1. Who is responsible
NutriOne is a nutrition and calorie tracking app with AI meal recognition. It is developed and published by Sagar Singh, an individual developer based in India, under the developer name “Myx”. NutriOne is not published by a company.
In this policy, “I”, “me” and “my” mean Sagar Singh. I decide how the information described here is used and I am responsible for it. Under India’s Digital Personal Data Protection Act, 2023 I am the “data fiduciary”, and under the GDPR I am the “data controller”. I am also the grievance contact for NutriOne.
2. Information I collect
Account
- Your email address and an account ID.
- Your name, if you provide it or share it through Sign in with Apple or Google. With Apple you can hide your real email address.
- Passwords are handled by the authentication provider and are never visible to me.
Profile and health information you enter
- Date of birth, gender, height, current, starting and target weight, activity level, weight goal and nutrition targets.
- Your onboarding answers, preferred units and any referral code.
Tracking data
- Foods and meals you log, with calories and nutrients, saved foods, recipes, exercise sessions and weight entries.
Usage and device information
- App events such as “food logged” or “scan completed”, with non-identifying details such as meal type. They never include food names, photos, your name or your email.
- Crash and error reports with technical details such as device model, OS version and app state.
- The number of AI scans you make each day, used to apply the free-plan limit.
3. Camera and food photos
NutriOne uses the camera to scan meals and barcodes. When you scan a meal, the photo is sent to my server and to the AI provider to estimate its nutrition, and it is not kept on my servers after the estimate is returned. A copy stays on your device next to your log entry and is deleted when you log out or delete your account. For barcodes, only the barcode number is sent to Open Food Facts. When you search for a food, only the words you type are sent to Open Food Facts and USDA FoodData Central. You can deny camera access and log food manually.
4. How I use information
- to calculate calorie and macro targets, store your logs and show progress and insights;
- to sync your data across devices;
- to estimate the nutrition of meal photos, look up barcodes and search for foods;
- to send reminders you turn on, which are scheduled on your device;
- to keep the service secure, prevent abuse and enforce plan limits;
- to understand usage and fix problems.
I do not sell your personal information, use it for advertising, or use your health information for anything other than providing NutriOne.
5. Legal bases
India: your consent when you create an account and enter information, and the legitimate uses allowed by the DPDP Act, 2023. EEA, UK and Switzerland: contract (to provide the features you use), explicit consent (for health information such as weight and food intake), and legitimate interests (security, usage understanding, crash fixing). You can withdraw consent at any time by deleting the information or your account.
6. Service providers
- Supabase: hosting, database and authentication.
- Anthropic: AI analysis of meal photos, sent without your name or email. Under its commercial terms, Anthropic does not train on this data and may keep it for a limited period for abuse monitoring.
- Sentry: crash and error reporting, configured not to collect your name, email or IP-based identity.
- Open Food Facts: barcode lookups and food search (the barcode number or search words only).
- USDA FoodData Central: food search (search words only).
- Google: Google Sign-In, Google Play distribution and purchases.
- Apple: Sign in with Apple, App Store distribution and purchases.
I may disclose information if the law requires it, or to protect the rights and safety of users.
7. How long data is kept
- Your account and tracking data are kept while your account is active.
- When you delete your account, see Deleting your account.
- Usage events are deleted with your account. Crash reports do not identify you and are deleted automatically by Sentry within 90 days.
- Meal photos are not stored on my servers.
8. Deleting your account
You can delete your NutriOne account and its data at any time, in the app or without it.
In the app
- Open Profile, then Settings.
- Tap Delete Account and confirm.
Without the app
Contact me from the email address on your account and ask me to delete it. I will confirm the account is yours, delete it within 30 days and tell you when it is done.
What is deleted
- your account and profile, including date of birth, gender, height, weights, goals and targets;
- your food logs, saved foods, recipes, exercise sessions and weight entries;
- your usage events and daily scan counts;
- the meal photos and data stored on that phone.
What is kept
- Copies in the hosting provider’s encrypted backups, until they are overwritten a short time later.
- Crash reports, which do not identify you and are deleted by Sentry within 90 days.
- Purchase records, if any, which Google Play and the App Store keep as tax law requires.
9. Your rights and choices
Edit your details in Profile → Personal Details, Goals and Nutrition Targets, export your data in Profile → Settings → Export Data, and delete your account and data in Profile → Settings → Delete Account. Reminders, camera and notification permissions can be turned off at any time. California residents: I do not sell or share personal information for cross-context behavioural advertising.
Depending on where you live, you may also have the right to:
- access the personal data I hold about you and get a copy in a portable format;
- correct information that is wrong or incomplete;
- have your data erased;
- restrict or object to certain processing;
- withdraw consent where processing is based on consent;
- nominate someone to exercise your rights if you die or become unable to (India).
To make a request, contact me. I will reply within 30 days and may need to confirm that the data is yours first. If you are not satisfied with my answer, you can complain to the Data Protection Board of India or, in the EEA or UK, to your local data protection authority.
10. Security
Data is encrypted in transit, your sign-in session is kept in your device’s secure storage, and the database restricts each account to its own data. No system is completely secure, but if a breach affects your data I will notify you and the relevant authorities where the law requires.
11. Children
NutriOne is not intended for anyone under 13 (or the higher minimum age where you live). I do not knowingly collect personal information from anyone under 13. If you believe a child has provided information through NutriOne, contact me and I will delete it.
12. Where your data is processed
I am based in India. The service providers named above may store or process data in other countries, including the United States and the European Union. Where data leaves the EEA or UK, the transfer relies on safeguards such as the European Commission’s Standard Contractual Clauses in the provider’s terms.
13. Changes to this policy
If I change this policy, I will update the date at the top of this page. For significant changes I will also let you know in NutriOne before they take effect.
14. Contact
For questions about this policy, data requests or complaints, contact me by email. I built the app, so I will answer your message myself.
Sagar Singh (developer “Myx”), India