Privacy Policy
Last Updated: November 2025
1. Introduction
NutriAgent Bot ("we," "us," or "our") is a personal project operated by an individual developer (the "Operator"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Telegram bot service (the "Service").
By using NutriAgent Bot, you consent to the data practices described in this Privacy Policy. Please read this policy carefully to understand our practices regarding your personal information.
2. Information We Collect
2.1 Information You Provide
When you use NutriAgent Bot, we collect the following types of information:
- Telegram Messages: Text messages you send to the bot describing your meals, snacks, or nutrition-related questions
- Images: Photos of meals you send to the bot for image recognition and nutritional analysis
- Telegram User Information: Your Telegram user ID, username (if available), and basic profile information necessary to identify your account
- Google Account Information: When you connect your Google account via OAuth, we receive:
- Your Google account email address
- Basic profile information (name, if available)
- Access tokens to create and manage Google Sheets in your Google Drive
2.2 Automatically Collected Information
We may automatically collect certain information when you use the Service:
- Usage data and interaction logs (e.g., timestamps, message types)
- Technical information about your device and Telegram client
- Error logs and diagnostic information for troubleshooting
2.3 Information Stored in Google Sheets
All nutrition data derived from your messages and images is stored in Google Sheets that we create in your Google Drive. This data includes:
- Meal descriptions
- Estimated nutritional information (calories, macronutrients, etc.)
- Timestamps of meals
- Any additional information you provide through conversation
Important: This data is stored in your own Google Sheets that you own and control. We access this data only to write new entries when you interact with the bot.
3. How We Use Your Information
We use the information we collect for the following purposes:
3.1 Service Provision
- To process your messages and images and provide nutritional information
- To create and update your Google Sheets spreadsheet with nutrition data
- To maintain and improve the Service's functionality
- To respond to your questions and provide customer support
3.2 AI Processing
Your messages and images are processed using AI and machine learning technologies to:
- Recognize ingredients from images
- Extract nutritional information from text descriptions
- Estimate calorie and macronutrient content
- Understand natural language queries about nutrition
This processing may involve sending your messages and images to third-party AI service providers (such as OpenAI, Google AI, or similar services) for analysis. These providers are bound by their own privacy policies and terms of service.
We do not use your content to train our own machine learning models. Where available, we configure third-party providers so that content processed via their APIs is not used to train their models beyond what is necessary to provide the Service.
3.3 Service Improvement
- To analyze usage patterns and improve the Service's accuracy
- To fix bugs and technical issues
- To develop new features and functionality
3.4 Communication
- To send you important updates about the Service
- To respond to your inquiries and provide support
4. Google OAuth Integration
4.1 OAuth Scopes
When you connect your Google account, NutriAgent Bot requests the following OAuth 2.0 scopes:
- https://www.googleapis.com/auth/spreadsheets - To create and update Google Sheets spreadsheets
- https://www.googleapis.com/auth/drive.file - To create files in your Google Drive
4.2 What We Access
We only access:
- The Google Sheets spreadsheets that we create for you in your Google Drive
- Basic profile information (email, name) necessary to identify your account
4.3 What We Do NOT Access
We do NOT access, read, or modify:
- Any other files or folders in your Google Drive
- Your Gmail messages
- Your Google Calendar
- Any other Google services or data
4.4 Data Storage Location
All nutrition data is stored in Google Sheets that are created in your own Google Drive. This means:
- You own and control the data
- The data is stored on Google's servers, subject to Google's terms and privacy policies
- You can access, edit, or delete the data at any time
- You can revoke our access at any time through your Google account settings
5. Data Sharing and Disclosure
5.1 Third-Party Service Providers
We may share your information with third-party service providers who perform services on our behalf:
- AI Service Providers: We may send your messages and images to AI service providers (such as OpenAI, Google AI, or similar) for processing and analysis
- Cloud Infrastructure: Our Service may use cloud hosting providers to store and process data
- Telegram: We receive messages and information through Telegram's platform, which is subject to Telegram's privacy policy
These service providers are contractually obligated to protect your information and use it only for the purposes we specify.
5.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
5.3 Project Transfer
If this personal project is ever transferred to another maintainer, your information may be transferred as part of that change. We will notify you of any such change in ownership or control of your personal information.
5.4 What We Do NOT Share
We do NOT:
- Sell your personal information to third parties
- Share your data with advertisers
- Use your data for marketing purposes without your consent
6. Data Retention
6.1 Messages and Images
We may temporarily retain your messages and images only for:
- Processing and providing the Service
- Troubleshooting and support purposes
Any transient copies are deleted after the above purposes are fulfilled; in any case, we aim to delete or anonymize such data within 90 days of processing.
6.2 Google Sheets Data
Nutrition data stored in your Google Sheets remains in your Google Drive until you choose to delete it. We do not delete this data unless you explicitly request it or revoke access to your Google account.
6.3 Account Information
We retain your Telegram user ID and basic account information as long as you use the Service. You can request deletion of your account information by contacting us.
7. Your Rights and Choices
7.1 Access to Your Data
You have the right to:
- Access all nutrition data stored in your Google Sheets at any time
- Request a copy of any personal information we hold about you
- Review the data we have collected about you
7.2 Data Correction and Deletion
You can:
- Edit or delete any data in your Google Sheets directly
- Request correction of inaccurate information
- Request deletion of your account and associated data
7.3 Revoking Access
You can revoke NutriAgent Bot's access to your Google account at any time by:
- Visiting your Google Account settings: https://myaccount.google.com/permissions
- Removing NutriAgent Bot from your connected apps
Revoking access will prevent the Service from updating your spreadsheet, but your existing data will remain in your Google Sheets.
7.4 Opting Out
You can stop using the Service at any time by:
- Simply not sending messages to the bot
- Revoking Google account access
- Requesting account deletion
7.5 Data Portability
Since all your nutrition data is stored in your own Google Sheets, you have full control and can export it at any time using Google Sheets' built-in export functionality.
8. Data Security
We implement appropriate technical and organizational measures to protect your information:
- Secure OAuth 2.0 authentication for Google account access
- Encryption of data in transit
- Secure storage of authentication tokens
- Regular security assessments and updates
- Limited access to personal information on a need-to-know basis
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
9. Children's Privacy
NutriAgent Bot is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.
By using the Service, you consent to the transfer of your information to these countries. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last Updated" date at the top of this Privacy Policy
- Sending you a notification through the Telegram bot (if significant changes occur)
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
12. Third-Party Services
Our Service integrates with the following third-party services:
12.1 Telegram
We use Telegram as the platform for our bot. Your use of Telegram is subject to Telegram's Terms of Service and Privacy Policy. We receive messages and user information through Telegram's API.
12.2 Google Services
We use Google OAuth, Google Sheets API, and Google Drive API. Your use of these services is subject to Google's Terms of Service and Privacy Policy. Data stored in Google Sheets is subject to Google's data protection practices.
12.3 AI Service Providers
We may use third-party AI service providers for image recognition and natural language processing. These providers have their own privacy policies governing how they handle your data.
13. Your California Privacy Rights
If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including:
- The right to know what personal information we collect about you
- The right to delete your personal information
- The right to opt-out of the sale of your personal information (we do not sell your information)
- The right to non-discrimination for exercising your privacy rights
To exercise these rights, please contact us through the methods provided in the "Contact Us" section.
14. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR), including:
- The right to access your personal data
- The right to rectification of inaccurate data
- The right to erasure ("right to be forgotten")
- The right to restrict processing
- The right to data portability
- The right to object to processing
- The right to withdraw consent
To exercise these rights, please contact us through the methods provided in the "Contact Us" section.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Telegram: @nutri_agent_bot
We will respond to your inquiry within a reasonable timeframe.
16. Consent
By using NutriAgent Bot, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.