Privacy Policy

What we collect

Account details: your name, email address, and optional profile photo, stored when you sign up.

Nutrition data you log: meal descriptions and photos, estimated nutrition, water intake, weight entries, goals, and preferences.

Device data needed for features you turn on: your timezone and a push subscription if you enable reminders, and your install/browser type for the PWA experience.

Usage analytics: anonymous events (like “meal logged”) and crash reports so we can fix what breaks. No meal contents are included in analytics.

How the AI works with your data

When you log a meal, its description or photo is sent to our server and forwarded to an AI provider (currently Mistral AI) to estimate nutrition. These requests are used only to produce your estimate - we don't use your meals to train models, and we don't permit the provider to.

The AI coach, meal planner, and daily motivation receive your goals, streak, and daily totals to give useful answers; they never receive your name (beyond a first name you chose), email, or account identity.

AI requests are rate-limited per account. We keep short-lived operational logs of failures (never meal contents) to keep the service healthy.

Where your data lives and how it's protected

Your data is stored in Google Firebase (Firestore) under your account, in transit only over HTTPS, and protected by server-enforced security rules so only your signed-in account can read or write it.

A copy of your recent data is cached on your own device so the app opens instantly and works offline. It stays on your device and is removed when you delete your account from that device.

If you join friends leaderboards, only aggregates are shared: your first name, streak count, and protein-goal days - never meals, photos, or weights.

Payments

Purchases are processed by Razorpay. We never see or store your card, UPI, or banking details - we only record that your payment succeeded and that Pro is active on your account.

If billing ever moves to another processor, this policy will be updated before the change takes effect.

Notifications

Reminders are optional and off until you grant your browser's permission prompt. If you enable them, we store your push subscription and timezone to deliver them, and we delete the subscription when it expires, when delivery fails permanently, or when you turn reminders off.

Data retention

We keep your data for as long as your account exists so your history and trends keep working.

When you delete your account, your profile, meals, water logs, weights, settings, push subscriptions, and leaderboard snapshot are deleted immediately. Aggregated, non-identifying usage statistics (like total daily estimates served) may be retained.

Backups and operational logs age out automatically within a short, fixed window.

Export and deletion

You can export everything we store about you from Profile → Privacy & Data → Export my data.

You can permanently delete your account and all data from Profile → Privacy & Data → Delete account. Deletion is immediate and irreversible.

You can also email us (below) to request export or deletion and we'll complete it within 30 days.

Children

DietTracker is not directed at children under 13 (or the equivalent minimum age in your region), and we don't knowingly collect their data. If you believe a child has created an account, contact us and we'll delete it.

What we don't do

We don't sell your data. We don't show ads. We don't share your personal data with third parties beyond the processors named above (Firebase, the AI provider, the payment processor, and crash/analytics tooling), each of which processes it only on our instructions.

Changes to this policy

If we make material changes, we'll update the date at the top and highlight the change in the app before it takes effect. Continued use after that means you accept the updated policy.

Contact

Questions or requests: shantanutaro@gmail.com.