Privacy & limits

Food checks with your own AI

When you connect an AI provider (OpenRouter, Google Gemini, OpenAI, Anthropic or Groq), its key is kept only in your browser’s storage. For each check, your photos, description, where you bought the item, your goals and any allergies you enter pass through NutriSathi’s server straight to that provider. NutriSathi doesn’t store the key or the photos. The provider’s own terms and data policy apply to that request. If you use the shared free engine instead, the provider named below handles it. Barcodes and product names may be looked up in Open Food Facts, a public, crowd-sourced database. Results you save to your account include a small thumbnail.

Health profile (Plus)

If you upload a lab report, its photos go once to your chosen AI provider to read the values and are not kept. Only the values you review and confirm are saved, in your private account, readable only by you under database row-level security. When you check food, a short summary of those values is sent with that request to your AI provider so the verdict can reflect it. You can delete your health profile at any time from the Health profile page, and deleting your account removes it. NutriSathi gives general food information, not medical advice. Linking ABHA (Ayushman Bharat Health Account) records is not available yet.

Local estimates

“Local truth” points are estimates from season, typical supply chains for that kind of outlet and public monitoring trends. They are not tests of your item and not statements about any specific store or brand.

Label reader photos

After you accept photo processing, package-label photos are sent to Groq for transcription. Groq does not retain inference inputs and outputs by default. It may temporarily log them for reliability or abuse monitoring for up to 30 days, unless legally required to retain them longer. Photograph only the package label, without faces or personal details.

NutriSathi holds full photos in current-page memory until reset or reopening History. Analysis and a small thumbnail are saved on this device. Clear them from History. Goals stay on this device. Provider retention is governed by Groq’s data policy.

Accounts & cloud saves

Optional accounts use Supabase Auth. When you sign in with Google, Supabase stores your email, name and profile photo for your account. Only scans you explicitly choose to save are stored in your account. Cloud saves contain the analysis, without photos, thumbnails or your goals. Each account can access only its own saved scans.

Availability

Live scanning uses a shared, limited free allowance. The AI provider may also apply its own daily or short-term rate limits. Signing in does not add provider capacity. The synthetic sample works without an AI call and is always identified as a prepared example.

What a label can tell you

This is an early beta. AI transcription can miss or misread text; check findings against the original label. Missing or unclear evidence stays unknown. Calculations use only compatible printed values.

NutriSathi explains packaging information. It cannot establish freshness, contamination, package integrity, authenticity, legal compliance or allergy safety. It does not provide medical or dietary advice.

Operational records

The database holds scan quota reservations with hashed client identifiers, not raw IP addresses or label photos. Operational scan records contain status, model and timing, not label text. Optional first-party counters record only event names and coarse numbers.