Legal
Privacy Policy
Last updated: 12 September 2026
Rasa Fit (“we”, “our”, or “us”) is a nutrition tracking app built for people who want to eat better. This policy explains what data we collect when you use Rasa Fit, why we collect it, and how it is handled. We keep it short and plain-language intentionally.
If you have questions, email us at hello@rasafit.app.
Data we collect
Account information
Your name and email address, collected when you create an account or sign in with Google. Used to identify your account and personalise the app experience.
Health & biometric data
Height, weight, date of birth, sex, and activity level — entered during onboarding and editable at any time. Used to compute your personalised calorie, protein, and fibre targets. These measurements themselves are not sent anywhere outside Rasa Fit, but the targets calculated from them are included when we generate your daily coaching note — see “Who else sees your data” below.
Food & nutrition logs
Everything you log — meal descriptions, food items, quantities, and macro breakdowns. Stored to power your history, trends, and daily coaching notes. Meal descriptions are sent to an external AI service to be turned into food items with nutrition figures, and food names are sent to a nutrition database for lookup — see “Who else sees your data” below.
Voice audio not retained
When you use voice logging, your recording is sent to our server and on to Groq, an external transcription service, to be turned into text. It is discarded immediately afterwards. We do not store recordings, and audio is never used for anything beyond transcription.
App usage data
Basic interaction events (screens visited, features used) collected via Firebase Analytics. Used to understand how the app is being used so we can improve it. No personally identifiable information is attached to these events.
Sign-up context IP kept 90 days
When you create an account we record the IP address the request came from, your browser or app identifier, your language setting, and your device and operating system details — make, model, Android version, timezone and screen size. Used to tell genuine sign-ups from abuse, and to know which devices to support. Your full IP address is kept for 90 days and is then permanently blunted to its network prefix, so it can no longer identify a single connection.
Install and referral information
Which link, campaign or advertisement led you to install the app, taken from the Google Play install referrer, along with an identifier created the first time the app opens and whether the sign-in screen was reached. Used to understand how many people who install the app go on to create an account. If you never create an account, this record is deleted after 180 days.
How we use your data
- —To provide the app's core functionality — food logging, macro tracking, history, and trends.
- —To compute personalised nutrition targets from your biometrics.
- —To generate daily AI coaching notes based on what you logged.
- —To send optional reminders and nudges at times you configure.
- —To authenticate your account securely via Firebase.
- —To improve the app based on aggregated, anonymised usage patterns.
Third-party services
We use a small number of third-party services to run the app. We do not sell your data to any party, ever. This is the complete list, and it includes the services that see what you write and say: turning “two idlis and sambar” into nutrition figures, and turning a voice note into text, both happen outside Rasa Fit.
| Service | Purpose | Data sent |
|---|---|---|
| Firebase (Google) | Sign-in and analytics | Email address, sign-in identity, usage events |
| Google Sign-In | Signing in with Google | Your Google identity |
| Google Play | Install attribution | The install referrer — which link or campaign led to your install |
| Anthropic | Turning meals into food items, and writing your daily note | The meal descriptions you type; your food items, daily totals and calculated targets |
| Groq | Voice transcription | Your voice recording (not retained by us; see below) |
| Nutritionix | Nutrition lookup | The names of foods you look up |
| Vercel | Website hosting | None |
Data retention
Your account data and food logs are retained for as long as your account is active. If you delete your account, everything is removed immediately — there is no waiting period. You can do this yourself from Settings in the app, or ask us.
Two things have their own clocks, and both run whether or not you delete anything: your full IP address is blunted to its network prefix after 90 days, and an install record that never became an account is deleted after 180 days.
One honest caveat: we keep encrypted nightly backups for 30 days before they expire. Deleting your account removes your data from the live service straight away, but it remains in those backups until they roll off on that schedule.
Voice audio is never retained beyond the duration of a transcription request (typically under 5 seconds).
Your rights
- —Access the data we hold about you.
- —Correct inaccurate data at any time from within the app (Edit Profile).
- —Delete your account and all associated data.
- —Export your food log history (contact us to request).
- —Withdraw consent — you can stop using the app and request deletion at any time.
To exercise any of these rights, email hello@rasafit.app. We will respond within 7 days.
Security
Your health data is sensitive personal information under Indian law, and we treat it that way. This is what we actually do — not a list of intentions.
- —Everything travels over HTTPS. Nothing about your account is sent unencrypted.
- —Your data sits on encrypted disks, and our encrypted backups are kept for 30 days and then deleted.
- —We never see or store your password — you sign in with Google, and your credentials stay with Google.
- —Every request to our servers has to prove who you are before it reaches your data.
- —Our own credentials and keys are encrypted at rest, and only the server can decrypt them.
- —Our servers run in Mumbai, and your data stays in India.
- —System logs are kept for 180 days and no longer, on a clock synchronised to India's national time servers.
- —Personal data is deleted on a schedule, automatically — your IP address is blunted after 90 days, and records of installs that never became accounts are removed after 180.
Who at Rasa Fit can see your dataevery access recorded
A small number of people who run Rasa Fit can look up an individual account — including your logs, your measurements and your sign-up details — to investigate a problem or answer a support request. We would rather tell you that than let this page imply otherwise. Every such lookup is recorded: who looked, whose account, and when. Those records are kept for 180 days and cannot be erased by the person who made them.
Two things we do not claim: we hold no security certification, and we have not had an external penetration test. What we have is written down and reviewed rather than assumed.
Raising a concern
If you are unhappy with how your data has been handled, write to our Grievance Officer:
We will acknowledge your complaint and respond within 30 days. If we do not resolve it to your satisfaction, you may escalate it to the Data Protection Board of India.
Children's privacy
Rasa Fit is not directed at children under 18. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it promptly.
Changes to this policy
If we make material changes to this policy, we will notify you via the app or by email before the changes take effect. The “Last updated” date at the top of this page always reflects the current version.
Contact
Questions, concerns, or data requests — email us at hello@rasafit.app. We read every message.