Operator: Sarang AI Technologies Inc., a corporation incorporated in Alberta, Canada ("Nutari," "we," "us," or "our").
Contact: [email protected] · nutari.app
Nutari helps you track nutrition and fitness, including estimating the nutrition of your meals from photos. This policy explains what we collect, how we use it, who we share it with, and your choices.
1. Information we collect
Account information
- Email address.
- Password — stored only as a salted one-way hash; we never store your actual password.
- Optional display name.
Profile & health/fitness data (you provide this to get personalized results)
- Age, sex/gender, height, current and goal weight, activity level, dietary preferences, country/region, language, and unit preferences.
- Body measurements and weight history, streaks, and progress notes.
Food, activity & content you log
- Food diary entries (foods, portions, calories, macros, timestamps), water intake, step counts, meal plans, and favorite recipes/meals.
- Meal photos you capture or upload to scan (see §3).
- Voice or typed meal descriptions, and messages you send to the AI coach.
Subscription information
- Your subscription status and the store transaction identifiers (Google Play purchase token / Apple transaction ID) needed to verify and manage your subscription.
- We do not receive or store your payment card details — payments are processed by Google Play or Apple.
Technical information
- Basic server logs (e.g. IP address, app version, timestamps) used for security and reliability. We do not use advertising SDKs and we do not track you across other apps or websites. We use one diagnostics tool, Sentry, solely to capture crash and error reports so we can fix bugs (with personal identifiers disabled) — see §5.
Our website
This website (nutari.app) is a set of simple information pages. It uses no advertising or tracking cookies, and it makes no third-party requests — fonts and assets are served from our own domain, so visiting these pages doesn't share your IP address with any outside company. If we ever add basic, privacy-respecting analytics, we'll say so here first. The app itself is covered by the sections above.
2. How we use your information
- To provide the app: estimate nutrition from your photos and descriptions, track your diary and progress, generate recipes and meal plans, and power the AI coach.
- To create your account, sign you in, and sync your data across your devices.
- To verify and manage your subscription.
- To secure the service, prevent fraud and abuse, and debug problems.
- To comply with legal obligations.
We do not sell your personal information, and we do not use it for advertising.
3. Meal photos and AI processing
When you scan a meal, your photo — and any meal description or coach message you send — is transmitted securely to our AI processing provider, Anthropic, PBC (the Claude API), which generates the nutrition estimate or response.
- Meal photos are processed to produce your estimate and are not stored on our servers afterward.
- Our AI provider processes this content solely to generate your result and, under its commercial API terms, does not use it to train its AI models. It is retained by that provider only transiently and for a limited period in accordance with its policies.
If you scan a barcode or search for a food by name, the barcode number or the search term is sent to Open Food Facts, a public, community-maintained food database, to look up product information. We do not send account-identifying data, and product data from this source can be incomplete or inaccurate — always check labels for allergies or medical needs.
4. Health Connect and Apple Health
If you choose to connect Nutari to Health Connect (Android) or Apple Health (iOS), Nutari reads the specific data you grant — such as steps, active energy burned, and weight — to display your activity in the app and keep your calorie targets accurate.
- Access is read-only, limited to the data types you approve, and used only to provide these in-app features.
- Body weight read from Health Connect / Apple Health is added to your weight log and stored on our servers to keep your calorie targets accurate across your devices. Steps and active energy are shown in the app. This data is used only to personalize the service for you.
- We do not use Health Connect / Apple Health data for advertising or marketing, and we do not sell it or share it with third parties for their own purposes.
- You can revoke access at any time in Health Connect / Apple Health, or in your device settings.
Our use of information received from Health Connect and Apple Health adheres to the respective platform policies, including any applicable Limited Use requirements.
5. How we share information
We share information only with service providers that process it on our behalf to run the app, and where required by law. We do not sell your data.
| Provider | Purpose | Data involved |
|---|---|---|
| Anthropic, PBC (Claude API) | AI nutrition analysis, coach, recipes/plans | Meal photos, meal descriptions, coach messages, and your profile (e.g. age, sex, height, weight and goals) used to personalise responses |
| Railway (hosting & database) | App hosting and secure data storage | Account, profile, logs and diary data |
| Google (Gemini image API) | Generating recipe / workout photos | Recipe or workout title, cuisine and description (no account identifiers) |
| Cloudflare (R2 storage & CDN) | Hosting and serving those generated images | The generated images (non-personal); your IP address when your app loads an image |
| Resend | Sending account emails (verification, password reset) | Your email address |
| Sentry | Crash and error diagnostics (no advertising / no cross-app tracking) | Crash and error reports from your device; personal identifiers are disabled |
| Open Food Facts | Barcode and food-name lookup | The barcode number or the food search term you enter |
| Google Play / Apple | Payment processing and subscription management | Purchase/subscription identifiers |
We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users or the public.
6. Data retention and deletion
- We retain your account and associated data until you delete your account.
- You can delete your account and its data at any time in the app (Profile → Account → Delete Account). Deletion removes your account, profile, logs, sync data, and subscription records from our systems.
- Meal photos are not retained by us after analysis (see §3).
- Server logs are kept for a limited period — generally up to 90 days — for security and reliability, then deleted or anonymised.
To request deletion or a copy of your data, use the in-app option or contact [email protected].
7. Security
We protect your data with encryption in transit (TLS), hashed passwords, rotating authentication tokens, and secure token storage on your device. On your device, your health and diary data is kept in the operating system's encrypted store. No system is perfectly secure, but we work to protect your information and to limit access to it. If a security incident ever affects your personal data, we'll investigate promptly and notify you and any regulator required by applicable law, without undue delay.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing.
- EEA/UK (GDPR): Our legal bases are your consent and the performance of our contract with you (providing the app). Health-related data is treated as a special category and processed based on your explicit consent, which you can withdraw at any time by deleting the relevant data or your account.
- Canada (PIPEDA): We collect, use, and disclose personal information with your knowledge and consent, for the purposes described here, and give you access to your information on request.
- California (CCPA/CPRA): We do not sell or "share" your personal information for cross-context behavioral advertising. You may request to know, access, delete, or correct your information, and to limit the use of sensitive personal information. We will not discriminate against you for exercising these rights.
California: categories of personal information
In the preceding 12 months we have collected the following categories of personal information (as defined by the CCPA/CPRA), solely to provide the app to you. We do not sell or share any of them.
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Email address, account ID | Yes |
| Customer records | Name you provide | Yes |
| Protected characteristics | Age, sex (used to calculate your targets) | Yes |
| Commercial information | Subscription status and purchase records | Yes |
| Sensitive personal information | Health & fitness data — weight, body measurements, goals, food diary, and any Health Connect / Apple Health data you connect | Yes — used only to run the service, never sold or shared, and not used to infer characteristics about you |
| Audio | Voice input you record to log a meal (converted to text; not stored as audio) | Yes |
| Internet / device activity | In-app interactions, crash diagnostics, and your IP address (used transiently, not stored) | Yes |
| Geolocation, biometric identifiers, financial account numbers | — | No |
We disclose these categories only to the service providers listed in Section 5, who process the data on our behalf. We do not disclose personal information to third parties for their own purposes.
Referral program (notice of financial incentive)
If you refer a friend, both of you may receive extra free days of Nutari Pro. This is entirely optional. The only information involved is the referral code you share and the account that signs up with it. Choosing not to participate does not change the service you receive, and you can opt out at any time simply by not sharing your code. We offer this because word-of-mouth helps us grow, and the value of the reward (free Pro days) reasonably relates to the value of a new sign-up to us.
Automated processing
Nutari personalizes your calorie and macro targets and adapts them over time from the weight and food you log. This processing is automated, but it is advisory only — it produces no legal or similarly significant effect, and you can adjust or override your targets at any time. Contact us if you have questions about it.
Other US state privacy rights
If you live in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another US state with a comprehensive privacy law, you have rights similar to those above: to confirm whether we process your data, access it, correct it, delete it, and get a portable copy, and to opt out of targeted advertising, the "sale" of personal data, and certain profiling. Nutari does none of those last three — we don't sell or share your data, run targeted ads, or profile you for decisions that have a legal or similarly significant effect.
Your health and fitness information is sensitive data under these laws. We process it only with your consent and only to run the service for you, and we never sell it. To exercise a right, email [email protected]. If we deny a request, you may appeal by replying to our response, and we'll reconsider.
Do-Not-Track and opt-out signals
Because Nutari doesn't sell or share your data, run targeted advertising, or track you across other apps and websites, there's nothing for a "Do Not Track" or Global Privacy Control signal to switch off. We honor these choices by simply not doing that kind of processing in the first place.
How quickly we respond. We'll acknowledge your request promptly and respond within 30 days wherever possible. If a request is complex, or the law where you live allows more time, we may extend this (for example, to 45 or 90 days) and will tell you if we do. We may need to verify that a request comes from you or your authorized agent before we act on it.
To exercise any right, contact [email protected]. You may also lodge a complaint with your local data protection authority.
9. Health & wellness disclaimer
10. Children
Nutari is intended for people aged 16 and over. It is not directed to anyone under 16, and we do not knowingly collect personal information from anyone under 16. If you believe someone under 16 has provided us information, contact [email protected] and we will delete it.
11. International data transfers
We and our service providers process data in the United States and other countries. Where personal data of users in the EEA, UK or Switzerland is transferred outside those regions, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (and the UK Addendum), to protect it.
12. Changes to this policy
We may update this policy from time to time. We will post the updated version with a new effective date and, where appropriate, notify you in the app.
13. Contact & data protection
Data controller: Sarang AI Technologies Inc.
Alberta, Canada
[email protected]
Sarang AI Technologies Inc. is responsible for your personal information and is your point of contact for any privacy or data-protection matter — including a request to access, delete, or correct your data, or a complaint. Email [email protected] and we will respond. EEA/UK users may also contact us here, and retain the right to complain to their local data-protection supervisory authority.
EU/EEA representative (GDPR Article 27)
For individuals in the European Economic Area, our representative under Article 27 of the GDPR is Gagan, based in Vienna, Austria. You may contact our EU representative on any data-protection matter at [email protected].