Privacy Policy
Last updated August 2026
Nutrimenters handles health information. This policy explains what we collect, why, who can see it, and the control you have over it.
1. Information we collect
Account data — name, mobile number, email address and password (stored only as a bcrypt hash).
Health data — date of birth, gender, height, weight, measurements, activity level, food preferences, allergies and intolerances, medical conditions, medications, and the answers you give in the nutrition assessment.
Progress data — weight and measurement entries, steps, water, sleep, exercise, notes and any progress photos you choose to upload.
Transaction data — plan purchased, amount, payment method type, gateway reference and invoice. We never receive or store your card number, CVV, UPI PIN or net-banking credentials.
Technical data — IP address, device/browser type and access timestamps, used for security and audit.
2. Why we process it
To assess your nutritional requirements, allow a qualified dietitian to design and revise your plan, track your progress, deliver consultations, process payments, issue invoices, and send service notifications. We do not sell your data, and we do not use your health data for advertising.
3. Who can see your health data
Only you, the dietitian assigned to you, and the super admin. Our sales and support staff can see your contact details and membership status but are technically blocked from clinical records. Every administrative access or change is recorded in an audit log with the staff member's identity, IP address and timestamp.
4. Consent
We ask for explicit, separate consent for processing health data at registration, and record the version and timestamp of the consent you gave. You may withdraw consent at any time by deleting your account, which stops all further processing.
5. Security
Passwords are hashed with bcrypt. Sessions use signed, httpOnly, sameSite cookies and can be revoked server-side. OTPs are hashed, expire in ten minutes and lock after five failed attempts. Access is enforced at route, API and database-query level. Payments run through a PCI-DSS compliant gateway.
6. Data retention and deletion
You can delete your account from Profile → Privacy. Clinical records — assessment, progress entries and diet plans — are removed immediately and your profile is anonymised. Financial records are retained where Indian tax law requires it, without clinical detail attached.
7. Your rights
You may access, correct, export or delete your personal data, and object to specific processing. Write to info@nutrimenters.com and we will respond within 30 days.
8. Clinical limitation
Nutrimenters is a nutrition counselling service. Calorie, macronutrient and BMI figures generated by the application are estimates. They are not a diagnosis, and they do not replace advice from your physician.
9. Contact
Nutrimenters · L-34, Gulshan Ikebana, Sector 143, Noida 201305 · info@nutrimenters.com · +919599222976