Calorite AI Calorie Tracker ("Calorite," "the App," "we," "us") is developed and operated by an individual developer, not a registered company. This policy explains what data the App collects, why, and the controls you have over it. It is written in plain language; where a term matters legally (e.g. "process," "share"), we've tried to be precise rather than vague.
1. Information we collect
We collect the following categories of information when you use the App:
Account information: email address and authentication data, handled via our backend provider (Supabase Auth).
Profile information: display name and, if you choose to add one, a profile photo.
Meal photos: images you capture or upload to log food, along with any bounding-box corrections or edits you make to AI-generated results.
Health and fitness data: date of birth, sex, height, weight (current and target), activity level, weight, calorie and macro targets, logged meals, and weekly calorie budget history that you enter or that the App calculates.
Preferences: unit preferences (weight, height, water), water and step goals, timezone, in-app language, and dietary restrictions.
HealthKit / Health Connect data: workout and activity data imported from Apple Health or Health Connect, but only for the specific features you explicitly enable. We request only the data types those features need (read-only — we never write data back to your device's health platform), and you can revoke access at any time from your device's health-data settings.
Voice input: if you use voice-based meal logging, your device's speech-recognition framework converts speech to text locally/via the platform API; we receive and process only the resulting text, not an audio recording.
Barcode scans: product barcodes you scan to look up nutrition info, used only to perform that lookup.
Squad (social) data: if you join or create a Squad, the meals and streak activity you explicitly choose to share with that Squad, and equivalent content other members share with you.
Subscription and purchase data: subscription status and entitlements, managed through RevenueCat and the Apple App Store / Google Play billing systems. We do not receive or store your payment card details — those are handled entirely by Apple/Google.
Usage and diagnostic data: crash reports and error/performance telemetry (via Sentry) and product-analytics events (e.g. photo capture → save → edit) used to fix bugs and measure whether core features are working, not for advertising. This telemetry may include your device state and IP address as part of standard crash/error context.
The App also requests device permissions for the camera and photo library (meal photos), microphone and speech recognition (voice logging), and local notifications (meal reminders and streak notifications) — each only to power the specific feature it's tied to, and only after you grant that permission.
2. How we use your information
AI meal analysis: meal photos are sent to our AI vision providers (Google Gemini, with GPT-4o-mini as an automatic fallback) to identify food items, estimate portions, and flag likely hidden fats/oils. These providers process the image to return results to the App; they are not permitted to use your photos to train their general-purpose models under our usage terms with them.
AI food search: when you describe a food in your own words instead of browsing the database, that text query is sent to the same AI providers (GPT-4o-mini, with Gemini as a fallback) to parse it into a food match. The same no-training terms apply.
Nutrition lookup: identified food items are matched against the USDA FoodData Central database to compute calorie and macro estimates.
Core app functionality: storing your diary history, calculating your weekly calorie bank, and syncing your data across your devices.
Squad features: displaying shared meals and streaks to the Squad members you've chosen to share with — and only those members.
Subscription management: verifying Premium entitlement status via RevenueCat so paywalled features unlock correctly.
Product improvement: aggregated, non-identifying analytics to understand which features are used and where the AI's accuracy needs improvement.
We do not use your meal photos, health metrics, or diary data for advertising, and we do not sell this data to third parties, ever.
3. Third-party service providers
We rely on the following processors to operate the App. Each receives only the data necessary to perform its function:
Supabase — database, authentication, and encrypted file storage for meal, weight, and profile photos.
Google Gemini API and OpenAI API (GPT-4o-mini fallback) — AI-based analysis of meal photos, voice transcripts, and natural-language food search queries.
USDA FoodData Central API and Open Food Facts — nutrition database lookups, including barcode-scanned products.
RevenueCat — subscription and entitlement management.
Sentry — crash reporting and performance monitoring.
Apple (App Store, HealthKit) and Google (Play Billing, Health Connect) — platform billing and, where you opt in, health/activity data.
4. Data sharing
Within a Squad, other members only ever see what you explicitly choose to share (see §5.3 of our product design) — nothing is shared by default. We do not share your data with data brokers or advertisers. We may disclose information if required by law, to enforce our Terms of Service, or to protect the rights, safety, or property of our users or the public.
5. Data retention
Meal photos and diary history are retained for as long as your account is active, so you retain a full history of your logging. You can permanently delete your account and its data at any time from Profile → Delete Account; this immediately revokes your authentication and deletes your profile, weight, meal, and diary data, and removes your uploaded photos (profile, meal, meal-template, and weight photos) from storage.
Community content exception: if you've contributed content to a community feature (for example, a shared meal template visible to other users' searches, or a Squad you created), that content isn't deleted along with your account — deleting it would remove it from other users' search results or dissolve a Squad they're still using. Instead, before your personal data is purged, the content is reassigned to a placeholder "Deleted User" account with no name, photo, or email attached, so it keeps working for everyone else while your personal identity is fully removed from it. Your own private, unshared logs and templates are deleted normally, not reassigned.
6. Your rights and controls
Regardless of where you live, you can from within the App:
Export a full copy of your data (JSON format).
Permanently delete your account and all associated data.
If you are in the EU/UK (GDPR) or California (CCPA/CPRA), you additionally have the right to access, correct, restrict, or object to processing of your personal data, and the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us at support@calorite.ai.
7. Data security
Data is encrypted in transit (TLS) and at rest. Meal photo storage is access-controlled so that only you — and, for anything you've explicitly shared, your Squad — can access your photos.
8. Children's privacy
The App is not directed to, and we do not knowingly collect personal information from, children under 13 (or the minimum age required by your country of residence). If you believe a child has provided us with personal information, contact us and we will delete it.
9. International data transfers
Our service providers may process data in the United States or other countries outside your own. Where required, we rely on those providers' standard contractual safeguards for cross-border transfers.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above, and where required, we'll provide additional notice in the App.
11. Contact us
Questions, requests, or concerns about this policy or your data: support@calorite.ai.