Privacy policy

Last updated 23 October 2026.

What Food Tracker is

Food Tracker is a personal nutrition log. You, or an AI assistant you connect to your account, record what you eat, your weight and your activity. The app shows that data back to you.

What we store

• Your account: email address, display name and timezone. If you sign in with Google, we receive your Google account email and name; we do not receive your Google password.
• Your body profile: date of birth, sex, height, work style, training frequency and goals, used only to estimate your daily energy needs.
• Your logs: food entries (with calories, nutrients and notes), weight and body-composition entries, and daily activity (steps, workouts, water) that you or your connected assistant record.
• Your food library, if your assistant saves anything to it: foods and packaged products with their nutrition (read from a label photo you send your assistant, or estimated; the photo itself never reaches us), recipes, the size and opening day of packs you open (to count what is left), and batches you cook with their weights, including portions of a batch you say someone else ate and any name you give for them.
• Your targets and meal plan: daily and per-meal calorie and nutrient targets, and the meals you eat with their times.
• Connections: the names of assistants you have authorised, hashed access tokens and hashed API keys. Raw keys and tokens are never stored. When an app registers itself as a connector, a hash of the network address it registered from is kept for up to 30 days to limit how often one address may do so; the address itself is not stored.
• Which days you checked your progress: the date, and whether you opened the Log, Progress or Body page or asked your assistant for a summary, a trend, your weight log or your past entries. Not what you looked at, how long, or anything you wrote.
• The weekly email: for each one we send you, the week it covered, which kind it was, its place in the series if you had stopped logging, whether Resend accepted it and its reference for it; and, if you stop the weekly email, the date you did. The week's list, with the figures each email states, is kept so the email can be shown again.
• Reminders, if you turn them on: the address your browser gives us for delivering notifications to that device, with the keys that encrypt them, the site you turned them on from and the kind of device; your reminder settings (the hour, and a weekday or every day for a weigh-in); and for each reminder we send, its date and kind, whether it was delivered and whether you opened it. A reminder says only that nothing is logged or that it is weigh-in day; it never carries food, figures or your name.

How we use it

Only to run the service for you: showing your log, calculating totals and estimates, and letting the assistants you authorise read and write your own data. We also count the days people check their progress, to learn whether the reports and summaries are useful and to improve them; it is never shown to anyone else, used for advertising, or shared. We do not sell data, show advertising, profile you, or share your data with third parties except the infrastructure providers that host the service (Vercel and Supabase), the one that delivers our email (Resend) and, for reminders, your browser's push service.

Each Sunday we email you about the week before: how many days you logged, your averages against your own targets, and one next step. Every one of these emails has a link that stops them, without signing in, and the switch is also under Profile → Notifications; stopping them changes nothing else about your account.

If you turn on reminders, we send a notification on an evening when nothing is logged: on the first day you miss and on the third, then none until you log again, and never on a day you have logged. If you choose a weekday, we also send a weigh-in reminder that morning when you have not logged a weight in the week before; if you choose every day, one each morning you have not logged a weight yet, pausing after a week without one. Turn them off under Profile → Notifications → Reminders, or remove this site's notification permission in your browser; either stops them at once.

Your weight, body measurements and food log are health-related information. You give it to us by entering it, or by asking your assistant to record it, and we use it only for the purposes above.

Connected assistants

When you connect an assistant (for example ChatGPT or Claude), it receives the parts of your data it asks for while you use it: your name, timezone, body profile, targets, meal plan and the logs it reads or writes. Nothing is sent to an assistant you have not approved, and each approval lists what it may read and write. What the assistant does with that data, including your conversation, is covered by its provider's privacy policy, not this one.

Your consent

We process your data on the basis of the consent you give when you create your account, for the purposes above and nothing else. You can withdraw it at any time by deleting your account; that stops all further processing and does not affect what was done before.

Where it is stored

Your data is stored in a database in Mumbai, India (Supabase). The app's servers (Vercel) may handle a request outside India while it is being answered; nothing is kept there. If you use Food Tracker from another country, your data is sent to India and kept there.

The weekly email is the one exception. It is delivered by Resend, which receives your email address and the email itself (the days you logged, your averages and your targets) to send it, and keeps a log of each email it sends, including your address, in the United States.

Reminders are delivered by your browser's push service (Apple, Google or Mozilla, depending on your device). It relays an encrypted message it cannot read and sees your device's push address, usually on servers outside India.

How long we keep it

For as long as your account exists. Sign-in sessions and connection tokens expire on their own; a removed connection is revoked at once.

Who can see it

You and the assistants you explicitly connect. The person who runs Food Tracker also sees each Sunday's list of weekly emails before they go out (who gets which kind, with the days, averages and targets it states), to check them. Every connection is scoped to your own account and can be revoked at any time from the Connect page.

Deleting your data

Delete your account from the Profile page. This permanently removes your profile, all logs, targets, keys and connections.

Your rights

Wherever you live, you may:

• see a summary of the data we hold about you and who it has been shared with;
• have it corrected, completed or brought up to date;
• have it erased, and withdraw your consent;
• nominate someone to exercise these rights for you if you die or cannot do so yourself;
• raise a grievance with us, and then, if you are not satisfied, with the Data Protection Board of India or the data protection authority where you live.

These follow India's Digital Personal Data Protection Act, 2023, which governs how we handle your data, and include the rights the laws of other countries give you, such as the UAE's Personal Data Protection Law.

Most of this you can do yourself: your whole log, profile and targets are on your pages, your assistant can correct any entry, and deleting your account erases everything. For anything else, write to us.

Where Food Tracker is offered

Food Tracker is not offered in the European Union, the European Economic Area, Switzerland or the United Kingdom. Do not create an account if you live there.

Children

Food Tracker is meant for adults. Do not create an account if you are under 18; if you think a child has an account, write to us and we will delete it.

Grievances and contact

Write to the grievance officer of Food Tracker at hello@foodtracker.in with any question about this policy, a request about your data, or a complaint. We acknowledge within 7 days and reply in full within 30 days.