NutriOne Privacy Policy

1. Who is responsible

NutriOne is a nutrition and calorie tracking app with AI meal recognition. It is developed and published by Sagar Singh, an individual developer based in India, under the developer name “Myx”. NutriOne is not published by a company.

In this policy, “I”, “me” and “my” mean Sagar Singh. I decide how the information described here is used and I am responsible for it. Under India’s Digital Personal Data Protection Act, 2023 I am the “data fiduciary”, and under the GDPR I am the “data controller”. I am also the grievance contact for NutriOne.

2. Information I collect

Account

• Your email address and an account ID.
• Your name, if you provide it or share it through Sign in with Apple or Google. With Apple you can hide your real email address.
• Passwords are handled by the authentication provider and are never visible to me.

Profile and health information you enter

• Date of birth, gender, height, current, starting and target weight, activity level, weight goal and nutrition targets.
• Your onboarding answers, preferred units and any referral code.

Tracking data

• Foods and meals you log, with calories and nutrients, saved foods, recipes, exercise sessions and weight entries.

Usage and device information

• App events such as “food logged” or “scan completed”, with non-identifying details such as meal type. They never include food names, photos, your name or your email.
• Crash and error reports with technical details such as device model, OS version and app state.
• The number of AI scans you make each day, used to apply the free-plan limit.

3. Camera and food photos

NutriOne uses the camera to scan meals and barcodes. When you scan a meal, the photo is sent to my server and to the AI provider to estimate its nutrition, and it is not kept on my servers after the estimate is returned. A copy stays on your device next to your log entry and is deleted when you log out or delete your account. For barcodes, only the barcode number is sent to Open Food Facts. You can deny camera access and log food manually.

4. How I use information

• to calculate calorie and macro targets, store your logs and show progress and insights;
• to sync your data across devices;
• to estimate the nutrition of meal photos and look up barcodes;
• to send reminders you turn on, which are scheduled on your device;
• to keep the service secure, prevent abuse and enforce plan limits;
• to understand usage and fix problems;
• to send tips and offers, but only if you opted in.

I do not sell your personal information, use it for advertising, or use your health information for anything other than providing NutriOne.

5. Legal bases

India: your consent when you create an account and enter information, and the legitimate uses allowed by the DPDP Act, 2023. EEA, UK and Switzerland: contract (to provide the features you use), explicit consent (for health information such as weight and food intake), legitimate interests (security, usage understanding, crash fixing) and consent (marketing). You can withdraw consent at any time by deleting the information or your account.

6. Service providers

• Supabase: hosting, database and authentication.
• Anthropic: AI analysis of meal photos, sent without your name or email. Under its commercial terms, Anthropic does not train on this data and may keep it for a limited period for abuse monitoring.
• Sentry: crash and error reporting, configured not to collect your name, email or IP-based identity.
• Open Food Facts: barcode lookups (barcode number only).
• Google: Google Sign-In, Google Play distribution and purchases.
• Apple: Sign in with Apple, App Store distribution and purchases.

I may disclose information if the law requires it, or to protect the rights and safety of users.

7. How long data is kept

• Your account and tracking data are kept while your account is active.
• When you delete your account, your account and synced data are removed from the database straight away. Encrypted backups are overwritten within a limited period.
• Usage events and crash reports are kept only as long as they are useful, and are deleted with your account.
• Meal photos are not stored on my servers.

8. Your rights and choices

Edit your details in Profile → Personal Details, Goals and Nutrition Targets, export your data in Profile → Settings → Export Data, and delete your account and data in Profile → Settings → Delete Account. Reminders, camera and notification permissions can be turned off at any time. California residents: I do not sell or share personal information for cross-context behavioural advertising.

Depending on where you live, you may also have the right to:

• access the personal data I hold about you and get a copy in a portable format;
• correct information that is wrong or incomplete;
• have your data erased;
• restrict or object to certain processing;
• withdraw consent where processing is based on consent;
• nominate someone to exercise your rights if you die or become unable to (India).

To make a request, contact me. I will reply within 30 days and may need to confirm that the data is yours first. If you are not satisfied with my answer, you can complain to the Data Protection Board of India or, in the EEA or UK, to your local data protection authority.

9. Security

Data is encrypted in transit, your sign-in session is kept in your device’s secure storage, and the database restricts each account to its own data. No system is completely secure, but if a breach affects your data I will notify you and the relevant authorities where the law requires.

10. Children

NutriOne is not intended for anyone under 13 (or the higher minimum age where you live). I do not knowingly collect personal information from anyone under 13. If you believe a child has provided information through NutriOne, contact me and I will delete it.

11. Where your data is processed

I am based in India. The service providers named above may store or process data in other countries, including the United States and the European Union. Where data leaves the EEA or UK, the transfer relies on safeguards such as the European Commission’s Standard Contractual Clauses in the provider’s terms.

12. Changes to this policy

If I change this policy, I will update the date at the top of this page. For significant changes I will also let you know in NutriOne before they take effect.

13. Contact

For questions about this policy, data requests or complaints, contact me by email. I built the app, so I will answer your message myself.

Sagar Singh (developer “Myx”), India