Security

Last updated: July 21, 2026

1. Our Approach

NutriAssist Pro handles clinical and personal health information for dietitians and their clients, so security is treated as a product requirement, not an afterthought. This page explains the technical and operational safeguards protecting your account and client data.

2. Data Encryption

  • In transit: All traffic between your browser and our servers is encrypted with HTTPS/TLS.
  • At rest: Data is stored in an encrypted, managed Postgres database (Supabase), including client records, meal plans, and reports.

3. Access Control

  • Row-level security: Database policies enforce that a dietitian can only ever read or modify their own clients' records — this is checked on every query, not just in application code.
  • Authenticated access: Every API request that touches account or client data requires a valid, verified session token.
  • Admin isolation: Platform administration (support tickets, subscriptions, broadcast tools) is a separate login, gated by its own role check, and is never reachable with a dietitian or client session.
  • Rate limiting: Public-facing endpoints (support requests, sign-up, contact forms) are rate-limited and validated to prevent abuse and spam.

4. Payments

Subscription payments are processed by Razorpay. We do not store your card, UPI, or bank details on our servers — payment credentials are handled entirely by Razorpay's PCI-compliant infrastructure. Payment webhooks are verified using signed HMAC signatures before being trusted.

5. Application Security Practices

  • User-supplied content is escaped before being included in outbound emails and rendered pages, to prevent injection attacks.
  • Dependencies are monitored for known vulnerabilities and updated regularly.
  • Sensitive server-side operations use a privileged database connection that is never exposed to the browser and is only reachable from authenticated, authorized API routes.

6. Responsible Disclosure

If you believe you've found a security vulnerability in NutriAssist Pro, please report it to us privately rather than disclosing it publicly. We will investigate promptly and keep you updated on the resolution.

Email: security@nutriblend.in

7. Questions

For any other security-related question, or to request more detail on our practices, contact us at:

Email: security@nutriblend.in

Back to Sign Up