Privacy Policy

Introduction

Welcome to CalTracker. We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect the information you provide when using our mobile application ("CalTracker" or "the App").

By using CalTracker, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the app.

Data Controller

The data controller responsible for your personal data is:

Data We Collect

CalTracker collects the following types of data to provide and improve the service:

1. Authentication Data

When you sign in with Google or Apple, we receive your name, email address, and a unique user ID. This is used to create and manage your account securely.

2. User Profile Data

Your profile information including display name, profile picture (if provided), and app preferences such as language, theme, and notification settings.

3. Nutrition & Meal Data

Meal entries including food names, calorie values, macronutrient data (protein, carbs, fat), meal timestamps, and optional food photos used for AI scanning. This data is essential for the core functionality of the app.

4. Weight & Health Data

Weight entries, body measurements, and health data synced from your device's health platform (Google Health Connect / Apple Health), if you have granted access. This data is used to display weight trends and calculate nutritional insights.

5. Water Intake Data

Daily water intake logs including amounts and timestamps, used to track hydration goals.

6. Activity & Fitness Data

Step counts, active calories burned, and workout history synced from Google Health Connect or Apple Health (if you grant access), plus intermittent fasting sessions and history you log in the app.

7. Referral Program Data

If you use the referral program, we store your referral code and how many times it has been redeemed, so we can grant the bonus AI scans to you and the people you refer.

8. Push Notification Token

If you enable notifications, we store a device push token (via Firebase Cloud Messaging) used to deliver meal, water, weight, streak, and referral-reward notifications. You can disable notifications in the app or your device settings at any time.

9. App Usage & Analytics

We collect anonymized usage analytics to improve the app experience. This includes feature usage patterns, crash reports, and general performance metrics through Firebase Analytics and Firebase Crashlytics.

Data Storage & Security

Your data is stored securely using the following services:

• Firebase Authentication — Manages user sign-in and identity securely.
• Cloud Firestore — Stores your nutrition, weight, water, and profile data in Google's secure cloud infrastructure.
• Firebase Storage — Stores uploaded images such as food photos for AI scanning.
• Firebase Analytics & Crashlytics — Collects anonymized performance and crash data.
• Firebase Cloud Messaging — Delivers push notifications to your device.
• OpenAI — Processes food photos, descriptions, and web-search-assisted lookups you submit to the AI scanner to generate nutrition estimates. Images and text are sent to OpenAI's API for this purpose only; OpenAI does not use API data to train its models.

All data is transmitted over encrypted connections (TLS/SSL). We use industry-standard security practices to protect your information.

Purpose of Data Processing

We process your data for the following purposes:

• Providing calorie, macro, water, and weight tracking functionality.
• AI-powered food recognition and nutritional analysis.
• Generating personalized statistics, insights, and deficit calculations.
• Syncing your data across devices via your account.
• Sending smart meal, water, weight, streak, and referral-reward notifications (if enabled).
• Operating the referral program and granting bonus AI scans.
• Improving the app through anonymized analytics.
• Processing in-app purchases via RevenueCat.

Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of Access — Request a copy of the personal data we hold about you.
• Right to Rectification — Request correction of inaccurate personal data.
• Right to Erasure — Request deletion of your personal data ("right to be forgotten").
• Right to Data Portability — Export your data in a structured, machine-readable format (CSV export).
• Right to Object — Object to certain types of data processing.
• Right to Restrict Processing — Request that we limit the processing of your data.

To exercise any of these rights, contact us at caltracker.track@gmail.com.

Data Deletion & Retention

You can delete your data at any time:

• Delete specific data — Remove individual meal entries, weight logs, or water records directly in the app.
• Delete your account — Go to Settings → Account → Delete Account (re-authentication required). This immediately and permanently removes your account and data from our active servers.
• Request via email — Contact caltracker.track@gmail.com to request data deletion.

Account deletion takes effect immediately and cannot be undone. Backup copies may be retained for up to 90 days. Anonymized analytics data may be retained for up to 14 months.

Children's Privacy

CalTracker is not intended for children under the age of 13 (or under 16 in the EU/EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately and we will take steps to remove that information.

Website Cookies, Analytics & Advertising

This section applies to our website (caltracker.eu), separately from the mobile app described above. When you visit our website, we use cookies and similar technologies for statistics and advertising. These services are only activated after you give your consent via our cookie banner. You can decline, in which case none of these services are loaded and no related cookies are set. You can withdraw your consent at any time by clearing your browser's site data for this website, which will make the banner appear again.

• Google Analytics (GA4) — Helps us understand how visitors use our website (such as pages viewed, approximate location, and device type) so we can improve it.
• TikTok Pixel — Measures the effectiveness of our advertising on TikTok. It records when visitors take certain actions on our website, such as clicking a download button, so that we can attribute and optimize our ad campaigns. The TikTok Pixel may set cookies and share data (including your IP address and the actions you take) with TikTok.

The legal basis for this processing is your consent (Art. 6(1)(a) GDPR). Because the app store install itself happens on Google Play or the App Store, we do not receive information about whether you ultimately install the app.

Third-Party Services

CalTracker integrates with the following third-party services. Each has its own privacy policy:

• Google Play Services
• Apple (Sign in with Apple, App Store, Apple Health)
• Firebase (Analytics, Crashlytics, Auth, Firestore, Storage, Cloud Messaging)
• OpenAI (AI Food Recognition)
• Google Analytics (Website)
• TikTok (Advertising Pixel — website only)
• RevenueCat (In-App Purchases)
• Open Food Facts (Barcode Database)

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated effective date. We encourage you to review this page periodically to stay informed about how we protect your data.