Privacy Policy

1. Who we are

NutriOrbit is an Android app (package name com.nutriorbit) for fasting, meal planning, recipes, a shopping list, and sending that list to a grocery store. It is provided by Niraj Kumar, Gurugram, Haryana, India ("we", "us"). You can reach us at developers@nutriorbit.app.

NutriOrbit is not a medical device and gives no medical advice.

2. The short version

• There is no account, login or email address. We do not ask for your name.
• Most of your data (your goals, plan, recipes, pantry and shopping list) is kept on your phone.
• AI features, ingredient photos, recipe lookups, food-list downloads, purchase checks and Kroger store requests go through our own gateway. Those requests carry an installation identifier and session credentials, not your name or email.
• Swiggy Instamart requests go straight from your phone to Swiggy, not through us.
• The app has no analytics, crash-reporting or advertising code, and we do not sell your data.
• Food lists are downloaded only when you press Download, and then searched on your phone: what you type to search them is not sent anywhere.
• You can switch cloud AI off completely in Settings > Privacy.
• Your fasting and health context is not sent to AI unless you turn on "Share fasting & health context with AI".
• This website sets no cookies and uses no analytics or trackers.

3. What stays on your phone

These are stored on your device and are not uploaded to an account, because there is no account:

• Your profile settings, goals and daily targets, and your fasting protocol and history.
• Your weekly meal plan, activity history, cookbook (saved recipes), shopping list and pantry.
• Answers returned by AI features, kept so they can be shown again. "Clear AI answers" in Settings > Privacy deletes them.
• Any food lists you downloaded (for example USDA, UK, Canada or Australia). They are plain data files; Settings > Privacy > Food database shows their size and can delete them.
• Health Connect activity records are read and summarised on your phone. Only the summary can be shared, and only if you turn on the sharing switch described in section 5.

Uninstalling the app removes its data from your phone. Android's backup may keep a copy of some app data in your Google account. It leaves out the app's databases (such as your cookbook, plan and history) and its sign-in with our gateway; it can include your settings and goals, your shopping list, saved meal-plan suggestions and downloaded food lists.

4. What is sent, and to whom

Some features need a server. Here is what is sent and why.

Our gateway

AI features, ingredient photos, Kroger store requests, recipe and video search, food-list downloads and subscription checks run through NutriOrbit's own gateway, which is hosted on Cloudflare. Each request carries an installation identifier and session credentials. The credentials are checked with Google Play Integrity, which helps confirm the request comes from a genuine copy of the app. They are not your name or email.

Depending on what you ask for, the request can also contain your meal targets and any notes or photos you choose to submit (for example a food photo you scan, or a recipe you import). If you turn on "Share fasting & health context with AI", recorded activity and fasting context can be included as well.

What each kind of request carries:

• Food-list downloads: only the installation identifier and session credentials. Nothing about you or your meals. You choose each list; none downloads on its own.
• Ingredient pictures: the ingredient's name. A picture request the gateway has already accepted can finish after you switch cloud AI off.
• Kroger (US): your ZIP code (to find nearby stores), the items on your list as search words, and, when you add to your cart, the products you picked and your Kroger sign-in. Our gateway passes these to Kroger and keeps none of them.
• Subscriptions: the gateway checks your purchase with Google Play so paid features unlock. It does not keep the purchase token itself.

Recipe import: a recipe web page is downloaded and read on your phone, straight from the recipe site. The recipe text taken from it, a post you share into the app, or a photo you choose is then sent through our gateway to an AI model to turn it into a recipe. A video import is looked up through our gateway, which fetches the video's details.

Swiggy Instamart (India)

If you choose Swiggy Instamart, the app talks to Swiggy directly from your phone; nothing about it passes through our gateway, which only tells the app that the store is available. You sign in on Swiggy's own page. The app then reads your saved delivery addresses (it drops the phone number Swiggy returns with each one), searches the items on your list at the address you choose, and adds the products you pick to your Instamart cart, keeping what was already in it. Your Swiggy sign-in and everything Swiggy returns stay on your phone, in memory, until you close the app. Swiggy's own privacy policy applies to your Swiggy account.

Services we use, and their role

We name these by role. Naming a service is not an endorsement, and each service also has its own privacy terms.

Ingredient pictures

When an ingredient has no picture, one may be generated from the ingredient's name. Only the name is used, never your notes or health context. The picture is stored for reuse by everyone, so other people's copies of the app can show it too.

What we do not do

NutriOrbit never places a grocery order or takes payment for you, and never compares one store's prices with another's. The app contains no analytics, crash-reporting or advertising code. We do not sell your data, and we do not share it beyond the services above. This website sets no cookies and uses no analytics or trackers.

5. Your two privacy switches

Both are in Settings > Privacy in the app.

1. Cloud AI. You can switch it off entirely. Then AI calls stop. Features that run on your phone and answers already stored there keep working.
2. Share fasting & health context with AI. This is off unless you turn it on. When it is off, your recorded activity and fasting context are left out of AI requests. Your meal targets, and any notes or photos you choose to submit, can still be sent while cloud AI is on.

The same screen has "Clear AI answers", which deletes the AI answers stored on your phone.

6. Permissions and what they are for

Android asks you for the sensitive ones. You can refuse any of them and change your mind later in Android settings.

7. How long data is kept

• On your phone: until you delete it in the app or uninstall the app.
• Installation list: the gateway keeps a record of each installation identifier it has seen, with its plan level. An installation that has not been seen for 60 days is dropped from that list.
• Usage counters: the gateway counts, per installation identifier, how many AI, store, photo and similar requests are made each day and month, so limits can be applied. The counters hold numbers, never what you asked. They have no set expiry today; you can ask us to delete the counters for your installation (section 8).
• Usage statistics: anonymous totals per feature (for example how many requests were refused), with no installation identifier and no content, kept by Cloudflare's analytics service for about three months.
• AI answers kept by the gateway: shared answers about a food are kept for up to 90 days (an answer saying a food is unknown, for 1 hour). Answers that used your fasting or health context are never kept. Your phone keeps AI answers for up to 7 days.
• Ingredient picture requests: a finished request is cleaned up after 1 day and a failed one after 7 days.
• Generated ingredient pictures stored for everyone: a picture is shared catalogue content and has no expiry. It carries only the ingredient's name. We will remove a picture on request.
• Network address: to limit abuse, the gateway uses the network address of a request to limit how many sessions can start from it; it is not stored with your data.
• Data held by AI providers: we use Google's and OpenAI's paid API services, under which requests are not used to train their models. The providers may keep requests for a limited time under their own terms, for example to detect abuse.
• Store data (Kroger, Swiggy Instamart): not kept by us. On your phone it stays in memory only until you close the app. Your cart stays at the store, under its own terms.
• Purchases: handled by Google Play under Google's own terms.

8. Your rights and deleting your data

Because there is no account, most of your data is already in your hands. You can delete AI answers in Settings > Privacy and everything else by uninstalling the app. There is no profile about you on our side: the gateway holds only the usage counters for your anonymous installation identifier described in section 7.

The sources of the food lists, and the licences they are shared under, are on the data sources and credits page.

To ask what we hold about your installation, or to ask us to delete it, email developers@nutriorbit.app. The app does not show your installation identifier, so tell us your phone model and roughly when you used the app, and we will do our best to find it. We reply within 7 days. Depending on where you live, you may have rights to access, correct, delete or object to the use of your data, and to complain to a data protection authority. In India, the Digital Personal Data Protection Act, 2023 applies, and you can complain to the Data Protection Board of India.

9. Children

NutriOrbit is for people aged 18 and over. We do not knowingly collect information from them. If you think a child has used the app, contact us and we will help remove what we can.

10. Changes to this policy

If we change this policy we will update the date at the top of this page. For significant changes we will also say what changed on this page.

11. Contact

Niraj Kumar
Gurugram, Haryana, India
developers@nutriorbit.app

General help is on the support page.