NutriScope

Legal

Privacy Policy

Effective August 31, 2026 · Updated October 2, 2026

Plain-language summary: NutriScope uses account and nutrition-profile data to provide personalized tracking. Barcodes are read on your own device. Nutrition-label and meal photos are sent to an AI provider to be read, but only when you choose those features, and are not kept afterwards. A display name and profile picture are optional. The picture is never shown to other users; the display name is shown only as the author of a recipe you choose to share and have approved, and it is taken off that recipe if you delete your account. Your health-disclaimer acceptance records are kept while your account exists and deleted with your account. We do not sell personal information or use it for third-party advertising.

1. Information we collect

Account information

When you create or access an account, we process identifiers such as your email address, user ID, authentication events, and account creation date.

Profile name and picture

You may set a display name and a profile picture. A picture you upload is reduced to a small square image on your device before it is saved, and it is stored as part of your profile record rather than in separate file storage. The picture is not shown to other users and is not used to identify you anywhere else. Your display name is shown to other users in one place only: if you share a recipe and it is approved, the recipe is published with your display name as its author. Both are optional and can be changed at any time, and a display name is required only if you choose to share a recipe.

Profile and nutrition information

Information you choose to provide may include age, height, weight, gender or sex selection, activity level, dietary preferences, nutrition goals, food entries, barcode scans, serving information, and daily progress. Depending on your location, some of this information may be considered sensitive or health-related data.

Product, label and meal-photo information

We process barcodes you scan, product searches, manually entered nutrition values, and quality or verification status. Barcodes are decoded on your own device and the image is not transmitted.

Two features do send an image. If you scan a nutrition label, the label photo is transmitted to our AI processing provider to extract the printed values. If you photograph a meal, that photo is transmitted to the same provider to identify the food and estimate its nutrition; a short description you add to correct a wrong guess, and the cuisines and country on your profile, are sent with it as context. Neither feature is automatic — each happens only when you choose it, and you can enter the information by hand instead.

We do not store either photo after the request completes, and photos are never shown to other users. The provider may process request data under its own service terms and our processor agreement.

Recipes you share

Sharing a recipe is optional and nothing is shared unless you choose to. If you submit one, we process the text you enter, the photograph you attach, and your profile display name as the author. While it is waiting for review, only you and our reviewers can see it, and you can withdraw it at any time from the app. If a reviewer approves it, the recipe, the photograph and your display name become publicly visible to everyone using NutriScope. The photograph is stored in a publicly readable location under a random filename that contains nothing about who uploaded it.

An approved recipe is no longer only yours to remove: other people may have saved or cooked from it, so withdrawing it after approval is handled through support rather than by a button. If you delete your account, any submission still waiting for review or already turned down is deleted with it, and your display name is removed from any recipe that was approved and replaced with a generic credit. The recipe itself and its photograph of the food remain published.

Technical information

Our hosting, authentication, and security providers may process IP address, device/browser information, request timestamps, diagnostic events, and security logs needed to operate and protect the service. This website does not currently use advertising cookies or cross-site behavioral advertising.

2. How we use information

  • Provide account access, barcode lookup, nutrition summaries, and personal goal tracking.
  • Calculate progress from information and targets you choose to provide.
  • Review, correct, and improve product-data quality.
  • Secure the service, enforce access controls and usage limits, investigate abuse, and maintain audit records.
  • Respond to deletion, privacy, and support requests.
  • Meet legal obligations and protect users, the service, and others.

Where consent is required, optional processing such as sending a label or meal photo to an AI provider occurs only after you choose that feature. You can decline and enter the information manually.

3. Service providers and data sharing

We use service providers only for functions needed to operate NutriScope. Current categories include:

  • Supabase for authentication and database infrastructure.
  • Netlify for website hosting and serverless processing.
  • Anthropic when you deliberately use AI-assisted nutrition-label extraction or meal-photo recognition. The image you submit is sent to Anthropic to be read.
  • Open Food Facts for product lookup using a barcode. This request is made by the app directly, so Open Food Facts receives the barcode and your device’s network address; no account or profile information is sent.
  • USDA FoodData Central for product lookup when Open Food Facts has nothing usable. This request is made by our server rather than by your device, so USDA receives the barcode only; personal profile information is not required for that lookup.
  • Google Fonts for the Nunito typeface, which may cause a browser request to Google when the website loads.

We may also disclose information when required by law, to address fraud or security threats, or as part of a business transaction subject to appropriate safeguards. We do not sell personal information.

4. Retention and deletion

Account and profile information is retained while your account is active and for the time reasonably needed to provide the service. When you delete your account, account-linked profile information is scheduled for deletion through database relationships. Limited security, fraud-prevention, transaction, or audit records may be retained where reasonably necessary or legally required, with the account identifier removed or restricted where practical.

Health-disclaimer acceptance records

While your account exists, we keep a record of the health disclaimer you accepted: your account identifier, email address at the time, acceptance date and time, the wording and version shown, and app and device context. This records the acknowledgement you made; it is separate from consent to optional personal-data processing.

These records are protected from editing while your account exists. When your account is deleted, its disclaimer-acceptance records are deleted from our active database in the same operation. We do not apply a separate seven-year retention period to these records.

A recipe you shared and had approved stays published after your account is deleted, with your display name replaced by a generic credit — other people may be using it. Everything else linked to your account goes.

You can initiate deletion in the app or through the web account-deletion flow. Deletion is permanent and may not cancel an Apple or Google subscription; subscriptions must be managed through the applicable store.

5. Your choices and rights

You may review or update available profile fields in the app, decline optional AI label processing, sign out, or delete your account. Depending on your location, you may also have rights to access, correct, delete, restrict, or export personal information, object to certain processing, withdraw consent, or complain to a data-protection authority.

6. Security and international processing

NutriScope uses authentication, database row-level authorization, least-privilege access, encrypted network transport, usage limits, and administrative audit logs. No system can guarantee absolute security. Service providers may process information in countries different from yours; where required, appropriate contractual or legal safeguards should be used.

7. Children

NutriScope is not directed to children under 13 and should not be used by a child who cannot legally consent to data processing in their location without a parent or guardian. If we learn that a child’s information was collected without appropriate authorization, we will take steps to delete it.

For users under 18, and for users who tell us they are pregnant or breastfeeding, NutriScope does not calculate a weight-loss target. Energy needs in those groups depend on growth, or on the stage of a pregnancy, in ways a general formula cannot account for. Tracking works normally and the daily target is held at maintenance.

8. Changes to this policy

We may update this policy as NutriScope changes. The effective date will be updated, and material changes will be communicated through the app or another appropriate channel before they take effect when required.

9. Contact

NutriScope is operated from the Republic of Maldives.

For privacy and data-protection requests — including access, correction, deletion, export, objection, or withdrawal of consent — contact info@nutriscope.space. The same address reaches support for any other question about the service.