1. Who we are
CalorieCat ("CalorieCat," "we," "us") provides an AI-assisted food, nutrition, weight, and hydration tracking service. For privacy questions or requests, contact [email protected].
2. Information we process
- Account and identity: an internal or guest user identifier, authentication token, and, if you connect an account, the sign-in provider identifier and email address supplied by that provider.
- Profile and wellness information: gender, birth year, height, current and goal weight, activity level, calorie and hydration goals, and time zone.
- Meal and AI analysis: food photos, capture time, meal title and notes, recognized food names, calories, serving weight, nutrients, and AI confidence or error information.
- Logs: weight and water entries and their timestamps.
- Purchases: product, entitlement, subscription status, expiry, store environment, and a RevenueCat app user identifier. Apple or Google processes your payment credentials; we do not receive or store your full card number.
- Notifications and device information: notification choices, reminder times, time zone, platform, and push notification token when notifications are enabled.
- On-device data: the app keeps a local snapshot of your profile and records, media files, and a securely stored authentication token so features can work reliably.
We do not currently use advertising identifiers, precise location, contacts, or third-party advertising trackers.
3. Why we use information
- Provide, synchronize, and secure your account and records.
- Analyze food photos and calculate nutrition estimates.
- Show trends, goals, reminders, and personalized service results.
- Verify purchases and manage CalorieCat Pro access.
- Send requested notifications and respond to support requests.
- Prevent abuse, troubleshoot failures, and meet legal obligations.
Where consent is required, you may withdraw it through the relevant app or device setting. Some core features cannot work without the information necessary to provide them.
4. Service providers and international processing
We disclose only the information needed for the following providers to perform services for CalorieCat. Information is transferred electronically using encrypted connections when you use the relevant feature.
| Provider | Information and purpose | Processing location and retention |
|---|---|---|
| OpenAI | Food photo and analysis request, to produce a food and nutrition estimate. | United States and other provider processing regions; retained only as allowed by our service arrangement and applicable law. |
| RevenueCat | Internal app user ID, product and purchase status, to verify and manage entitlements. | United States and other provider processing regions; retained for service operation and transaction records. |
| Google Firebase | Push token, platform and notification payload, to deliver enabled notifications. | United States and global infrastructure; retained while the token remains active or until deletion. |
| Amazon Web Services | Account and service data, to host the API and database. | Republic of Korea (Seoul region); retained as described in Section 5. |
| Cloudflare | Network request and security metadata, to provide DNS, delivery and network protection. | Global network locations; retained under Cloudflare's service settings and legal obligations. |
| Apple / Google | Store account and transaction information, to process app distribution, purchases, refunds and subscriptions. | Locations selected by the store provider; retained under the provider's terms and legal obligations. |
If you do not want a feature-specific transfer, do not use that feature. This may prevent food-photo analysis, notifications, sign-in, or purchase verification from working.
5. Retention and deletion
We keep account and service information while you use CalorieCat or as needed to provide the service. You may request account and data deletion by emailing [email protected]. We may ask for reasonable verification before acting on a request.
When a valid deletion request is completed, we delete or de-identify information from active systems unless retention is required for tax, accounting, dispute, fraud-prevention, or other legal obligations. Residual copies may remain temporarily in protected backups until overwritten under the backup lifecycle. Store transaction records may remain with Apple, Google, or RevenueCat under their separate obligations.
Deleting an individual meal removes its server-side meal record and photo. A device copy or cache may remain until you clear app storage or uninstall the app.
6. Security
We use encrypted network connections, access controls, and secure token storage designed to protect information. No system is completely secure, and we cannot guarantee absolute security.
7. Children
CalorieCat is intended for people aged 14 or older. We do not knowingly seek personal information from children under 14 without legally valid guardian consent. If you believe a child has provided information improperly, contact us so we can review and delete it.
8. Your rights and choices
Subject to local law, you may request access, correction, deletion, restriction, objection, withdrawal of consent, or a portable copy of your information. You may edit profile data in the app, delete individual records, turn notifications off in the app or device settings, and manage purchases through Apple or Google.
Send requests to [email protected]. You may also complain to the privacy regulator in your country.
9. Policy updates
We may update this policy when the service or law changes. We will post the revised version here with a new effective date and provide additional notice when required.