legal deadline. Please say which book, page or screen you mean, so we can find it quickly.

When we change something meaningful here, we update the date and the version number at the top. If a change affects data we already hold about you, we will tell you directly rather than quietly editing the page.