Privacy policy.

1. Who operates CaloRep AI

The legal operator and data controller will be identified here before release. A verified postal address is pending.

The legal grounds for processing and regional rights procedures are pending review before release.

2. Information you provide

Depending on the features you use, CaloRep handles:

• Account identity information supplied through sign-in, such as a display name, email address and authentication-provider identifier. A profile photo if you choose to add one. The app implements Apple, Google and Microsoft sign-in; availability depends on platform and build.
• Profile and goal information, including age or date of birth, sex if supplied, height, weight, activity level, body measurements and calorie and macro targets.
• Food diary entries, meals, saved foods, recipes, recurring schedules, and associated images.
• Workout routines, exercises, completed sets, training history and related progress information.
• Preferences such as theme, language and measurement units.

These records are used to provide tracking, personalization, calculations, history and account synchronization. Nutrition, body measurements and training records can contain sensitive health-related information.

3. Device and cloud storage

The app keeps a working copy of records on your device. Account data and associated media synchronize to cloud services. Offline edits remain on your device until they can be uploaded. Signing out keeps local account data on that device, separated from other accounts.

Exports and recovery backups you save or share are also copies of your personal data. Recovery archives are not encrypted by the app. Keep them in a private location.

4. AI, photos and audio

When you choose an AI feature and accept its processing notice, the text, selected images or audio needed for that request are processed through CaloRep’s service and Microsoft Azure AI. This supports food interpretation, nutrition estimates, dictation and other requested AI functions. AI proposals require your review before they are added to the diary.

Background AI logging temporarily retains submitted input while processing and structured results for review. Temporary results expire after 24 hours and are cleared by a background cleanup process. This is not a guaranteed erasure deadline and does not apply to food records or photos you choose to save in your library.

The production AI provider’s processing terms, retention and any use of submitted information to improve its services must be confirmed before release.

You can avoid submitting photos or audio by using manual food logging. Device permissions can be changed in system settings. An in-app control to withdraw previously accepted AI processing consent has not yet been verified; the final policy must explain that process.

5. Permissions and service providers

Camera and photo access support the images you choose to capture or attach. Microphone access supports voice features. Notification permissions support workout cues and notifications, including AI result notifications where enabled. You can review access under Profile → Settings → Privacy & AI → Permissions and in your device settings.

CaloRep uses Microsoft Azure for cloud storage, database services and AI, and Expo for push notification delivery. Sign-in providers process authentication when you use their respective sign-in options. Operational records include installation and session information used to authenticate, synchronize and operate the service, as well as a push notification token when notifications are enabled.

Production hosting locations and safeguards for any international transfers have not yet been confirmed.

6. Exports, corrections and deletion

You can edit records in the app. Profile → Settings → Your data includes Download my data for a readable export. The export identifies whether it includes cloud and device records or only device records.

A legacy anonymous cloud identity can request cloud deletion from Profile → Settings → Privacy & AI when its deletion control is shown. Registered-account deletion is not currently exposed there. See account deletion information for the current status and limitations.

The current cloud deletion process removes account records, associated media and generated exports. A limited deletion record remains to help prevent deleted data from being restored. Cloud deletion does not erase local device copies or backups you previously exported.

Retention periods for account records, saved media, operational logs and backups remain to be established before release. The retention period for the limited deletion record is also unconfirmed.

7. Your rights

Depending on your location, applicable law may provide rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, and complain to a supervisory authority. The final policy will identify the responsible controller and the process for exercising applicable rights.

The privacy contact below will provide a way to ask about these rights once a monitored contact is confirmed. No request is submitted by viewing this page.

8. Security and age eligibility

The production security statement, including protection during transfer and storage and access safeguards, is pending verification before release. Recovery archives you export are not encrypted by the app.

Age eligibility and the treatment of children’s information have not yet been finalized. No minimum age or children’s privacy practice is established by this draft.

9. This website and policy updates

This website has no contact form, advertising tracking or analytics integration. If you choose a theme, your browser stores that preference on your device; it is separate from your app account. Hosting providers may handle ordinary connection records; production hosting practices must be confirmed before release.

The effective date appears above once the policy is finalized. Changes to the app’s data practices will require this policy and the store privacy disclosures to be reviewed together.