Nutrimeniu
Creați cont gratuit

Privacy policy for the Nutrimeniu nutrition calculator

Updated:

This policy covers the public Nutrimeniu nutrition calculator: the MCP server at https://api.nutrimeniu.ro/mcp, used from Claude, ChatGPT and other MCP clients, and the public nutrition API behind it at https://api.nutrimeniu.ro/v1/public/nutrition. How the calculator works is described on the calculator page .

Nutrimeniu accounts and the Nutrimeniu web app are covered by our Politica de confidențialitate (in Romanian). This page is consistent with it and adds the details specific to the calculator.

Who we are

The calculator is operated by Derikon Development S.R.L., a company registered in Romania (Trade Register no. J04/567/2014, tax ID 33282994), with its registered office in Sat Gioseni, Comuna Gioseni, No. 823, Bacău County, Romania. Under the General Data Protection Regulation (EU) 2016/679 (GDPR), we are the controller for the data described here. Contact: office@nutrimeniu.ro.

What we don't collect

The calculator works without an account. It does not ask for your name, email address or any other personal data, sets no cookies and has no sign-in. We don't see your conversation with Claude or ChatGPT: we receive only the data the assistant sends when it calls one of the calculator's tools.

Please don't put personal data in ingredient names or search text. If you do, the first 60 characters of a search, or of an ingredient name the calculator could not match, end up in our logs.

What the MCP server receives and logs

The assistant sends the tool arguments:

  • for search_foods: the search text, the language and the number of results;
  • for calculate_nutrition: the ingredients (a food id or a name) with their weights, the number of servings, the weight after cooking and the language.

For each call, the MCP server writes one log line with:

  • the date and time, the tool name and how long the call took;
  • whether the call succeeded, failed or was stopped by a limit;
  • for search_foods: the first 60 characters of the search text and the number of results;
  • for calculate_nutrition: the number of ingredients, how many were matched, ambiguous or not found, the first 60 characters of each ingredient name that could not be matched, and the number of calculations made in that session;
  • the name the AI client reports about itself, for example Claude or ChatGPT;
  • a hashed session id: a one-way hash of the MCP session id that the client generates for the conversation. We cannot use it to identify you or to find your conversation in Claude or ChatGPT.

We don't log the weights, the matched ingredients or the full list of ingredients, and the MCP server doesn't log IP addresses.

What the API receives

The MCP server sends the same ingredient data to the public nutrition API, which does the calculation. The API can also be called directly by anyone. For direct calls, the API uses the IP address of the caller to apply its rate limit (60 requests per minute and 1,000 per day); the counters expire within a day.

Our web server keeps standard access logs (IP address, time, requested URL, browser or client name) for security. For calls made through Claude or ChatGPT, the IP address in these logs belongs to the AI provider's servers, not to you.

Why we use this data

  • to apply the limits: 5 calculations per conversation without an account, and a daily limit for the whole service;
  • to keep the service secure and stop abuse;
  • to find and fix errors, and to see which foods are missing from the database;
  • to count how much the calculator is used, per AI client.

The legal basis is our legitimate interest in running a free public service safely (Article 6(1)(f) GDPR). We don't sell this data, don't use it for advertising and don't build profiles from it.

How long we keep it

  • Calculator logs: 90 days. The log file is rotated every day and each daily file is deleted after 90 days.
  • Web server access logs: up to 14 days.
  • Rate-limit counters: up to one day.
  • Usage statistics without session ids (for example, calculations per day per AI client) may be kept longer.

Who else processes it

  • Our servers run on Amazon Web Services in Frankfurt, Germany (EU).
  • If a request fails, an error report with the request details may be sent to Sentry, our error-monitoring provider.
  • Your conversation is processed by the provider of your AI assistant (for example Anthropic for Claude, OpenAI for ChatGPT) under its own privacy policy. That processing is outside our control.

Your rights

Under the GDPR you have the right to access, rectify and erase your personal data, to restrict or object to its processing, and to data portability. Because the calculator does not know who you are, we can only find a log entry if you tell us the approximate time and the search text or ingredient names you used (Article 11 GDPR). Write to office@nutrimeniu.ro.

You can also complain to the Romanian data protection authority, ANSPDCP, Bd. G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, www.dataprotection.ro.

Changes

When the calculator changes what it logs, we update this page and the date at the top. Signing in with a Nutrimeniu account is planned for a later version; when it ships, this page will describe what changes for signed-in use.