Privacy Policy

01Who we are

Service: CaloFlag

Website: https://caloflag.com

Contact: info@caloflag.com

If you have privacy questions or want to exercise your privacy rights, contact us at info@caloflag.com.

02Information we collect

We collect the following categories of information.

2.1 Account information

When you create or use an account, we may collect:

• your email address;
• your password, if you register with email and password, stored in hashed form rather than plain text;
• authentication details from login providers you choose to use, such as:
  • Sign in with Apple, including your Apple-provided user identifier and, where shared, your name and email address or private relay email address;
  • Google Sign-In, including your Google account email address and basic profile information you choose to share;
• account creation date, login timestamps, and related account activity metadata.

2.2 Meal content and meal log history

When you use the app to scan a meal, we may collect:

• photos or images of meals you choose to capture or upload for analysis;
• text corrections or follow-up photos you submit to adjust an analysis (e.g., refining portion size or identification);
• prompts and other inputs sent to the AI model needed to generate a nutrition estimate;
• analysis results including identified food, calories, macronutrients, portion size, confidence score, and reasoning;
• meal log history stored in your account;
• weight entries and nutrition goals you choose to record;
• timestamps and related technical metadata associated with each meal scan.

We only access camera or photo content that you explicitly choose to provide for meal scanning.

2.3 Subscription and purchase information

If you purchase or restore a subscription through Apple or Google Play, we may receive information such as:

• subscription status;
• subscription product identifier;
• transaction, renewal, and expiration information;
• purchase validation and entitlement information.

We do not receive or store your full payment card details. Payments are processed by Apple through the App Store or by Google through Google Play.

2.4 Usage, device, and diagnostics information

To operate, secure, and improve the Services, we may collect:

• app version;
• device model and operating system information;
• language, country, or region settings;
• crash logs, error logs, and diagnostics;
• feature usage information, such as scan counts and screens or features used;
• an approximate location (country and city level) that our analytics provider derives from your IP address when the app sends an event. The app never asks for location permission and does not collect precise location.

The app does not request Apple's App Tracking Transparency permission and does not collect your device's advertising identifier.

2.5 Health and fitness data

If you choose to connect Apple Health (iOS) or Health Connect (Android), the app reads eight things and nothing else. Every one of them is used to show you something in the app:

• weight, to draw your weight trend;
• steps, exercise minutes, active energy and resting energy, to work out how your eating lines up with what you burn;
• resting heart rate and heart rate variability, for the activity part of your health score;
• sleep duration, for the sleep part of it.

It reads no blood pressure, blood glucose, blood oxygen, respiratory rate or body temperature, no height, body fat or BMI, and no nutrition recorded by other apps. An earlier version of the app requested those and never used them; the request was removed in September 2026 so that what is asked for and what is needed are the same list.

This access is read-only and entirely optional. CaloFlag does not write data back to Apple Health or Health Connect, and the app works without any health connection at all. You choose which categories to share when the system permission sheet appears, and you can change or revoke that access at any time in the Health app under Sharing, or in Health Connect on Android.

Health data is used only to show your own progress and insights inside the app. We do not use it for advertising, we do not sell it, and we do not share it with advertising partners or data brokers. It is stored in your account alongside your meal log so your history follows you across devices, and it is deleted when you delete your account.

2.6 Support communications

If you contact us, we may collect:

• your email address;
• the content of your message;
• attachments, screenshots, or other information you choose to send us.

2.7 Anti-abuse and security records

To prevent fraud, abuse, and violations of our Terms, we may retain limited anti-abuse records, including privacy-protective identifiers derived from account information.

For example, after account deletion we may retain a hashed or otherwise pseudonymised identifier derived from an email address so we can detect repeated creation and deletion of accounts used to evade restrictions or to obtain the Services without a valid subscription.

2.8 Analytics

Website. Our website, caloflag.com, uses Google Analytics to understand which pages people visit. Analytics and marketing cookies are off until you accept them in the consent banner shown on your first visit, and you can change your choice at any time from that banner.

App. The app records a small set of product events so we can see where people get stuck: which onboarding step you reached, that the subscription screen was shown and whether a purchase was started, completed or cancelled, that a scan was started and whether it succeeded, and whether health syncing was connected. These carry only structural information, such as the step name and a coarse bucket like “high confidence” or “under five seconds”.

They never carry your meals, your photos, your nutrition results, your weight or height, your date of birth, your email address, or any authentication or purchase identifier. Events are tied to your account identifier so we can tell whether a problem affects one person or many.

You can turn this off at any time in the app under Profile → Preferences → Privacy. Turning it off stops the app sending anything, immediately.

The app contains no advertising SDK and shares no app events with advertising platforms.

03How we collect information

We collect information:

• directly from you, when you create an account, sign in, scan a meal, set nutrition goals, log weight, purchase or restore a subscription, contact support, or request account deletion;
• automatically, when you use the Services, through device, diagnostic, and service logs;
• from your device, with your permission, when you connect Apple Health or Health Connect and choose which categories to share;
• from third parties you choose, such as Apple or Google when you sign in with those services, Apple or Google when you purchase or restore a subscription, and Google Cloud services when meal photos and related inputs are processed through our backend.

04How we use information

We use the information described in this Privacy Policy to:

• create and manage your account;
• authenticate you and keep your account secure;
• process meal photos and return calorie and macronutrient estimates;
• process text corrections or follow-up photos you submit to adjust an estimate;
• save your meal log, weight entries, and nutrition goals in your account;
• calculate daily intake, progress, and goal-related summaries within the app;
• provide subscriptions, verify entitlements, and restore purchases;
• operate, maintain, troubleshoot, monitor, and improve the Services;
• respond to support requests and user communications;
• detect, investigate, and prevent fraud, abuse, security issues, attempts to obtain the Services without a valid subscription, or violations of our Terms;
• comply with legal obligations and enforce our rights.

We do not sell your personal data.

05Legal bases for processing (EEA/UK users)

If you are located in the European Economic Area, Switzerland, or the United Kingdom, we process personal data under one or more of the following legal bases:

• performance of a contract with you, such as providing the app, your account, subscriptions, and meal-analysis functionality;
• your consent, where consent is required;
• compliance with legal obligations;
• our legitimate interests, such as keeping the Services secure, preventing abuse, improving performance, and supporting users, provided those interests are not overridden by your rights.

06When we share information

We share personal data only as reasonably necessary to operate the Services, comply with law, or protect rights and safety.

6.1 Service providers and processors

We may share data with vendors and processors that help us run the Services, including:

• Supabase, for authentication, database, and related backend services;
• Apple, for Sign in with Apple, App Store purchases, subscription status handling, and related account functionality;
• Google, if you choose Google Sign-In;
• Google Cloud, including Vertex AI, for meal-photo processing such as food identification, portion estimation, and nutrition analysis;
• PostHog (PostHog, Inc.), for the product analytics described in section 2.8. PostHog processes this data in the United States, so it involves a transfer outside the European Economic Area; that transfer relies on the European Commission’s Standard Contractual Clauses. You can stop it entirely with the toggle in the app.
• Sentry (Functional Software, Inc.), for crash and error reporting. When the app encounters an error we send diagnostic data: the error and its stack trace, the app version, the device model and operating system version, and a record of the recent in-app actions that led to it. This is tied to your account identifier so we can tell whether a fault affects one person or many. We remove email addresses, authentication tokens, purchase identifiers, and body measurements from this data before it is sent, and we do not send meal photos, meal descriptions, or nutrition results. Sentry data is processed in the European Union.
• hosting, infrastructure, logging, analytics, and security providers that support our backend systems.

These providers may process personal data on our behalf subject to contractual, technical, and legal safeguards.

6.2 Meal photo processing

To provide meal-analysis functionality, we send meal-related data to our backend systems and third-party cloud processors.

This may include:

• photos or images of meals you choose to capture or upload for analysis;
• text corrections or follow-up photos you submit to adjust an analysis;
• prompts and structured inputs sent to the AI model to generate a nutrition estimate;
• analysis results (identified food, calories, macronutrients, portion size, confidence, reasoning) and related technical metadata.

We use:

• Vertex AI on Google Cloud to analyze meal photos and generate calorie and macronutrient estimates, portion-size estimates, confidence scores, and related model output.

We use these providers to deliver the core functionality of the Services. We do not use meal photos or analysis content for advertising or cross-context behavioral advertising.

6.3 Legal and safety disclosures

We may disclose information if we believe it is reasonably necessary to:

• comply with applicable law, regulation, legal process, or governmental request;
• enforce our Terms or other agreements;
• detect, prevent, or address fraud, abuse, security, or technical issues;
• protect the rights, property, or safety of CaloFlag, our users, or others.

6.4 Business transfers

If we are involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, your information may be transferred as part of that transaction, subject to applicable law.

6.5 Advertising

We have no advertising partners. The app contains no advertising or attribution SDK, requests no advertising identifier, and sends no app events to advertising platforms. We do not sell your personal data and we do not share it for cross-context behavioural advertising.

We never share health data, meal photos, or meal analysis content with advertisers under any circumstances.

07Data retention

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

In general:

• Account data is retained while your account is active.
• Meal log, weight entries, nutrition goals, and related records are retained while your account remains active, unless you delete them earlier where that functionality is available.
• Support communications may be retained as needed to respond to your request, maintain records, and improve support operations.
• Diagnostic, fraud-prevention, and security logs may be retained for a limited period as needed for service reliability, abuse prevention, debugging, and security.

Account deactivation and deletion

The app offers two options under Profile → Account. Deactivate Account disables your account and signs you out while keeping your data, so you can reactivate it later simply by signing in again; your data is not deleted unless you then delete the account or ask us to. Delete Account permanently deletes your account and the personal data in it — your meal log and photos, health data, goals and weight entries — immediately. Deleting your account does not cancel an App Store or Google Play subscription; manage that in your Apple ID or Google Play settings.

If you request account deletion in the app, we will begin the deletion process for your account and associated personal data.

We may retain limited information after deletion:

• for up to 30 days to complete deletion workflows, maintain backups, prevent fraud, or allow technically necessary processing;
• where we are legally required or otherwise permitted to retain specific records;
• for security, abuse prevention, and enforcement purposes, including limited retained records that help us detect repeated account deletion and re-registration used to evade restrictions or obtain the Services without a valid subscription.

This may include a hashed or otherwise pseudonymised identifier derived from account information, such as an email address, rather than retaining the full original account record for this purpose.

When retention is no longer required, we delete or anonymize the data.

08Your rights and choices

Depending on where you live, you may have rights to:

• access the personal data we hold about you;
• correct or update inaccurate information;
• request deletion of your account and personal data;
• request a copy of certain data in a portable format;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent.

You may exercise account-related controls directly in the app where available, including account deletion. You may also contact us at info@caloflag.com.

We may need to verify your identity before completing certain requests.

09Camera, photo library, and health access

The app may request access to your camera and/or selected photos so you can capture or upload meal photos for analysis.

• We only access the camera or photos for meal-analysis functionality you choose to use.
• We do not access your entire photo library unless your device permissions and your actions allow it.
• You can revoke camera or photo permissions at any time in your device settings.
• Health access is separate and optional. On iOS you grant and revoke it per category in the Health app under Sharing, Apps, CaloFlag; on Android you manage it in Health Connect. CaloFlag only reads, never writes, and revoking access stops any further reading immediately.

10International data transfers

Your information may be processed in countries other than the country where you live. Where required by law, we take reasonable steps to provide appropriate safeguards for international transfers.

11Children's privacy

The Services are not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal data to us, contact us and we will take appropriate steps.

12Security

We use reasonable technical and organizational measures designed to protect personal data, including measures such as encryption in transit, access controls, authentication protections, and secure service providers.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13California and similar U.S. privacy disclosures

If you are a California resident or live in another U.S. state with privacy rights, you may have additional rights under applicable law, including rights to know, delete, correct, or access certain information.

We do not sell personal information and we do not share personal information for cross-context behavioural advertising. The app has no advertising partners. Website analytics cookies on caloflag.com are off until you accept them in the consent banner.

To submit a privacy request, email info@caloflag.com.

14Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date and, where required, provide additional notice in the app or by other appropriate means.

15Contact us

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact:

Email: info@caloflag.com

Website: https://caloflag.com