Summary: We collect the health and food data you log, and use it solely to run the app's features for you. We never sell your data. You can export or delete it at any time. This policy complies with the EU General Data Protection Regulation (GDPR) and India's Digital Personal Data Protection Act 2023 (DPDP Act).
The data controller for all personal data processed through the Nutri Macro India mobile application and website (nutrimacro.in) is:
Vinodh Jeganathan
Sole Trader, Registered Business Name: Limerick Family Farm (CRO No. 750471)
Ireland
Email: support@nutrimacro.in
As the operator is established in Ireland (an EU member state), the EU GDPR applies as the primary data protection framework. The India DPDP Act 2023 applies additionally for users who are Indian residents.
We collect the following categories of personal data:
2.1 Account & Identity Data
2.2 Health & Body Data
2.3 Nutrition & Food Logs
2.4 Dietary Preferences & Health Conditions
2.5 Subscription & Transaction Data
2.6 Usage & Technical Data
We use the personal data we collect for the following purposes:
We do not use your data for advertising, do not build advertising profiles, and do not sell or rent your data to any third party.
Under the GDPR, we process personal data under the following legal bases:
Under the India DPDP Act 2023, processing is based on your consent given at account creation. You retain the right to withdraw consent at any time (see Section 8).
We share personal data only with the following sub-processors, under data processing agreements, and solely to the extent necessary to operate the service:
RevenueCat (Revenue Cat, Inc., USA)
Purpose: Subscription management — verifying purchase status, entitlements, and renewal dates. RevenueCat receives your App Store / Play Store receipt token and subscription status. They do not receive your health or nutrition data.
Privacy: revenuecat.com/privacy
Railway (Railway Corp., USA)
Purpose: Backend API hosting and database hosting. All nutrition logs, food data, and user profiles are stored on Railway-hosted servers. Data is encrypted at rest and in transit.
Privacy: railway.app/legal/privacy
Google Gemini AI API (Google LLC, USA)
Purpose: AI features — photo calorie scan, fridge scan, AI meal plan generation, recipe remix. Food photos and pantry data are sent to the Gemini API for real-time processing. Google's API terms prohibit using this data to train Gemini models. Photos are not retained after the API response is returned.
Privacy: policies.google.com/privacy
Apple App Store / Google Play (for iOS and Android users)
Purpose: In-app purchase billing and subscription management. Billing details are handled entirely by Apple or Google under their own terms. We receive only a purchase confirmation token.
Apple Privacy: apple.com/legal/privacy
Google Privacy: policies.google.com/privacy
We do not share your data with any other third parties, advertisers, data brokers, or analytics platforms.
We retain your personal data for the following periods:
If you submit an account deletion request, all personal data (excluding financial records required by law) is deleted within 30 days.
As the data controller is based in Ireland (EU), the primary data infrastructure is EU-based where possible. Some sub-processors (RevenueCat, Railway, Google) are based in the United States. Where data is transferred outside the EU/EEA:
For users in India: transfers of your personal data to Ireland and the USA are made under the terms of this Privacy Policy. You consent to these transfers by creating an account. If you have questions about international transfers, contact us at support@nutrimacro.in.
Under the GDPR (for all users) and India DPDP Act 2023 (for Indian-resident users), you have the following rights:
Right of Access: You can request a copy of all personal data we hold about you. We will provide this within 30 days in a machine-readable format (JSON).
Right to Rectification: You can correct inaccurate data directly in the app (Settings → Profile) or by contacting us.
Right to Erasure ("Right to be Forgotten"): You can delete your account and all associated data via Settings → Account → Delete Account. All personal data is erased within 30 days (except data we are legally required to retain).
Right to Data Portability: You can request an export of your data in JSON format via Settings → Account → Export Data, or by emailing support@nutrimacro.in.
Right to Withdraw Consent: You can withdraw consent to health data processing at any time by deleting your account. Withdrawal does not affect the lawfulness of prior processing.
Right to Restrict Processing: You may ask us to restrict processing in certain circumstances (e.g., while you contest accuracy of data).
Right to Object: You may object to processing based on legitimate interests.
DPDP Act Rights (India): Indian users additionally have the right to nominate a nominee to exercise data rights in the event of death or incapacity, and the right to grieve in case of a breach of the DPDP Act obligations.
To exercise any of these rights, email support@nutrimacro.in with the subject line "Data Rights Request — [Right Type]". We will respond within 30 days. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or the Data Protection Board of India once established.
We implement industry-standard security measures:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware, as required by GDPR Article 33.
Nutri Macro is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at support@nutrimacro.in and we will delete it promptly.
Family plan members under 18 must have their subscription managed by a parent or guardian. The parent or guardian is responsible for ensuring the minor's use of the app is appropriate.
The Nutri Macro mobile app does not use cookies. The nutrimacro.in website uses only essential session cookies required for normal page operation — no advertising or tracking cookies are set.
We do not use Google Analytics, Facebook Pixel, or any third-party web analytics service on this website.
We may update this Privacy Policy from time to time. If we make material changes that affect how we process your personal data, we will notify you via a push notification in the app and by email at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent version.
Continued use of the app after the effective date constitutes acceptance of the updated policy.
For any questions about this Privacy Policy, to exercise your rights, or to raise a concern:
Email: support@nutrimacro.in
Subject line for data requests: "Data Rights Request"
Response time: Within 30 days (typically sooner)
Postal address available on request. We are a small team based in Ireland and prefer email for data requests as it provides a clear written trail for your protection.