Privacy Policy

We collect what the app needs to count your calories, we send your food photos to Google's AI to identify them, we use those photos to make our own AI better at Indian food unless you switch that off in Settings, we never sell anything, and you can delete it all whenever you want.

Last updated 4 September 2026

Who this is about

SnapVitals is operated by Samaritan Mohite, an individual based in Maharashtra, India. There is no separately registered company. Under the Digital Personal Data Protection Act, 2023, that individual is the Data Fiduciary for your data, the person responsible for it, and the person you complain to.

What we collect

To create your account: your email address and your name. Your password is never stored, only a one-way cryptographic hash of it, which cannot be reversed back into your password.

To calculate your targets: age, gender, height, weight, activity level and your goal. Under the DPDP Act this is health data, which is treated as sensitive. We ask for it because calorie targets cannot be calculated without it, and for nothing else.

As you use the app: photographs of your food, descriptions you type, the meals you log, barcodes you scan, and your corrections when our AI gets something wrong.

Automatically: a session token stored in your browser to keep you signed in, and ordinary server logs. We do not use advertising trackers or third-party analytics.

Your food photos leave our servers

Photographs you upload are sent to Google’s Gemini API to be analysed. This is how the app identifies your food; it cannot work otherwise. The image and any dish description you type are sent. Your name, email and health profile are not.

Google processes this outside India, under its own terms. If you would rather no photograph of yours left this country, log your meals by typing the dish name instead, that path never calls the AI for dishes we already know.

Your photographs train our food recognition

We use the meal photographs you upload, and the corrections you make to them, to improve SnapVitals’ own food recognition. This is on by default, and you can switch it off in Settings. Every general-purpose model on the market is poor at Indian food. The only way to make one good at it is to learn from real plates, photographed in real kitchens, and corrected by the people who cooked them.

In practice: a photograph you upload, the dish name you confirmed and any portion you adjusted may be included in the datasets we use to train or refine our own model. We do not sell your photographs, and we do not hand them to anyone else to train theirs.

Switching it off takes one tap in Settings, under “Your data”, and takes effect immediately: nothing new of yours is used from that moment. If you would rather ask us to do it, write to hello@snapvitals.app and we will switch it off for you. Deleting your account does the same and also removes your photographs from our storage.

One limit we will not pretend about: a model that has already learned from a picture cannot have that picture taken back out of it. What ends is any further use.

Switching it off costs you nothing. Your photos are still analysed, your calories still counted, and the app behaves in exactly the same way.

Who else sees your data

We do not sell your data, rent it, or share it for advertising. It reaches these companies only because the app cannot run without them:

  • Google (Gemini API)
    Analyses food photographs and nutrition labels to identify dishes and read printed values.
    Shared: The photograph you upload, and any dish description you type. Not your name, email or health profile. Processed on Google infrastructure outside India.
  • DigitalOcean
    Hosts the application, its database, and uploaded images.
    Shared: All stored account, meal and image data. Servers in Bangalore and Singapore.
  • SendGrid (Twilio)
    Sends account emails, address confirmation and password resets.
    Shared: Your email address only. Processed outside India.
  • Open Food Facts
    Looks up packaged products by barcode. A community-run food database.
    Shared: The barcode you scanned. Nothing identifying you is sent. Operated from France as a non-profit.

We would also disclose data if compelled by law, a court order or a binding request from an authority. If that happens and we are permitted to tell you, we will.

How long we keep it

While your account is open, we keep your data so the app can show you your history. When you delete your account, everything personal to you (profile, meals, photographs, corrections) is deleted within 30 days.

One exception, stated plainly: when you correct an AI mistake, that correction improves the app for everyone. We may keep the corrected nutrition figures (dish names, calories, macros) in a form that is no longer linked to you or your account, and cannot be traced back to you. Those figures are numbers about food, not about you, and they survive the deletion of your account.

Your photographs do not. They are deleted with your account, as described above, and are excluded from any training we do afterwards whether or not you had switched training on.

What you can ask us to do

Under the DPDP Act you may ask us to:

  • Tell you what data of yours we hold, and who we shared it with
  • Correct anything that is wrong
  • Delete your account and everything in it
  • Withdraw consent you have previously given

Email hello@snapvitals.app and we will respond within 30 days. Some of this you can already do yourself from Settings, which is faster.

Withdrawing consent means the app stops working, it cannot count calories without your height and weight, so in practice that request is an account deletion, and we will treat it as one.

Children

SnapVitals is for adults. You must be 18 or older to use it. The DPDP Act requires verified parental consent before processing a child’s data, and we are not set up to obtain that, so we do not knowingly accept anyone younger. If we learn that an account belongs to a minor, we delete it.

If something goes wrong

If a breach affects your data, we will notify you and the Data Protection Board of India as the DPDP Act requires. Our security practices, and how to report a vulnerability, are described on the security page.

Grievances

Grievance Officer: Samaritan Mohite
Email: hello@snapvitals.app

We aim to resolve complaints within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

Changes

If we change how we handle your data, we will update this page and change the date at the top. For anything significant, a new company receiving your data, a new purpose, we will tell you in the app or by email rather than relying on you to check.