Privacy Policy

Last updated: January 22, 2025

1. Introduction

CaloriGram ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect information about you when you use our mobile application.

2. Data We Collect

When using CaloriGram, we may collect the following types of data:

2.1. Personal Data

• Account Information: Email address, username, phone number (when registering via phone)
• Profile Data: Name, age, gender, height, weight
• Health Data: Activity level, goals (weight loss, weight maintenance, weight gain), target calories and macronutrients (proteins, fats, carbohydrates)

2.2. Nutrition Data

• Meal information (name, time, calories, proteins, fats, carbohydrates)
• Weight history
• App usage statistics (number of days used, total number of meals)

2.3. Media Data

• Food photos that you take or select from your gallery for calorie and nutrient analysis
• Profile avatars (stored locally on device)

2.4. Subscription Data

• Subscription type (trial, premium)
• Subscription expiration date
• Transaction information through App Store (processed by Apple, we only receive subscription status)

2.5. Health Data

• HealthKit steps, activity and weight data if you choose to enable Health access
• Health data is used for nutrition recommendations and is not used for advertising, marketing, or data mining

2.6. Technical Data

• Device tokens for push notifications (if permitted)
• Device and app usage information

3. How We Use Your Data

We use the collected data for the following purposes:

• Service Provision: Calculate target calories and macronutrients based on your profile data
• Nutrition Analysis: Analyze food photos, meal descriptions, chat messages and nutrition preferences using artificial intelligence technologies to estimate calories and nutrients
• Progress Tracking: Maintain nutrition diary, statistics, achievements
• Notifications: Reminders about meals and goal achievements (if permitted)
• Subscription Management: Process and manage Premium subscriptions
• Service Improvement: Analyze app usage to improve functionality

4. Data Sharing

4.1. Service Providers

• Supabase: We use Supabase to store and process your data. Supabase ensures secure data storage in accordance with their privacy policy.
• OpenAI and AI providers: We may use third-party AI providers, including OpenAI, to process food photos, meal descriptions, chat messages and nutrition preferences only to provide app features. OpenAI API data is not used to train models by default unless we explicitly opt in. Provider abuse-monitoring or application logs may be retained according to provider terms, privacy policies and our account configuration.
• Apple: When using subscriptions through App Store, Apple processes payments and manages subscriptions in accordance with their privacy policy.

4.2. We DO NOT Sell Your Data

We do not sell, rent, or transfer your personal data to third parties for their marketing purposes.

4.3. Legal Requirements

We may disclose your data if required by law or to protect our rights and security.

5. Data Protection

• Encryption: Data is transmitted over secure HTTPS connection
• Authentication: Data access is protected by authentication tokens
• Secure Storage: Data is stored on secure Supabase servers
• Local Storage: Sensitive data (access tokens) is stored in secure iOS Keychain storage

6. Your Rights

You have the following rights regarding your personal data:

• Right to Access: You can request a copy of your personal data
• Right to Rectification: You can update your data in the app profile settings
• Right to Deletion: You can delete your account and all associated data through app settings
• Right to Export: You can request export of your data
• Right to Withdraw Consent: You can withdraw consent for AI processing in the app profile settings. Future AI requests will be blocked until you agree again.

7. Data Retention

We store your data as long as your account is active, or as long as necessary to provide services. When you delete your account, your data will be deleted within 30 days, except when the law requires longer retention.

8. Children's Data

CaloriGram is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with data, please contact us.

9. Changes to Privacy Policy

We may periodically update this privacy policy. We will notify you of any significant changes by posting the new privacy policy in the app and updating the "Last updated" date.

10. Contact Information

11. Jurisdiction

This privacy policy is governed by the laws of the Russian Federation. Any disputes will be resolved in accordance with applicable law.