Privacy Policy

What we collect

When you register, we store your email address and a securely hashed password via Supabase Auth. If you sign in with Google instead, we receive your email address from Google and never see a password at all.

When you use the service, we store:

• Meal logs — description, meal type, calories, macros, fiber, total sugar, grams of alcohol, milligrams of caffeine, notes, and timestamps. Food photos are interpreted by your AI assistant and are never uploaded to or stored by us.
• Water logs — amount, notes, and timestamps.
• Body weight logs — weight, notes, and timestamps. This is health data, and it is treated exactly like the rest of your logs.
• Goals — your daily calorie, protein, carb, fat, fiber, sugar, alcohol, caffeine, and water targets, and your target weight.
• Profile settings — your IANA timezone, preferred weight unit, whether alcohol tracking is switched on and which standard drink it is shown in, and whether in-chat widgets are enabled.
• Tool-usage telemetry — for each MCP tool call, which tool ran, whether it succeeded, how long it took, a coarse error category when it failed, the span in days of any date range you asked for, and the MCP session id. It is linked to your account id. It never includes the content of your logs.

Alcohol is health data too, and of a more sensitive kind than a calorie count, so it works differently from everything above. Alcohol tracking is off by default, and we only ever record alcohol when it comes from you — a drink you log, or a column in a file you import. Nothing infers it on your behalf. Switching the setting off does two things: the bulk importer stops reading the alcohol column out of files you upload, and everything else stops showing alcohol in the meals, goals, progress and widgets you see. It is not a delete switch. Alcohol you logged directly is still recorded whether the setting is on or off, anything already stored stays in the database, and all of it still appears in your CSV export. To actually remove an alcohol figure, delete the meal it belongs to, or delete your account.

We also keep the OAuth access and refresh tokens and authorization codes that let your AI assistant stay connected to your account.

How we use it

Your meal, water, weight, and goal data is used solely to provide the nutrition tracking service. We never sell it, never share it with third parties, and never use it for advertising or feed it into any ad or profiling system.

Two kinds of analytics do exist, and neither touches the content of your logs:

• Website analytics. These pages load Google Analytics, which gives us aggregate traffic statistics — page views, referrers, rough geography, device type. It runs on every page, including this one, and there is currently no consent banner and no IP anonymization, so Google receives your IP address as part of the standard measurement. If you would rather not be measured, a tracker blocker or your browser's “do not track”-style protections will stop it.
• Server telemetry. Every MCP tool call writes one row of usage telemetry — which tool ran, whether it succeeded, how long it took — linked to your account id but not to what you logged. We use it to find slow and broken tools. It is not shared with anyone, and it is deleted along with everything else when you delete your account.

Because the site loads fonts and icons from Google Fonts and jsDelivr, and the home page fetches the project's star count from the GitHub API, visiting these pages exposes your IP address to those providers.

Where it's stored

All data is stored in Supabase (PostgreSQL). Authentication is handled by Supabase Auth. The server is hosted on DigitalOcean.

Data deletion

You can delete your account and all associated data at any time by asking your AI assistant to delete your account while connected to the Nutrition MCP server. This action is immediate and irreversible. It removes your meals, water and weight logs, goals, profile settings, any stored CSV export, your tool-usage telemetry, your access tokens, and the account itself. That includes every alcohol figure you ever logged, whether or not alcohol tracking was switched on.

Terms of Service

Use of the service is also governed by our Terms of Service, which cover acceptable use, the fact that nothing here is medical advice, and the absence of any warranty — the service is provided as-is, free of charge, with no guarantees of availability, accuracy, or fitness for any purpose.