Back to Nutri-Trust

Privacy Policy

Last updated 11 August 2026

Nutri-Trust is a free web application built as an undergraduate minor project at Manipal Institute of Technology. It is not a commercial product and there is no company behind it. It is operated by the student project team named at the end of this page. This policy describes what the app actually does with your information, in plain language.

What is collected

Account details. Your email address, a password, the name you enter, and the dietary preference you choose (vegetarian, eggtarian or non-vegetarian). Passwords are handled by our authentication provider and stored hashed; the project team never sees them.

Your pantry. The names of items you add, their purchase and expiry dates, and where available the ingredient text and nutrition score returned for a scanned product. Also your shopping list, your scan history, and a record of whether each item was used or thrown away, which is what the impact dashboard is calculated from.

Household membership. If you create or join a household, the household name, its invite code, and which accounts belong to it. Members of the same household can see the shared pantry.

Images you upload. Photos of receipts, nutrition labels and expiry dates. These are sent for automated text extraction and are not retained by us after the text is extracted.

On your device.Your light or dark theme choice, and markers recording which expiry reminders have already been shown, both stored in your browser's local storage. These never leave your device.

There is no advertising, no analytics or tracking script, and no third-party cookie on this site.

Why it is collected

Every item above exists to make one of the app's features work: to sign you in, to show you what is in your pantry and when it expires, to warn you before something spoils, to generate a recipe from what you already have, and to share a pantry with your household. None of it is collected for any other purpose, and none of it is sold or used for advertising.

Who else processes it

The app depends on the following services. Each has its own privacy policy, and your data is subject to it while that service is handling it.

  • Supabase — stores your account and all pantry data, and handles sign-in.
  • Vercel — hosts the application and keeps standard server request logs.
  • Google (Gemini API)— receives the images you upload for text extraction, and the names of your pantry items when you request a recipe or ask the in-app assistant a question. It does not receive your email or name. This app uses Gemini's free tier, under whose terms Google may use what is sent to improve its products. Please don't scan anything you would not want shared, such as a receipt showing your address or card details.
  • Open Food Facts and UPCitemdb — receive the barcode number you scan, in order to look the product up. They do not receive anything identifying you.

If you explicitly choose to contribute a corrected product back to Open Food Facts, that product information becomes part of their public open database. This is off by default and happens only when you ask for it.

How long it is kept

Pantry items, shopping list entries and scan history are kept until you delete them or delete your account. Uploaded images are not stored after text extraction. Because this is a student project running on free hosting tiers, the service may be paused or withdrawn after the academic project concludes; if that happens, the stored data is deleted with it.

Your rights

India's Digital Personal Data Protection Act, 2023 gives you the right to ask what personal data is held about you, to have it corrected, and to have it erased. You can delete individual pantry items in the app at any time. For anything else — a copy of your data, a correction, or full deletion of your account — email the address below and we will act on it.

If you are outside India, the same requests are honoured regardless of where you are.

Security, honestly stated

Every table is protected by row-level security, so one account cannot read another account's data, and traffic is encrypted in transit. That said, this is a student project, not an audited commercial service, and it should be treated as such.

Please do not enter sensitive health information. The app asks only for a dietary preference. It has no field for medical conditions, and none should be typed into item names or the assistant.

Children

The app is not directed at children under 18 and we do not knowingly collect their personal data. If you believe a child has created an account, email us and it will be removed.

Changes to this policy

If this policy changes, the date at the top of the page changes with it. The current version is always the one published here.

Contact

For any question about this policy, or to request access, correction or deletion of your data, contact the project team:

nirav.mitmpl2023@learner.manipal.edu

Nutri-Trust student project team — Nirav P Shetty, Prisha Malhotra, Sumit Kumar Chourasia and Abhyuday Verma. Department of Humanities and Management, Manipal Institute of Technology, Manipal, Karnataka 576104, India.