Privacy policy

Effective October 30, 2026 (updated for profile and waist data)

Diet Tracker is a small personal nutrition log. This policy explains what it stores about you and what it does with it. In short: your diary is yours, it is used only to run the app, and you can delete it at any time.

What we collect

From Google sign-in: your name, email address and Google account ID. We never see your Google password and ask for no other Google data.
What you enter: foods, logged meals and portions, weigh-ins, body fat, waist measurements, notes, your plan, targets and goals, and, if you choose to add them, your sex, birth date and height. These profile details are optional and are used only to suggest goals and show body-composition measures to you.
Cookies: a sign-in cookie that keeps you signed in, and a cookie holding your time zone so "today" matches your day. There are no advertising or analytics cookies.
Server logs: the hosting platform keeps routine request logs (such as IP address and page requested) for a limited time, for operating and securing the service.

Using it without an account

If you choose Use Locally Only, there is no account: your diary is stored only in your browser on your device and is never sent to our server. Food lookups still go through our server to USDA and Open Food Facts, carrying only the search words or barcode. Deleting your data in Settings, or clearing this site's data in your browser, erases it.

Offline copies

When you're signed in, the app keeps a copy of your diary in your browser so it works without a connection, and sends changes made offline when you reconnect. Signing out clears it.

How it is used

Only to provide the app to you: showing your diary, totals and history. We do not sell your data, show ads, or share your data with anyone for their own use.

What is shared

Your diary, weigh-ins, notes, targets and personal food list are private to your account.
When you add a food from the USDA database, the official USDA record for it is added to a shared list that every user can search. Only USDA's own published data is shared, never your name, your edits, or the fact that you added it.
Food searches are sent from our server to USDA FoodData Central and Open Food Facts. They receive the search words or barcode, not who searched.

Service providers

Google provides sign-in. The app and its database are hosted on Railway. These providers process data only as needed to provide their services.

Keeping and deleting your data

Your data is kept until you delete it. Under Settings you can export your foods and history as JSON at any time, and Delete my account permanently removes your account and everything in it right away. Copies in routine database backups, if any, age out on their normal schedule.

Security

Connections are encrypted (HTTPS) and each account can reach only its own data. No service is perfectly secure, so please don't store anything you couldn't afford to have disclosed.

Children

Diet Tracker is not intended for children under 13.

Changes

If this policy changes, the effective date above will change with it.

Contact

Questions or requests: mckoss@gmail.com.