🔒 Privacy & terms

What Ndiro stores

Your meal descriptions, optional context notes, fiber amounts, optional meal photos, and your account's email and name — from Google if you sign in with Google, or the ones you typed at signup for email/password accounts. Email/password accounts additionally store account-security metadata: a salted hash of your password (never the password itself), hashed one-time verification/reset tokens while a link is outstanding, and a failed sign-in counter for the lockout. It is all stored in the operator's AWS account (DynamoDB and a private S3 bucket). The app also sends the occasional account email to the address on file: verification and password-reset links for email/password accounts, and — whichever way you sign in — a short notice if someone enters your address in the signup or reset form.

Who can see your data

• Nothing is ever public. There is no feed and no discovery. Photos are served only through short-lived signed links generated for you — or for someone opening a share link you created.
• Share links show a read-only copy of your review page to whoever has the link. You choose how long they live and can revoke them at any time.
• Other users can never see your meals or photos. Admins can see only account metadata (email, name, status) — the admin screens have no way to view anyone's meals or photos.
• The operator can technically access the underlying storage (it runs in their AWS account) and by policy does not, except for abuse handling or at your request.

AI estimates

If you use the fiber estimator, the meal description or photo you submit is sent to OpenAI to compute the estimate, on the operator's API key. Estimates are capped per user per day.

Ground rules

• No unlawful content. The operator may remove content or accounts that break this or that abuse the service.
• This is a proof of concept: no uptime or durability guarantees. Please don't treat it as your only copy of anything important.

Deleting your data

You can delete your account yourself in Settings. That permanently removes your meals, your photos, your share links, and your account record — everything goes with it.