The short version
- We collect what you put into the app — meals, photos, recipes, profiles — plus your name, email and profile picture from sign-in.
- We use it to run the app for you and your household. Nothing else.
- Other members of your household can see much of it. That is the point of the app, and it is worth understanding before you start.
- Meal photos and descriptions are sent to AI models to estimate nutrition.
- We do not sell your data, we show no ads, and we run no third-party analytics or tracking.
- Ask us and we will delete your account and data.
1. Who is responsible for your data
Diet Maharaj is operated by Tanuj Lalit Bhojwani, an individual based in Bangalore, Karnataka, India. For anything in this policy, write to tanuj@sthaan.ai.
2. What we collect and why
Account and sign-in
You sign in in one of two ways:
- Google sign-in. Google gives us your name, email address and profile picture. We use these to identify your account and show you to your household. We do not receive your Google password, and we do not read your Gmail, Drive, Contacts or Calendar.
- One-time code by email. We use your email address to send you a short sign-in code.
Once you are signed in, we keep a session record in our own database so you stay signed in.
What you put into the app
- Food diary: what a person ate, when, photographs of meals, and calculated macronutrients (calories, protein, carbs, fat, fibre).
- Household member profiles: names, photos, dietary notes and preferences, and macronutrient targets.
- Meal plans, recipes and pantry: weekly plans, your recipe library, and the ingredients you have in stock.
- Habits and daily calorie budgets.
Some of this — dietary notes, what you eat, photos of you eating — can reveal things about your health. We treat it as sensitive. We collect it only because you chose to put it in, and we use it only to run the features you are using.
Technical data
Our hosting provider processes ordinary request data (such as IP address and browser type) in order to serve the site and protect it from abuse. We do not use this to build a profile of you, and we do not run any third-party analytics.
3. Cookies and tracking
This documents site (tos-meals.sthaan.ai) sets no cookies at all, loads no external fonts or scripts, and has no analytics or tracking of any kind.
The app itself uses only what it needs to keep you signed in. There are no advertising cookies and no third-party trackers anywhere.
4. Who can see your data
Your household — read this part
Diet Maharaj is designed for a household to share. Depending on how your household is set up, other members can see:
- your food diary entries, including photos of your meals and their times;
- your profile: name, photo, dietary notes and preferences, macronutrient targets;
- your habits and calorie budgets;
- the household's shared meal plans, recipes and pantry.
One member can also record meals on behalf of another — for example a cook recording what was served, or a parent recording a child's meals. So entries in your diary may have been created by someone else in your household, and entries you create may appear in someone else's.
Only join a household with people you are comfortable sharing this with.
Service providers
| Who | What they handle |
|---|---|
| Cloudflare | Runs the whole app: Workers for compute, D1 for the database, R2 for photographs. Your data is stored on Cloudflare's infrastructure. |
| Cloudflare Workers AI | Analyses meal photos and text to estimate macronutrients. |
| Google Gemini | Analyses meal photos and text to estimate macronutrients, and extracts recipes from cooking videos. |
| Google (sign-in) | Authenticates you if you use Google sign-in. |
Nobody else
We do not sell your personal data or share it with data brokers, advertisers or analytics companies. We would only disclose data if the law required it, or to protect the safety or rights of users.
5. AI processing
When you log a meal, the app may send the photograph and any text description to Cloudflare Workers AI or Google Gemini so the model can estimate the macronutrients. When you ask it to import a recipe from a cooking video, it sends the video content or its transcript to an AI model to extract the recipe.
This means your meal photos and descriptions leave our systems and are processed by those providers, under their own terms. We send only what is needed for the request. Estimates that come back are stored in your diary.
Bear in mind that a photo of your meal may include other things in the frame — your kitchen, your table, other people. Crop or skip photos you would rather not send.
6. Where your data is stored
The app runs entirely on Cloudflare. The database (Cloudflare D1) holds your account, diary entries, recipes, plans and profiles; photographs are stored in Cloudflare R2. Cloudflare operates a global network, so data may be stored or processed outside India, including in other countries where Cloudflare and the AI providers operate.
7. How long we keep it
- Your content — diary entries, photos, recipes, profiles — is kept for as long as your account exists, because the app's purpose is to keep a history you can look back at.
- Sessions expire and are cleared out.
- After deletion: when you ask us to delete your account, we remove your personal data and photos from the live database and object storage. Copies may persist in backups for a short period before being overwritten.
Note that entries you created about another household member, or that another member created about you, are part of that household's records. Tell us what you want done with them when you ask for deletion.
8. Your choices and rights
You can ask us to:
- give you a copy of your data;
- correct anything that is wrong — most of it you can edit in the app yourself;
- delete your account and your data;
- stop using your data in a particular way.
Write to tanuj@sthaan.ai from the email address on your account. We will respond within a reasonable time, normally 30 days.
9. Deleting your data
To delete your account and everything in it, email tanuj@sthaan.ai from your account's email address and say you want your account deleted. We will confirm before we do it, since it cannot be undone.
If you signed in with Google, you can also revoke the app's access to your Google account at myaccount.google.com/permissions. That stops future sign-ins but does not by itself delete data already in the app — email us for that.
10. Security
Data is sent over HTTPS and stored on Cloudflare's infrastructure with access restricted to the app and the people who run it. No system is perfectly secure; we cannot promise your data can never be exposed. If a breach affects your data, we will tell you.
11. Children
The app is not intended for children under 13, and we do not knowingly let a child under 13 create their own account. A parent or guardian may record a child's meals in a household profile — if you do this, you are responsible for that information and for deciding what is appropriate to record. If you believe a child has created their own account, email us and we will delete it.
12. Changes to this policy
We may update this policy. We will change the "Last updated" date at the top of this page, and for significant changes we will tell you in the app or by email before the change takes effect.
13. Contact
Questions, requests, or complaints about privacy: tanuj@sthaan.ai, Tanuj Lalit Bhojwani, India.