Privacy Policy

What we collect

• Your account. When you sign in with Apple or Google, we receive an identifier for your account with that provider, the email address it shares (with Apple’s Hide My Email, a relay address rather than your own) and your name if it shares one. We give your account a username, which isn’t public or searchable: in the app only you see it.
• Your details and goals. Your date of birth, the sex used in the calorie estimate, height, weight readings, usual activity, weight goal, calorie and macro targets, units and display choices.
• Your diary. What you log: entries, their nutrition and how it was worked out, the photos you take or import, the descriptions you type or dictate, the corrections you ask for, saved foods and every edit, with the dates and times they apply to.
• Your iPhone. Its time zone, which sets your “today”, a random installation ID, a push notification token if you allow notifications, your meal reminder settings, and the results of Apple’s DeviceCheck and App Attest, which keep the free trial to one per iPhone and protect AI requests.
• Your plan. Whether you’re on the trial, Pro or Free, and for a subscription its status, price and renewal date from Stripe. We never receive your card number.
• How the app is used. A short list of product events, such as which Home layout you picked, and error reports when something breaks. These carry your account ID, never your username, email, food, photos or body details.
• What you write to us, when you email support or request a feature.

What we don’t collect

• Apple Health data. Caloit doesn’t read or write it.
• Audio. Dictation runs on your iPhone; no recording is stored or sent, only the text.
• Session recordings, your contacts or your location.

How we use it

• To run Caloit: your diary, budget, targets, progress, reminders and widgets.
• To estimate nutrition from the photos and descriptions you send to AI.
• To provide the trial and Pro, and to enforce the daily AI log limit.
• To keep Caloit working and secure, and to fix what breaks.
• To check and improve Caloit’s AI estimates, as the next section describes.
• To answer you when you write to us.

We don’t sell your personal data, share it for targeted advertising, or show ads in Caloit.

AI estimates

When you log a meal photo, a nutrition label or a description, or ask Fix with AI to correct an entry, we send that photo, description or correction text to OpenAI, our only AI provider, to work out an estimate. We never send your date of birth, sex, height, weight, activity or targets to an AI provider or to analytics.

The photos, descriptions and correction text you send to AI, with the estimates they got and the changes you made afterwards, may be used to check and improve Caloit’s estimates, without a separate opt-in. These copies stay in Caloit’s private evaluation records and storage, never in public. They carry no username, email, body measurements, date of birth, sex or targets, go only to AI providers this policy names, and are kept until you delete your account, even after you delete the entry. Your export includes them, and deleting your account deletes them.

When you write to us

To help when you write to us, our support can look up one account’s email address, username, sign-in methods, creation date, plan and AI logs used today. It never sees your diary, weight, body details, targets or what you sent to AI.

Who processes it for us

These companies process personal data on our behalf, only to provide their service:

• OpenAI receives the photos, descriptions and correction text you send to AI, to return an estimate. It doesn’t store them for us, and keeps them for at most 30 days to check for abuse, unless the law requires longer.
• Cloudflare carries the app’s connections to our API and sign-in service: Cloudflare Tunnel ends the encrypted (HTTPS) connection, so it can see what’s in requests on their way to us. Cloudflare R2 stores your photos and our encrypted database backups. Cloudflare also serves caloit.com.
• PostHog (in the United States) receives the app’s product events and error reports. Its autocapture and session replay are off, and IP addresses are discarded. On caloit.com it counts visits without cookies.
• Sentry receives error reports, with credentials, food, photos and body details removed, for as long as we use it for them.
• Stripe takes payment for Pro and keeps the card details, and sends your receipts.
• Apple provides Sign in with Apple, Hide My Email, DeviceCheck and App Attest, and delivers notifications. A notification says only that a meal is ready, never what you ate.
• Google provides Google sign-in.

Each processes the data only on our instructions, under terms that protect it at least as well as this policy does. Your account, diary and details are stored on servers Caloit runs itself, not with a database provider.

How long we keep it

• Your account and diary, until you delete your account.
• Deleting your account ends access at once, and the data is deleted from our live systems within seven days.
• Encrypted backups are kept for about 30 days, so deleted data leaves them by then. If we ever restore one, deletions are applied again before anything is used.
• Logs are kept for about 14 days, with personal details removed.
• Billing records are kept as long as the law requires.

Your choices

• Export everything as JSON or CSV with Profile › Export data.
• Change your details, entries and targets in the app at any time.
• Delete your account and its data with Profile › Delete account.
• Turn notifications and meal reminders on or off whenever you like.

Depending on where you live, you may have other rights over your data: to know what we hold and who we’ve shared it with, to correct it, to have it deleted, and to withdraw consent. Write to support@caloit.com to use them; we answer within 45 days, and using them never changes the service you get. If we turn a request down, reply with “Appeal” in the subject and we’ll look at it again.

Health data

Your body details, goals and food diary are health information. We use them only to run Caloit for you, and we never sell them. The copies of what you send for an AI estimate, used to check and improve Caloit’s estimates, are kept apart from your body details, goals and targets, as described above. Our Consumer Health Data Privacy Policy says what we collect, why, and who it’s shared with, as Washington’s My Health My Data Act and similar state laws require.

Security

Connections are encrypted, backups are encrypted before they leave our server, and photos are reached only through short-lived private links. No system is perfectly secure; if something goes wrong that affects you, we’ll tell you.

Children

Caloit’s estimates apply from age 3, and a parent or guardian can keep a child’s diary. A parent or guardian can ask what we hold about their child, or have it deleted, by writing to support@caloit.com.

Changes and contact

If this policy changes in a way that matters, we’ll say so in the app before it applies. Questions go to support@caloit.com.