Privacy Policy

Definitions

Information We Collect

How We Use Your Information

Food Photo Processing

Caloryze uses artificial intelligence to analyze photos of your meals. Here's how we handle this data:

• Food photos are securely transmitted to our servers for AI analysis.
• Our AI identifies foods and estimates nutritional content including calories, protein, carbohydrates, and fats.
• Photos and analysis results are stored in your account for your food diary. Each stored photo is served through a private, unguessable link that the app uses to display it. The link is never shown to other users, but anyone who obtains it can view that photo until you delete the entry or your account.
• You may delete individual food entries or your entire food history at any time through the app.

We do not use your personal food photos for advertising. Anonymized data may be used to improve AI accuracy.

Data Security

We protect your personal and health data with technical and organizational safeguards:

• Encryption in transit — every connection between the app, our servers and our service providers uses HTTPS (TLS). We never send your data over an unencrypted connection.
• Encryption at rest — your account data, food diary, photos and health data are stored on Google Cloud (Firebase) infrastructure, which encrypts stored data at rest.
• Access controls — your data is reachable only through your signed-in account. Our servers enforce per-user access rules, and staff access is limited to what support and operations require.
• Service providers — the providers that process data on our behalf receive only the data needed for the task, over encrypted connections, and may not use it to train their models.
• Incident response — if we learn of a breach affecting your personal data, we will notify you and the relevant authorities as the law requires.

No method of transmission or storage is completely secure. If you believe your account has been compromised, contact us at support@caloryze.ai.

AI Features & Chat

Caloryze uses AI providers to power food analysis, search, coaching, and meal corrections. Here is what each provider receives:

• AI coach (Anthropic) — your chat messages, the nutrition day-context retrieved to answer them, any remembered facts you have consented to the coach keeping, and a one-time onboarding insight generated from your first name, age, gender, height, current weight, goal weight, goal, weight-goal pace, activity level, calculated energy needs, and macro plan.
• Meal fixes you describe (Anthropic) — when you use “Describe what's wrong” on a logged meal, we send the note you type along with that meal's name, serving size and amount, calories and macronutrients, and the names and calories of its ingredients. If you add a photo of your plate there, taken with your camera or chosen from your library, we send that photo too. The note and the photo are used only to propose changes for you to review and confirm, and we do not store the photo. Once you confirm, we store the resulting numbers together with the note you typed in the correction room, trimmed to 500 characters; it is used only to improve food recognition, it never appears in our analytics, and it is deleted with your account.
• Food AI (Google Gemini) — food photos you capture or choose from your library, food and restaurant-menu search queries, voice recordings and their transcripts when you use voice logging, typed food corrections together with the item being corrected, and daily-insight generation using your first name and calorie statistics.
• Speech recognition (Apple or Google) — when you log by voice, your phone's built-in speech recognition may also process your audio: Apple's speech service on iOS, Google's on Android. Each handles it under its own privacy terms.
• If you turn on the coach memory consent toggle, remembered facts may also be used to personalize your daily-card pro tips (processed by Google Gemini).
• Coach usage counters (a tally of your AI requests) are operational data: they are deleted with your account, carry an automatic expiry backstop, and are not included in your data export.

Each provider processes what it receives under its own published API terms — Anthropic's commercial terms (Anthropic does not train models on customer content) for the coach and meal fixes, and Google's Gemini API terms for Gemini. Caloryze never uses any of it for advertising.

Coach responses are AI-generated and provided for general information only — they are not medical advice. You can report any coach response from inside the chat.

Data Retention

We retain your data only as long as necessary to provide our Service and fulfill the purposes described in this policy. When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law. This window includes point-in-time recovery and backup copies, which expire automatically within the same 30-day period. One exception is email: messages we sent you, and support requests or coach reports you sent us, stay with Resend, our email provider, for up to 30 days after each was sent, with backups for up to 7 days more. Deleted meal photos are not recoverable.

Data Sharing & Disclosure

We do not sell your personal information.

We may share your data only in these circumstances:

• Cloud infrastructure — Google Firebase / Google Cloud hosts our Service (authentication, database, photo storage), and Firebase Crashlytics receives crash and performance diagnostics in every release build. These providers are contractually obligated to protect your data. To tell whether you are online, the app occasionally contacts a Google connectivity-check address; the request carries only your device's IP address and no personal information.
• AI processing — Google (Gemini) and Anthropic receive the data described under AI Features & Chat above; FatSecret receives food search queries and nutrition lookups for detected foods. Food images shown with search results load directly from FatSecret's image service, which receives your device's IP address but no account information. These providers are contractually obligated to protect your data.
• Email delivery — Resend sends our email for us: the account email described under Communication, addressed to your sign-in email address and carrying your first name, the state of your trial or subscription, the text of the message and your account ID; the support requests and coach reports you send us, forwarded to our team in full (for a support request, your message and any screenshot, your first name and account email; for a coach report, your note, the reply you reported and your account ID); and notifications of problem reports and service alerts to our operators, which carry only pseudonymous usage data and references (event type, hashed identifiers, counts, report reason, and internal reference ids). Resend stores this in the United States under a data processing agreement and keeps email data for 30 days, with backups for up to 7 days more.
• Support & problem reports — when you report a problem with a logged item or submit a support request, its contents (your message, the reported item's name, and — for support requests — your account email so we can reply) are forwarded to Notion, our support-desk tool, where our team reviews and responds. Copies held in our support tools are retained while we work on your request and are deleted on request; they are not covered by the automated account-deletion wipe.
• Subscriptions — RevenueCat processes your subscription purchase and entitlement status on our behalf (linked to your account id, never to your payment details, which stay with Apple / Google).
• Product analytics — PostHog receives anonymous-until-sign-in usage events (screens viewed, features used, and the amount/unit of water you log) tied to your account id after sign-in; IP-based location is disabled and events are never used for advertising.
• The website — caloryze.ai uses Google Analytics to count visits and see which pages and links bring people to the app. Google sets first-party cookies named _ga for this; advertising features and Google Signals are turned off, and nothing from your Caloryze account is sent. Our host, Vercel, also counts page views without cookies. You can block analytics in your browser's settings or with an extension.
• Caloryze on the web — at app.caloryze.ai you sign in with the same Apple or Google account you use in the app and see your day and your week. It is read-only: it shows what the app has logged and cannot change it. It keeps you signed in using your browser's local storage and loads no analytics or advertising. If you sign in there with an account you have not used in the app, a new account is created with the name, email address and profile photo your Apple or Google sign-in provides; write to support@caloryze.ai to have it deleted.
• Install attribution — AppsFlyer receives a device-scoped advertising-free identifier (the AppsFlyer ID and your device's model and OS version; on iOS without the IDFA — we never request tracking permission) and install/first-open events, together with the approximate region (country or city level) derived from your IP address, so we can measure which campaign brought you to Caloryze. It is never used to track you across other companies' apps or sites, and we do not sell this data. RevenueCat reports your trial and subscription events, such as a trial start, a purchase, a renewal or a cancellation, to AppsFlyer with details such as the product and the price, and with your Caloryze account ID, so we can see which campaign led to them. AppsFlyer works with the ad networks we advertise on, Google, Meta and TikTok, to determine whether one of their ads led to your install, and reports installs, app opens and trial and subscription events back to them so they can measure and improve those ads. Nothing you log, no food, weight or health data, is ever part of this.
• Barcode lookups — when you scan a product barcode, the barcode number is sent directly from your device to Open Food Facts (world.openfoodfacts.org), a community database licensed under the ODbL; product photos taken from it load directly from the Open Food Facts image service (images.openfoodfacts.org). Because both requests leave your device, Open Food Facts receives your device's IP address. As a community service, it is not under contract with us; we send it only the barcode number, never your identity.
• Legal requirements — If required by law, court order, or government request.
• Safety and rights — To protect the safety, rights, or property of Caloryze, our users, or the public.

Age Requirement

Caloryze is intended for adults 18 and older, and the app does not let anyone younger complete sign-up. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, contact support@caloryze.ai and we will delete it.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards to ensure your information remains protected in accordance with this policy and applicable law.

Your Privacy Rights