Privacy Policy

Definitions

Information We Collect

How We Use Your Information

Food Photo Processing

Caloryze uses artificial intelligence to analyze photos of your meals. Here's how we handle this data:

• Food photos are securely transmitted to our servers for AI analysis.
• Our AI identifies foods and estimates nutritional content including calories, protein, carbohydrates, and fats.
• Photos and analysis results are stored in your account for your food diary. Each stored photo is served through a private, unguessable link that the app uses to display it. The link is never shown to other users, but anyone who obtains it can view that photo until you delete the entry or your account.
• You may delete individual food entries or your entire food history at any time through the app.

We do not use your personal food photos for advertising. Anonymized data may be used to improve AI accuracy.

AI Features & Chat

Caloryze uses AI providers to power food analysis, search, coaching, and meal corrections. Here is what each provider receives:

• AI coach (Anthropic) — your chat messages, the nutrition day-context retrieved to answer them, any remembered facts you have consented to the coach keeping, and a one-time onboarding insight generated from your first name, age, gender, height, current weight, goal weight, goal, weight-goal pace, activity level, calculated energy needs, and macro plan.
• Meal fixes you describe (Anthropic) — when you use “Describe what's wrong” on a logged meal, we send the note you type along with that meal's name, serving size and amount, calories and macronutrients, and the names and calories of its ingredients. If you add a photo of your plate there, taken with your camera or chosen from your library, we send that photo too. The note and the photo are used only to propose changes for you to review and confirm, and we do not store the photo. Once you confirm, we store the resulting numbers together with the note you typed in the correction room, trimmed to 500 characters; it is used only to improve food recognition, it never appears in our analytics, and it is deleted with your account.
• Food AI (Google Gemini) — food photos you capture or choose from your library, food and restaurant-menu search queries, voice recordings and their transcripts when you use voice logging, typed food corrections together with the item being corrected, and daily-insight generation using your first name and calorie statistics.
• Speech recognition (Apple or Google) — when you log by voice, your phone's built-in speech recognition may also process your audio: Apple's speech service on iOS, Google's on Android. Each handles it under its own privacy terms.
• If you turn on the coach memory consent toggle, remembered facts may also be used to personalize your daily-card pro tips (processed by Google Gemini).
• Coach usage counters (a tally of your AI requests) are operational data: they are deleted with your account, carry an automatic expiry backstop, and are not included in your data export.

Each provider processes what it receives under its own published API terms — Anthropic's commercial terms (Anthropic does not train models on customer content) for the coach and meal fixes, and Google's Gemini API terms for Gemini. Caloryze never uses any of it for advertising.

Coach responses are AI-generated and provided for general information only — they are not medical advice. You can report any coach response from inside the chat.

Data Retention

We retain your data only as long as necessary to provide our Service and fulfill the purposes described in this policy. When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law. This window includes point-in-time recovery and backup copies, which expire automatically within the same 30-day period. Deleted meal photos are not recoverable.

Data Sharing & Disclosure

We do not sell your personal information.

We may share your data only in these circumstances:

• Cloud infrastructure — Google Firebase / Google Cloud hosts our Service (authentication, database, photo storage), and Firebase Crashlytics receives crash and performance diagnostics in every release build. These providers are contractually obligated to protect your data. To tell whether you are online, the app occasionally contacts a Google connectivity-check address; the request carries only your device's IP address and no personal information.
• AI processing — Google (Gemini) and Anthropic receive the data described under AI Features & Chat above; FatSecret receives food search queries and nutrition lookups for detected foods. Food images shown with search results load directly from FatSecret's image service, which receives your device's IP address but no account information. These providers are contractually obligated to protect your data.
• Restaurant lookups (opt-in) — if you enable Restaurant Radar, your precise coordinates are sent to the Overpass API (overpass-api.de), a community-operated OpenStreetMap service, to find restaurants near you. As a community service, it is not under contract with us; we send it only coordinates, never your identity.
• Operational alerts — Resend delivers service-alert and support-notification emails to our operators containing only pseudonymous usage data and references (event type, hashed identifiers, counts, report reason, and internal reference ids — never your message content).
• Support & problem reports — when you report a problem with a logged item or submit a support request, its contents (your message, the reported item's name, and — for support requests — your account email so we can reply) are forwarded to Notion, our support-desk tool, where our team reviews and responds. Copies held in our support tools are retained while we work on your request and are deleted on request; they are not covered by the automated account-deletion wipe.
• Subscriptions — RevenueCat processes your subscription purchase and entitlement status on our behalf (linked to your account id, never to your payment details, which stay with Apple / Google).
• Product analytics — PostHog receives anonymous-until-sign-in usage events (screens viewed, features used, and the amount/unit of water you log) tied to your account id after sign-in; IP-based location is disabled and events are never used for advertising.
• Barcode lookups — when you scan a product barcode, the barcode number is sent directly from your device to Open Food Facts (world.openfoodfacts.org), a community database licensed under the ODbL; product photos taken from it load directly from the Open Food Facts image service (images.openfoodfacts.org). Because both requests leave your device, Open Food Facts receives your device's IP address. As a community service, it is not under contract with us; we send it only the barcode number, never your identity.
• Legal requirements — If required by law, court order, or government request.
• Safety and rights — To protect the safety, rights, or property of Caloryze, our users, or the public.

Age Requirement

Caloryze is intended for adults 18 and older, and the app does not let anyone younger complete sign-up. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, contact support@caloryze.ai and we will delete it.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards to ensure your information remains protected in accordance with this policy and applicable law.

Your Privacy Rights