Who we are
DietiDesk ("we", "us") is clinical nutrition software for Windows. This website, dietidesk.com, is operated by [legal name of the owner or registered business], [address], State of Kuwait.
We decide how and why the personal data described in this policy is used, so we are responsible for it.
- Privacy questions and requests: privacy@dietidesk.com
- General support: support@dietidesk.com
What this policy covers
This policy covers the website dietidesk.com and the DietiDesk waitlist. The DietiDesk desktop app is not available yet. Before accounts, subscriptions or the app are launched, we will update this policy to describe them and tell you in advance (see Changes to this policy).
Patient data
Patient data never touches this website. The website has no place to enter patient information, and we ask you not to include any in the waitlist form.
The DietiDesk app is designed so that patient files are stored only on the dietitian's own device. We do not receive, store or have access to your patients' records.
As the dietitian, you remain responsible for your patients' data on your device, including having a lawful basis to collect it, keeping your device secure (for example with disk encryption and a strong password) and keeping backups.
What we collect and why
We collect only what we need for the waitlist. Every field in the form explains why we ask for it.
| Data | Why we use it | Legal basis | How long we keep it |
|---|---|---|---|
| Name, email, specialty, workplace (optional), beta interest (yes/no) | To keep your place on the waitlist, tell you when DietiDesk is available, invite you to the beta if you asked, and understand which features matter to our users. | Your consent, given with the required checkbox. | Until 12 months after DietiDesk launches, or until you withdraw consent or ask us to delete it, whichever is sooner. |
| Consent record: that you ticked each checkbox, the policy version, the page language and the time you sent the form | To show what you agreed to and when. | Our obligation to be able to show consent. | As long as we keep your waitlist details. If you withdraw, we keep only a note of the withdrawal and its date for up to 24 months. |
| Marketing preference (yes/no) | To send occasional news and offers only if you said yes. | Your separate, optional consent. | Until you unsubscribe or ask us to delete your details. |
| Emails you send us | To answer you. | Your request. | Up to 24 months after the conversation ends. |
| Technical data: IP address, browser type, page requested and time | Collected automatically by our hosting and form providers to deliver the website, stop spam and keep the service secure. | Necessary to run a secure website. | Short-term logs, kept according to each provider's own retention rules. |
Providing your details is voluntary. If you choose not to, we simply cannot add you to the waitlist.
What we do not do
- No tracking cookies, analytics, advertising pixels or fingerprinting on this website. Fonts are hosted on our own site, so no font service sees your visit.
- We do not sell, rent or share your personal data for advertising.
- We do not make automated decisions about you or build profiles of you.
- We do not use your personal data to train artificial intelligence models.
Service providers and processing outside Kuwait
Your data is processed outside the State of Kuwait. We use the following providers. They process data for us under their own terms and security measures, and only to provide their service.
| Provider | What it does for us | Location |
|---|---|---|
| Web3Forms (Web3Creative) | Passes waitlist form submissions on to our mailbox. It does not store submissions; its server logs may contain personal data and are deleted about every two months. | Servers in the United States; company in India |
| Render Services, Inc. | Hosts this website. Processes technical data such as IP addresses to deliver pages. | United States |
| Namecheap, Inc. | Domain name and our email accounts, including the mailbox where waitlist submissions arrive and are kept, and messages you send to support@ or privacy@. | United States |
Providers we plan to add later
The following providers are not used by the website today. We plan to use them when accounts, subscriptions and the app launch. We will update this policy and notify you before any of your data is shared with them.
- Supabase: user accounts and subscription records.
- Render: our application server at api.dietidesk.com.
- Polar: payments and subscriptions, as the merchant of record.
- Google (Gemini): the optional AI assistant on the Pro plan. Patient names, phone numbers and civil IDs are removed before anything is sent.
Your rights
You can, free of charge:
- ask for a copy of the personal data we hold about you;
- ask us to correct it;
- ask us to delete it;
- withdraw your consent at any time. This stops future use but does not make earlier use unlawful;
- stop marketing emails at any time.
To make a request, email privacy@dietidesk.com from the address you used on the waitlist. We may ask you to confirm your identity. We will reply within 30 days.
If you are not satisfied with our answer, you can complain to the Communication and Information Technology Regulatory Authority (CITRA) in Kuwait.
Marketing emails
We send news and offers only if you tick the separate, optional marketing box. It is never ticked for you, and you can join the waitlist without it.
Every marketing email will include an unsubscribe link. You can also email privacy@dietidesk.com. Unsubscribing from marketing does not remove you from the waitlist.
How we protect your data
This website is served only over HTTPS and uses security headers that limit which other sites it can talk to. Access to waitlist data is limited to the people who run DietiDesk, and our accounts with providers are protected with strong passwords and two-step sign-in where available.
No system is completely secure. If a breach affects your personal data, we will notify you and the competent authority as required by law.
Children
This website and DietiDesk are intended for health professionals. They are not directed at anyone under 18, and we do not knowingly collect their personal data. If you believe a child has sent us their details, please contact us and we will delete them.
Changes to this policy
If we make a material change, such as adding a new provider or a new use of your data, we will email people on the waitlist and show a notice on this website at least 14 days before the change takes effect. Where the law requires it, we will ask for your consent again.
The version number and effective date are at the top of this page. We keep previous versions and will send you a copy on request.
Contact
Email privacy@dietidesk.com for anything about your personal data, or support@dietidesk.com for anything else.
This policy is available in Arabic and English. اقرأ هذه السياسة بالعربية.