← Cut Monitor

Privacy Policy

Version 2026-10-29 · Effective October 29, 2026

1. Overview

Cut Monitor ("the Service") is an independent student project operated by Rohan Malik. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. We are committed to your privacy and keeping your data safe.

2. What We Collect

Account Information

  • Your Google account email and name (from Google Sign-In)
  • Timestamp of when you accepted the Terms of Use

Your Data

  • Meals you log (food name, quantity, date, time)
  • Custom foods you create
  • Your calorie and macronutrient targets
  • Preferences and settings

Technical Information

  • Essential authentication cookies (for keeping you signed in)
  • Minimal server logs by Vercel and Supabase (IP, timestamps, error logs)
  • Per-user rate-limit counters (to prevent abuse)

3. What We Don't Collect

Cut Monitor explicitly does not collect:

  • Your precise location or GPS data
  • Your contacts or address book
  • Tracking cookies or advertising pixels
  • Analytics data from third-party services (no Google Analytics, Mixpanel, etc.)
  • Camera, microphone, or other device sensors
  • Browsing history outside Cut Monitor

4. How We Use Your Data

We use your data only to operate the Service. This includes:

  • Authenticating you and keeping you signed in
  • Storing and retrieving your meals, custom foods, and preferences
  • Calculating your daily totals and progress
  • Providing menu data and nutrition facts
  • Detecting and preventing abuse (rate limiting)

We do not use your data for:

  • Advertising or marketing
  • Profiling or behavioral analysis
  • Selling or renting your data
  • Any purpose other than running the Service

5. Data Sharing & Processors

We do not share your personal data with third parties for advertising or marketing purposes. However, the Service relies on the following processors to operate:

Supabase (https://supabase.com)

Supabase handles our database and authentication infrastructure (US region). Your account information and meal data are stored in Supabase's PostgreSQL database with row-level security policies to ensure each user's data is isolated and only accessible by that user. Supabase processes your Google email and name for authentication and identity purposes.

Vercel (https://vercel.com)

Vercel hosts and serves the Cut Monitor application. Vercel may collect minimal server logs including your IP address, browser user agent, request timestamps, and error information for infrastructure and security purposes.

Google (https://accounts.google.com)

Google handles sign-in authentication. Your email and name are transmitted to Cut Monitor from Google. We do not use Google's advertising or analytics services. See Google's Privacy Policy for how Google handles your data.

CS50 Dining API (https://cs50.readthedocs.io/api/dining/)

Menu and nutrition data are fetched from the unofficial CS50 Dining API, which reflects Harvard University Dining Services (HUDS) data. This data is cached in Cut Monitor and not linked to your personal data.

6. Data Security

We employ reasonable security measures including:

  • HTTPS encryption for all communications
  • Row-level security (RLS) in the database to isolate user data
  • Supabase's managed authentication and infrastructure
  • No storage of passwords (Google handles authentication)

However, no system is 100% secure. We cannot guarantee absolute security against all threats. We encourage you to use strong passwords and keep your account credentials confidential.

7. Data Retention & Deletion

Your data is retained in Cut Monitor as long as your account exists. When you delete your account through the Settings page, the following happens immediately and permanently:

  • All your meals, custom foods, and preferences are deleted
  • Your user record and sign-in data are deleted
  • Your data is removed from all active application systems

Note: Supabase, Vercel, and Google may retain backups or logs for a brief period per their standard policies. These retention periods are beyond our control.

8. Your Rights

Data Export

You can export all your data (meals, custom foods, preferences) in JSON or CSV format directly from the Settings page at any time.

Account Deletion

You can permanently delete your account and all associated data from the Settings page. This action is irreversible.

Support

If you need help exporting or deleting your data, or if you have questions about your privacy, contact us at rohan.malik2005@gmail.com.

9. Age Requirements

Cut Monitor is only available to users who are 18 years of age or older. By using the Service, you confirm that you meet this age requirement. If you are under 18, please do not use Cut Monitor.

10. Changes to Privacy Policy

We may update this Privacy Policy from time to time. Changes will be effective immediately upon posting. We will update the version date at the top of this page. Your continued use of Cut Monitor constitutes acceptance of any changes. We encourage you to review this policy periodically.

11. Contact

For questions about this Privacy Policy, to request data access, to exercise your rights, or to report privacy concerns, contact the operator at rohan.malik2005@gmail.com.