Privacy Policy
This Privacy Policy applies to the NutriLift mobile application operated by NeuralPath Technologies. NutriLift ("we", "us", "the app") is a nutrition app offered to members of partner gyms in India. This policy explains what personal data we collect, why, how we store it, and the rights you have over it. By using NutriLift you consent to the practices described here.
1. Who we are
NutriLift is operated by Aakash Navnath Kotkar (trading as NeuralPath Technologies), Maharashtra, India. For any privacy request, contact us at contact@neuralpath.app. NutriLift is intended for users aged 18 and over.
2. What data we collect
| Data | Why |
|---|---|
| Email, name and profile photo (via Google Sign-In or Sign in with Apple) | To create and secure your account. We receive these from your Google or Apple account when you sign in; we never see your password. |
| Gym access code | To unlock the app for members of a partner gym. |
| Profile & health/fitness data — age, sex, height, weight, activity level, goal, diet preference, allergies, food dislikes | To calculate your calorie and nutrient targets and to generate meal plans, entirely on your device. |
| Food logs, workout activity & meal plans | To show your daily progress and let your data follow you to a new device. |
| Crash & diagnostic reports | To detect and fix bugs (via Sentry). These do not include your food or health data. |
We do not collect your contacts, precise location, photos, or advertising identifiers. We do not track you across other apps or websites.
3. How we use your data
- All nutrition calculations (targets, meal plans, daily totals) run on your device. We do not perform server-side processing of your health data.
- Your account and saved data are stored so that re-installing or switching phones restores them.
- We use your data only for the purposes stated above. We do not use it for any other purpose without your consent.
4. How and where we store it
Your data is stored on Supabase (a managed PostgreSQL backend) in a region close to India (Mumbai / Singapore). Access is protected by row-level security so that each user can only read and write their own data. Only an app-level public key ships in the app; sensitive keys never do.
5. International data transfer
Your information may be processed and stored in countries other than the country in which you reside (for example, our infrastructure providers operate in the Mumbai and Singapore regions). We take reasonable steps to ensure appropriate safeguards are in place for such processing.
6. Security
We implement reasonable technical and organizational measures to protect your personal data, including row-level security and encryption in transit. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.
If a material security incident affecting personal data occurs, we will take the steps required under applicable law, including notifying affected users where legally required.
7. Sharing
We do not sell your data and we do not share it with third parties for advertising. Data is processed only by the infrastructure providers that run the service (Google and Apple for sign-in, Supabase for storage, Sentry for crash reporting). Your gym does not receive your personal health data, logs, or plans.
8. Your rights (India DPDP Act, 2023)
As a data principal you have the right to access, correct, and erase your personal data:
- Access / correction: view and edit your profile any time in Settings → Profile & goals.
- Erasure: use Settings → Delete my account. We begin deletion immediately upon request. Your data is removed from active systems promptly and from any backup systems according to our backup retention schedule. Full steps are on our account deletion page.
You can also email contact@neuralpath.app to exercise any of these rights.
9. Data retention and deletion
We keep your data while your account is active. When you delete your account, we begin deletion immediately: your data is removed from active systems promptly and from any routine backups according to our backup retention schedule.
10. Children
NutriLift is not directed at, and not intended for, anyone under 18.
11. Changes to this policy
We may update this policy. Material changes will be reflected here with a new "last updated" date.
12. Contact
NutriLift is operated by Aakash Navnath Kotkar (trading as NeuralPath Technologies), Maharashtra, India. Questions or requests: contact@neuralpath.app.