Privacy & security

Your data is yours.

A plain-language summary of how Nutrition OS by Orvantia, built by Orvantia, handles your information. Last updated 25 September 2026 · app version 1.2.0.

What we store

• Your account: the name, email address, profile photo and account ID that Google shares when you sign in. We never see or store a password.
• What you log: your body details and goals (age, height, weight, activity level), foods and meals, workouts, weight, water, steps, sleep, mood, fasting, targets, streaks, and any templates or programs you create.
• The waitlist: if you ask for early access, your name, email address and the optional note you write. We use them only to email you about your spot, and remove them when you ask (reply to any email from us).
• Basic app activity: counts such as “food added” that help the team see whether features work. They contain no food names, notes or other free text.
• Technical records: errors (no account details, no query strings), uptime checks, and temporary rate-limit counters that use a one-way hash of your IP address, never the address itself.

What we never do

• Sell your data, or share it for advertising.
• Run third-party advertising or tracking scripts.
• Show your data to other users. Only you can see your logs — unless you create a share link (below).

Who handles it

• Google — sign-in only.
• Gmail — sends the confirmation and invitation emails to people on the waitlist. It receives only their address and the message.
• MongoDB Atlas (hosted on AWS, Mumbai) — stores your data, encrypted in transit, and at rest by the provider.
• Vercel — runs the app.
• Open Food Facts — only when you scan a barcode: the barcode number is looked up. Your camera image never leaves your device.
• Google Gemini — only if you turn on “Snap your plate” and take a meal photo: that one photo is sent to Google to be analysed and is not kept by us. See below.

Meal photos (optional AI feature — beta)

• Off until you agree. You are asked once, on the first photo, and can withdraw at any time in Profile.
• Only adults (18+) can use it, because Google's Gemini API is not for under-18s.
• The photo is shrunk on your phone first; its location and camera details are removed. We analyse it in memory and never store it.
• Google's terms: on Google's free service, submitted content may be used to improve Google products and may be read by human reviewers. Don't photograph faces, documents or anything private.
• Amounts estimated from a photo are rough. You always check and edit them before anything is logged.

Sharing with a coach or friend

Sharing is off until you create a link. Each link is private and read-only, shows only the parts you choose (nutrition totals, training, body, wellbeing), never your email, and can expire. Anyone who has the link can open it without signing in, so send it only to people you trust. You can turn it off at any moment and it stops working immediately.

Your controls

• Export: Profile → Export my data (everything as JSON) or your food log as CSV.
• Delete: Profile → Delete my account. You confirm by typing your email, and everything you logged is erased immediately. Backups made by the database provider age out on the provider's schedule.
• Correct: edit or remove any entry, and change your profile and targets at any time.

How it's protected

• Every request is checked on the server against your signed-in account; one person can never read another's records, and this is covered by automated tests.
• Sessions are encrypted, HTTP-only cookies sent only over HTTPS. Sign-in uses Google (OAuth with PKCE).
• Strict browser protections: a Content-Security-Policy that blocks injected scripts, no framing, and HTTPS enforced.
• Rate limits on sign-in, exports, reports and every open endpoint; strict validation of all input; database queries defended against injection.
• Secrets live only in the server environment — never in the app you download or in the source code.
• Errors and downtime are monitored so problems are found and fixed quickly.

No system is perfectly secure, and we don't claim ours is — we build carefully, test the parts that protect your data, and fix problems fast. If you think you've found a security issue, please tell us through Orvantia (see also /.well-known/security.txt) before making it public.

Health information

Nutrition OS gives estimates from what you log. It is not medical advice. Talk to a doctor before big changes to your diet or training — especially if you are pregnant, have a medical condition, or are under 18 (the app is for people 13 and over).

Cookies

Only two: the sign-in session cookie and a light/dark preference. No tracking or advertising cookies.

Changes and contact

If this page changes in a way that matters, the date above changes and the app shows it. Questions, requests or concerns: reach Orvantia at orvantia.in.