Privacy policy

Updated October 29, 2026 · Publisher: Viraank Gaur

Contact help@serveforward.us for privacy questions or deletion requests. This policy covers NutriGlimpse and its supporting services.

Your saved information

My Needs stores the preferences, health concerns and optional measurements you choose to enter in encrypted app storage. Confirmed lipid results can also be saved on your device. Importing a report uses local extraction; raw report photos/PDFs and identifying report text are not sent to AI as reports. If you separately choose report analysis, supported lipid measurements and the printed date are sent through our server to OpenAI. Review extracted values before confirming them.

Product photos and Shelf Camera

After the relevant consent, product photos or numbered shelf-image grids are sent through our server to Google Gemini and OpenAI. These providers identify foods, generate nutrition guidance and suggest alternatives; their search tools can retrieve public food and retailer information. The phone detects shelf package boundaries and makes the crops/grids before sending them.

Health sharing is optional. If enabled, requests can include available age, gender, health concerns, dietary and food preferences, pregnancy context, height/weight and confirmed, date-resolved lipid results. Declining excludes that optional context from the scan requests. Your name, raw reports and report identifiers are excluded. Exact GPS coordinates are not included in model prompts. We instruct models not to put private shopper details into web-search queries, but generated answers may repeat information you shared.

Location, food sources and news

The app requests location only while you use it. You may deny it, turn automatic location off or choose a store manually. Exact GPS is used on the phone to find a likely store. Selected public-store details, or coordinates rounded to two decimal places when no store is selected, can reach our backend for nearby suggestions. Store names and nearby town context can reach the AI providers. Retailer/image lookups can send product identity and store or approximate-area context to SerpApi and Serper. A selected store can reveal where you are shopping.

USDA FoodData Central and Open Food Facts checks use product information, not your health profile. For food news, selected topics and broad audience context can reach our server; exact age, gender, measurements, lab results, location and photos are excluded. News interests are used for that request and are not forwarded to publishers or AI. Opening an external story, retailer, image or map link shares normal connection information with the receiving service.

Retention and service providers

Our application backend does not save submitted product/shelf images, profiles, raw report files or rendered prompts in its logs. Answers and recent shelf-batch results may remain temporarily in server memory to complete requests and prevent duplicate charges. Nearby-search results expire after five minutes. Shelf deduplication results have a 15-minute logical expiry and are removed on later requests; this is not a guarantee of immediate physical memory erasure.

The production backend does not create beta answer or processing-decision journals. Encrypted records from earlier consented beta testing continue to expire within seven days of their recorded time; disabling new journals does not delete records held by AI providers.

Google and OpenAI request/response logging is enabled for our API projects. Optional sharing for provider training or improvement is disabled. This does not mean zero retention. Our Google project logs are configured to expire after seven days. A separate development dataset contains only fictional/public test data; it is not populated from real shopper requests and is retained separately until removed, outside the seven-day project-log schedule. Google describes 30-day search-grounding retention and separate abuse-monitoring retention of up to 55 days. OpenAI describes standard abuse-monitoring retention of up to 30 days even when response storage is disabled. Exceptions may apply under provider security or legal policies. We do not create training datasets from app scans.

See Google project logging, Google API and grounding terms, Google abuse monitoring and OpenAI data controls. Hosting and network providers, including Cloudflare, may process connection metadata such as IP addresses for delivery and security under their own retention rules. Provider-held records cannot always be deleted by resetting the app.

Your choices and deletion

In Privacy & storage you can change scan-sharing choices, clear saved measurements and reset local app data. Leaving or backgrounding relevant scan screens cancels pending work and clears temporary photos on the phone; requests already received by providers may still be retained under their policies. Backups you export are encrypted files under your control and must be deleted separately. Reset does not withdraw copies you already shared or erase existing provider records.

Email help@serveforward.us for requests concerning records outside your phone. Provide the approximate date/time and app version rather than medical details. We will identify any records we can reasonably associate with your request, delete eligible records we control and explain provider or legal limits. Because there is no consumer account, we may not be able to identify a particular provider record from an email address alone.

Support, advertising and children

If you email support, we receive your address and the information you choose to send. We use it to respond and retain it as needed to handle the request and applicable obligations. The app has no advertising or cross-app advertising tracking SDK, and we do not sell personal information. NutriGlimpse is intended for adults 21 and older and is not directed to children.

Changes

We will update this page when our practices change. Material changes to optional sharing are also presented in the app where appropriate.