Privacy Policy
Effective October 14, 2026Last updated October 14, 2026
This is an English translation for convenience. The Spanish version is the governing text.
This policy explains what personal data Nutri 180 processes, why, who we share it with and what your rights are. It applies to the Nutri 180 apps for iOS and Android (for patients and for nutritionists), the web app for nutritionists and the website nutri180.com (together, the “Service”).
In short: we keep what’s needed for you and your nutritionist to work together. Your health data is only visible to the nutritionist you chose. We don’t sell data or show ads. You can delete your account at any time from the app.
1. Data controller
The controller is MTCOSMOLABS SAS, a company organized in the Oriental Republic of Uruguay, tax ID (RUT) [CONFIRM], with its registered address at [CONFIRM address], Montevideo, Uruguay. Nutri 180 is a product of Uppercut, a brand of MTCOSMOLABS SAS.
Privacy contact: hello@heyuppercut.com.
2. Legal framework
We process your data under Uruguay’s Law No. 18.331 on Personal Data Protection and Habeas Data, its regulatory Decree No. 414/009 and related rules. The supervisory authority is the Unidad Reguladora y de Control de Datos Personales (URCDP).
3. Data we process
Account (all users)
- Email, name and, if you upload one, a profile photo.
- Sign-in credentials: if you use email and password, we store the password hashed (never in plain text). If you sign in with Google or Apple, that provider sends us your email, name and account identifier; we never receive your password.
Patients
- Profile: date of birth, sex, height and goal (for example, losing weight).
- Your relationship with your nutritionist: who you chose and since when.
- Meal plans your nutritionist creates for you.
- Progress logs: weight, body measurements and, if you choose to upload them, progress photos.
- Dietary restrictions and allergies.
- Appointments with your nutritionist.
- Reviews you write about your nutritionist.
Nutritionists
- Professional profile information you publish on the Service [CONFIRM: license number, specialty, bio, other].
- Subscription status. Payments are processed by Mercado Pago: you enter your card details with Mercado Pago and we never receive or store them. We only receive the payment status, the plan and a subscription identifier.
Technical data
- Error reports (device model, OS and app version, error traces) through Sentry, to detect and fix crashes.
- Server logs needed to keep the Service secure and running.
Sensitive data. Weight, measurements, progress photos, allergies and meal plans are health data, which Law 18.331 treats as sensitive. We only process them with your express consent, which you give when you create your patient profile and link with a nutritionist. You can withdraw it at any time by deleting your account.
4. How we use it
- Create and maintain your account and identify you when you sign in.
- Let you and your nutritionist share plans, progress and appointments.
- Show nutritionist reviews to other patients.
- Manage nutritionists’ subscriptions.
- Send you service notices (for example, appointment reminders or changes to this policy) [CONFIRM: push notifications and/or email].
- Detect errors, prevent abuse and keep the Service secure.
- Comply with legal obligations.
We don’t use your data for advertising, we don’t sell it and we don’t build commercial profiles with it.
5. Who we share it with
- Your nutritionist. Your profile and health data are shared only with the nutritionist you chose. If you stop working with a nutritionist, they no longer have access to your new logs [CONFIRM unlink behavior].
- Other users. Your reviews are shown publicly within the Service with your name [CONFIRM: full name, first name or anonymous]. Nutritionists’ professional profiles are visible to patients.
- Service providers that process data on our behalf, under contract:
Provider Purpose Location Supabase (on Amazon Web Services) Database, authentication and file storage São Paulo, Brazil (AWS sa-east-1) Sentry Error reporting United States [CONFIRM region] Mercado Pago Nutritionist subscription billing [CONFIRM account country] Google and Apple Sign-in, if you choose it United States - Authorities, when a law or court order requires it.
6. International transfers
Your data is stored outside Uruguay (in Brazil) and some providers process it in the United States. We make these transfers with the safeguards required by Article 23 of Law 18.331, including contractual clauses with each provider, and with your consent when you accept this policy [CONFIRM with legal counsel].
7. Retention
- While your account is active.
- If you delete your account, we erase your personal data within 30 days, except what we must keep by law (for example, subscription billing records) [CONFIRM accounting periods].
- Backups are overwritten in cycles of [CONFIRM] days.
8. Security
We use encrypted connections (HTTPS/TLS), encryption at rest provided by our infrastructure, hashed passwords and row-level access rules in the database so each user only sees what belongs to them. No system is infallible; if an incident affecting your data occurs, we will tell you and notify the URCDP as required.
9. Your rights
You can exercise your rights of access, rectification, update, inclusion and deletion at any time, free of charge, and withdraw your consent. You can edit much of your data directly in the app. For anything else, write to hello@heyuppercut.com from your account email; we respond within the legal deadlines (5 business days for access requests).
If you believe we didn’t handle your request properly, you can file a complaint with the URCDP (gub.uy/urcdp).
10. Deleting your account
You can delete your account and your data from the app under Profile → Delete account, or ask us by email. The steps are at heyuppercut.com/nutri180/en/delete-account.
11. Minors
The Service is not intended for anyone under 18. A minor may only use it with the consent and supervision of a parent or guardian, who is responsible for the account. If we find an account belonging to a minor without that consent, we will delete it.
12. Changes to this policy
If we make significant changes, we’ll let you know in the app or by email before they take effect. The “Last updated” date above shows the current version.
13. Contact
MTCOSMOLABS SAS · Montevideo, Uruguay · hello@heyuppercut.com