Privacy policy

Who is responsible

DietTracker is run by Shantanu Taro, an individual based in India, who decides how your personal data is used (the "data fiduciary" under India's Digital Personal Data Protection Act, 2023). You give consent to the processing described here when you tick the box agreeing to our Terms and this policy; you can withdraw it any time by deleting your account.

What we collect

Account details: your name, email address, and optional profile photo, stored when you sign up.

Nutrition data you log: meal descriptions, photos and voice notes, estimated nutrition, water intake, weight entries, cravings you note down, goals, and preferences.

Device data needed for features you turn on: your timezone and a push subscription if you enable reminders, and your install/browser type for the PWA experience.

Usage analytics: anonymous events (like “meal logged”) and crash reports so we can fix what breaks. No meal contents are included in analytics.

Some of this, like your weight and what you eat, says something about your health, so we treat it with extra care: we use it only to run the features you use and never sell or share it for advertising.

How the AI works with your data

When you log a meal, its description or photo is sent to our server and forwarded to an AI provider (currently Mistral AI) to estimate nutrition. If you log by voice, the short recording is forwarded to Mistral AI to turn it into text; we keep the text as your meal description and do not store the recording. These requests are used only to produce your estimate - we don't use your meals or recordings to train models, and we don't permit the provider to.

The AI coach, meal planner, and daily motivation receive your goals, streak, and daily totals to give useful answers; they never receive your name (beyond a first name you chose), email, or account identity.

AI requests are rate-limited per account. We keep short-lived operational logs of failures (never meal contents) to keep the service healthy.

Where your data lives and how it's protected

Your data is stored in Google Firebase (Firestore) under your account, in transit only over HTTPS, and protected by server-enforced security rules so only your signed-in account can read or write it.

A copy of your recent data is cached on your own device so the app opens instantly and works offline. It stays on your device and is removed when you delete your account from that device.

If you join friends leaderboards, only aggregates are shared: your first name, streak count, and protein-goal days - never meals, photos, or weights.

Our providers may store or process data outside India (for example Google Cloud, Vercel in the United States, and Mistral AI in the European Union), under their own security and privacy commitments.

Security and data breaches

We use reasonable security practices: encrypted connections, server-enforced access rules, limited access to our systems, and established providers. No system is perfectly secure, so we can't guarantee your data will never be accessed without permission.

If a breach affects your personal data, we'll act to contain it and notify you and the Data Protection Board of India (and other authorities where required) as the law requires, explaining what happened and what you can do.

Please help by keeping your devices and sign-in account secure, and by not putting medical records, ID numbers, passwords or payment details into meal descriptions, notes or photos.

Payments

Purchases are processed by Razorpay. We never see or store your card, UPI, or banking details - we only record that your payment succeeded and that Pro is active on your account.

If billing ever moves to another processor, this policy will be updated before the change takes effect.

Notifications

Reminders are optional and off until you grant your browser's permission prompt. If you enable them, we store your push subscription and timezone to deliver them, and we delete the subscription when it expires, when delivery fails permanently, or when you turn reminders off.

Data retention

Meals, water and weight entries are kept for 15 days on the free plan and 1 year on Pro. Older entries are deleted automatically every night, and when Pro ends the 15-day limit applies from the next night. Before entries are deleted, each day's totals (calories, protein, carbs, fat, number of meals, water and that day's last weight) are saved without any meal names or details, so streaks and progress charts keep working. Those daily totals, your profile and your settings are kept for as long as your account exists and are deleted with it.

When you delete your account, your profile, meals, water logs, weights, settings, push subscriptions, and leaderboard snapshot are deleted immediately. Aggregated, non-identifying usage statistics (like total daily estimates served) may be retained.

Backups and operational logs age out automatically within a short, fixed window.

If DietTracker shuts down, we'll give at least 30 days' notice so you can export your data, then delete user data, except records the law requires us to keep (such as payment records).

Export and deletion

You can export everything we store about you from Profile → Privacy & Data → Export my data.

You can permanently delete your account and all data from Profile → Privacy & Data → Delete account. Deletion is immediate and irreversible.

You can also email us (below) to access, correct, export or delete your data, or to nominate someone to act for you if you die or can't act yourself. We'll complete requests within 30 days.

If you're not happy with how we handled a request, you can complain to the Data Protection Board of India after contacting us.

Children

DietTracker is only for people 18 and older, and we don't knowingly collect data about anyone younger. If you believe someone under 18 has created an account, contact us and we'll delete it.

What we don't do

We don't sell your data. We don't show ads. We don't share your personal data with third parties beyond the processors named above (Firebase, the AI provider, the payment processor, and crash/analytics tooling), each of which processes it only on our instructions.

Changes to this policy

If we make material changes, we'll update the date at the top and ask you to accept the new version in the app before it takes effect.

Grievance officer and contact

Grievance officer: Shantanu Taro, shantanu@diettracker.in. We acknowledge complaints within 48 hours and aim to resolve them within 30 days. Questions or requests go to the same address.