Legal

Privacy Policy

Your health data is sacred. Here's exactly how we treat it.

Last updated: 1 June 2026 · Effective: 1 June 2026

🔒 Short version: NutriAI stores all your health data locally on your device, encrypted with AES-256. We do not collect, upload, sell, or share your personal health information. No servers. No profiles. No ads.

1. Who We Are

NutriAI ("we", "our", "us") is an Android application developed and published by NutriAI Technology Private Limited, registered in India. Our registered address is available upon request at privacy@nutriai.co.in.

2. Data We Collect

Data stored exclusively on your device

The following information is created by you and stored only on your device in an AES-256 encrypted database:

Display name (you enter this during onboarding)
Age, height, weight, and gender (for TDEE/BMR calculation)
Nutrition goal and activity level
Meal logs: food name, calories, macros, date/time, serving size
Water intake logs
App settings and preferences

Camera access

When you use AI food recognition, your camera captures an image that is processed in memory only. The image is never saved to your gallery or uploaded anywhere. The AI model runs entirely on-device using TensorFlow Lite.

What we do NOT collect

We do not collect your email address or create user accounts
We do not collect your location or GPS data
We do not collect device identifiers, advertising IDs, or fingerprints
We do not use third-party analytics SDKs (no Firebase Analytics, no Mixpanel)
We do not display advertisements

3. How We Use Your Data

Data Type	Purpose	Stored
Body measurements	Calculate daily calorie and macro targets	On-device only
Meal logs	Track daily nutrition totals and weekly trends	On-device only
Camera frames	AI food identification (TFLite, in memory)	Never stored
Water logs	Daily hydration tracking	On-device only
App preferences	Remember your settings	On-device only

4. Data Security

We implement the following security measures to protect your health data:

AES-256-GCM encryption for all database records via SQLCipher
Android Keystore for cryptographic key management (keys never leave secure hardware)
Encrypted SharedPreferences (AES-256-GCM) for app settings
Biometric authentication — fingerprint or face unlock required to access the app
No cleartext network traffic — enforced via Android Network Security Config
Root detection — the app warns if your device's security has been compromised
No cloud backup — all sensitive data is explicitly excluded from Android backup

5. Third-Party Services

NutriAI uses the following third-party services in the app. None of these receive your personal health data:

Google Play Services — required for app distribution and Android biometric APIs. Google's privacy policy applies.
TensorFlow Lite — on-device ML framework. Runs locally, sends no data to Google or Alphabet.
ML Kit Barcode Scanning — on-device barcode scanning. Barcode data stays on your device.

6. Children's Privacy

NutriAI is intended for users aged 13 and over. We do not knowingly collect data from children under 13. If you are a parent and believe your child has used NutriAI, you can delete all data by going to Profile → Clear All Data within the app.

7. Your Rights

Because all your data is stored on your device, you have complete control at all times:

Access: Open the app to view all your stored data at any time.
Deletion: Go to Profile → Settings → Clear All Data. This permanently deletes your encrypted database and all app preferences.
Portability: Pro users can export data as CSV or JSON from the Analytics screen.
Rectification: Edit any meal entry, profile data, or water log directly within the app.

If you are an EU resident, you also have rights under GDPR (Articles 15–22). Since we hold no data on our servers, your primary mechanism is the in-app delete function. For any other GDPR queries, contact privacy@nutriai.co.in.

8. Data Retention

Your data persists on your device until you uninstall the app or use the "Clear All Data" option in Profile settings. Since we hold no data on our servers, we have no server-side retention to disclose.

9. Changes to This Policy

If we make material changes to this Privacy Policy, we will notify you via an in-app notification and update the "Last updated" date at the top of this page. Continued use of NutriAI after changes constitutes acceptance of the revised policy.

10. Contact Us

For privacy-related questions, requests, or concerns, please contact our Data Protection contact at:

Email: privacy@nutriai.co.in
Response time: within 72 hours on business days