Privacy Policy

1. Who we are and what this policy covers

Calobook ("Calobook", "we", "us", "our") develops and operates the Calobook mobile application (the "App") and the website at calobook.app (the "Site"). Together we call them the "Service". Calobook is the data controller (the party that decides how and why your personal information is processed) for the information described in this policy.

This policy covers information we collect through the App and the Site. It does not cover services we do not operate, such as the Apple App Store, Google Play, Apple Health, or third-party websites that recipes link to. Those services have their own privacy policies.

Some of the information you give Calobook is health information. Section 3 explains how we treat it and the consent we rely on. If you do not agree with this policy, please do not create an account.

2. Information we collect

We collect information in three ways: you give it to us, the App collects it automatically, and a small number of third parties send it to us on your instruction.

2.1 Information you give us

Account details

Your email address and a password (if you sign up with email), or the identifier, email address and display name shared by Apple or Google when you sign in with them. Apple may give us a private relay address instead of your real email. Passwords are hashed by our authentication provider; we never see or store them in plain text. Your profile picture URL is stored if Google provides one.

Your first name

Entered during setup so the App can address you. A first name is enough and it is optional in the sense that you may enter anything you like.

Plan setup answers

Gender, age, height, current weight, target weight, weekly pace, your goal, what you want your food to support (for example heart, blood sugar, kidneys), chronic conditions and an optional note, current conditions including pregnancy and breastfeeding and an optional note, food allergies and intolerances and an optional note, the diet you follow, cuisines you enjoy, what you want to accomplish, your biggest obstacle, how many workouts you do a week, whether you play a sport and which ones, your preferred units, and how you heard about us.

Your plan

The daily calorie, protein, carbohydrate and fat targets calculated for you, the daily guardrails (fiber, added sugar, saturated fat, sodium, water, steps), your BMI, a health score, your target date, the notes and rationale written by the AI dietitian, and the results and history of every weekly check-in.

What you log

Meals (name, serving, number of servings, calories, protein, carbohydrates, fat, fiber, sugar, sodium, ingredients, how the meal was logged, and the time), water, steps, workouts (type, intensity, duration, calories, and the free-text description you write if you use the AI estimate), and weigh-ins.

Photos

Meal photos and nutrition label photos you take with the camera or choose from your photo library. They are processed to produce a nutrition estimate and are not stored by Calobook. Section 5 explains exactly what happens to them.

Barcodes

The barcode value you scan on a packaged product, together with its symbology and your device's region setting, which are needed to look the product up.

Notification preferences

Which reminders you want (water, walk, calories, weekly review), the times you chose, your quiet hours and your daily limit.

Support correspondence

Anything you send us by email, including your email address and the content of the conversation.

2.2 Information collected automatically

Device and app information

Platform (iOS or Android), app version, device model name, time zone, language and region. A random installation identifier is generated on your device and stored locally.

Push notification token

If you allow notifications, the token Apple or Google assigns to your device so reminders can be delivered, plus a record of each reminder we sent (date, type, title and text). Reminders are calculated on our server from what you logged that day, in your time zone.

Subscription status

Whether you have an active Calobook Pro trial or subscription, the product you bought, and purchase, renewal and expiry dates, as reported by Apple or Google through our subscription provider. We never receive your card number or billing address.

Usage analytics

Unless you switch analytics off in Profile, the App reports how it is used: screens viewed, taps, the App being opened or closed, and product events such as completing a setup step, logging a meal, viewing the paywall or connecting Apple Health. Event properties can include the answer you gave to a setup step (for example your goal or a condition you selected), a meal's calorie total and how it was logged, a fit score and verdict, your calorie target before and after a weekly check-in, the subscription plan you chose and its price, and whether you are a subscriber. Our analytics provider also records a device identifier, operating system and app version, crash and error reports, and an approximate location (country and city) derived from your IP address. When you are signed in these events are linked to your account identifier and email address.

Server logs

Requests to our backend are logged with the IP address, time, endpoint and outcome so we can keep the Service secure and troubleshoot problems.

2.3 Information from third parties

Sign in with Apple and Google

An identifier, your email address (or Apple's private relay address) and your name, as permitted by your settings with those providers.

Apple Health

Your daily step count for today and the previous seven days, only after you grant permission. See section 6.

App Store and Google Play

Purchase and subscription state, delivered through RevenueCat. See section 7.

3. Health and sensitive information

Much of what makes Calobook useful is sensitive: your weight and BMI, chronic and current conditions, pregnancy or breastfeeding, allergies, a diet that may reflect a religious practice, and step data from Apple Health. Laws such as the GDPR call this "special category data", and US state laws call it "sensitive personal information". We treat all of it the same way:

• We process it only with your explicit consent, which you give when you answer the setup questions. Every health question offers a "none" option, notes are optional, and you can change any answer later under Profile, Edit plan and goals.
• We use it only to provide the Service you asked for: to calculate and tune your targets, to score how a meal fits you, to keep unsafe foods out of your recipes, and to protect your plan (for example, no calorie deficit while pregnant or breastfeeding).
• We never sell it, use it for advertising, share it with data brokers, or use it to make decisions that have legal or similarly significant effects on you.
• It is stored only with the infrastructure providers listed in section 7 that act on our instructions, and it is sent to our AI providers only in the specific requests described in section 5.
• You can withdraw consent at any time by deleting your account in the App, which removes the data. Withdrawing consent does not affect processing that took place before you withdrew.

4. How we use information

We do not use your information for third-party advertising, we do not show ads, and we do not build profiles of you for anyone other than yourself. We do not sell personal information.

5. AI features and how they process your data

Calobook uses large language models for four things. In every case the request is made from our own server-side function, never directly from your phone to an AI company, and our function verifies that you are signed in before it does anything.

Meal and label scanning

The photo you take (as image data) and a fixed instruction asking the model to estimate the nutrition it can see, or to read the printed label. The response becomes the editable draft you review before saving. The photo itself is not written to our database or to any storage bucket; it exists on your device and, for the duration of the request, in the request to the model provider.

Workout estimates

The description you type ("45 minutes of tennis, then a 20 minute walk home") and your body weight, so the model can estimate calories burned.

Your plan and its notes

Your setup answers (body, goal, pace, training, diet, health focus, conditions, allergies) and the targets calculated on your device, so the AI dietitian can write your notes and rationale and adjust guardrails to your conditions.

Fit score and recipe curation

For a fit score: your profile as text labels, your daily targets, and the meal's nutrition numbers, name, serving, ingredients and source. For recipes: constraints derived from your profile (allergies as intolerances, diet, calorie window, nutrient caps, cuisines) so the model can shape a search. Your name, email address and account identifier are not included in these requests.

Requests are routed through OpenRouter, Inc. (United States) to the model provider selected for that feature, which today is OpenAI, Google or Z.ai depending on the task. These companies process the request to produce a response, under their own privacy policies (linked in section 7). We do not use your data to train AI models, and we do not permit our AI providers to use it for advertising. What Calobook keeps is the result: the meal entry, workout, plan or recipe list you decide to save.

AI output is an estimate. The App tells you when the model is unsure rather than guessing, and lets you correct any value before it is saved. AI processing does not produce decisions with legal or similarly significant effects on you. If you prefer not to have a photo analysed, log the meal by barcode or by hand; barcode lookups use food databases, not AI.

6. Apple Health and Health Connect

If you choose to connect Apple Health, Calobook asks iOS for permission to read your step count only. When granted, the App reads your daily totals for today and the previous seven days and, with background delivery enabled, keeps today up to date while the App is closed. The daily totals are stored in your account so they appear on your Home screen, count toward your calories burned, and feed your weekly check-in.

• Calobook never writes to Apple Health and reads no other Health data type.
• Health data is not used for advertising or marketing, is not sold, and is not shared with third parties other than our hosting provider (Supabase) storing it as part of your account. It is never included in analytics events or sent to AI providers as raw Health data; only the daily step totals that also appear on your screen are used to estimate calories burned.
• You can revoke access at any time in the Health app under Sharing, Apps, Calobook, or stop syncing under Profile, Track steps with Apple Health. Totals already stored remain in your account until you delete your account.

Step syncing on Android through Health Connect is planned. When it launches, it will follow the same principles: read-only, steps only, revocable, and never used for marketing.

7. Who we share information with

We share personal information only with the service providers below, who process it on our instructions to run Calobook, and in the limited situations listed after the table. We do not sell personal information and we do not share it for cross-context behavioural advertising.

We may also disclose information:

• To comply with the law, for example in response to a court order or lawful request by a public authority, or when we believe disclosure is necessary to protect the rights, safety or property of Calobook, our users or others.
• In a business transfer, if Calobook is involved in a merger, acquisition, financing or sale of assets. We will notify you before your information becomes subject to a different privacy policy.
• With your direction or consent, for example when you choose to open a recipe's original website.

8. International data transfers

Our providers operate mainly in the United States, so your information is stored and processed there, and may be processed in other countries where those providers or their sub-processors operate. If you live in the European Economic Area, the United Kingdom or Switzerland, these countries may not offer the same level of data protection as your home country. Where that is the case we rely on recognised safeguards: the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or the provider's certification under the EU-US Data Privacy Framework and its UK and Swiss extensions. You can request a copy of the relevant safeguards by contacting us.

9. How long we keep information

Data on your device (your session, preferences and a 72-hour record of your last known subscription state) is removed when you sign out, delete your account or uninstall the App.

10. Your rights and choices

10.1 In the App

• Correct your answers: Profile, Edit plan and goals. Your plan is rebuilt from the updated answers.
• Edit or delete a log: open any meal, workout or weigh-in and use Edit or Delete.
• Analytics: Profile, Share usage analytics. Switching it off stops analytics collection on that device.
• Reminders: Profile, Notifications, or your device's notification settings.
• Apple Health: Profile, Track steps with Apple Health, Stop syncing steps, or revoke in the Health app.
• Camera and photos: permissions live in your device Settings and can be revoked any time. The App still works with manual entry.
• Delete your account: Profile, Delete account. If you never subscribed, the same option is on the subscription screen. Deletion is immediate and cannot be undone. See calobook.app/delete-account.

10.2 By contacting us

Depending on where you live you may have the right to access, receive a copy of, correct, delete, or restrict or object to our processing of your personal information, to withdraw consent, and to complain to a supervisory authority. Regardless of where you live, we extend these rights to everyone:

• Access and portability: email us and we will send you a copy of your data in a machine-readable format (JSON) within 30 days.
• Deletion: if you can no longer access the App, email us from the address on your account and we will delete it for you.
• Objection and restriction: tell us what you object to and we will respond within 30 days.

To protect your account we will verify requests by asking you to write from the email address registered to it, or by asking for information only the account holder would know. An authorised agent may act for you if they show they have your permission. We will not discriminate against you for exercising any right.

We do not send marketing emails. The only emails you receive from Calobook are the ones needed to run your account (confirmation, password reset) and replies to your own messages.

11. Security

We design Calobook so that a mistake in one place cannot expose everyone's data:

• All traffic between the App, our servers and our providers is encrypted in transit with TLS. Data is encrypted at rest by our hosting provider.
• Every database table enforces row-level security: a signed-in user can only read or change rows that belong to them, and the rule is enforced by the database itself, not just the App.
• API keys for AI, food and recipe providers live only on our servers. The App never holds a paid key.
• Your session is stored in your device's secure keychain, optionally protected by Face ID or Touch ID.
• Payments are handled entirely by Apple and Google. Calobook never sees card details.

No system is perfectly secure. If we learn of a breach that affects your personal information we will notify you and the relevant authorities as required by law.

12. Children

Calobook is not directed to children. You must be at least 16 years old to create an account, and the App will not accept a lower age during setup. We do not knowingly collect personal information from anyone under 16. If you believe a child has created an account, contact us and we will delete it.

13. The calobook.app website

This website is a static site hosted by Netlify. It sets no cookies, runs no analytics or tracking scripts, and loads no third-party fonts or embeds. Netlify records standard server logs (IP address, browser type, pages requested) to serve the site securely, and retains them for a short period under its own policy. If you email us from the site, we receive what you send. Because the site does not track you, browser signals such as Global Privacy Control and Do Not Track are honoured by default.

14. Regional disclosures

14.1 European Economic Area, United Kingdom and Switzerland

Calobook is the controller of your personal data. The legal bases we rely on are listed in section 4; for health data we rely on your explicit consent (GDPR Article 9(2)(a)). You have the right to access, rectify, erase, restrict and port your data, to object to processing based on legitimate interests, to withdraw consent at any time without affecting prior processing, and to lodge a complaint with your local data protection authority. We do not make automated decisions about you that produce legal or similarly significant effects.

14.2 California and other US states

In the past 12 months we have collected the following categories of personal information, for the purposes in section 4: identifiers (email, account identifier, device identifier, push token); personal characteristics and sensitive personal information (health conditions, pregnancy, allergies, weight, dietary practices); commercial information (subscription status); internet and app activity (usage analytics); approximate geolocation derived from IP address; and inferences (your plan and fit scores). Sources and recipients are described in sections 2 and 7.

We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is no "sale" or "sharing" to opt out of. We use sensitive personal information only to provide the Service you requested and for the purposes permitted by law, which means the right to limit its use does not require any action on your part. You have the right to know, access, correct and delete your personal information, and the right not to be discriminated against for exercising these rights. Exercise them in the App or by contacting us as described in section 10; we respond within 45 days.

14.3 Other regions

If you live somewhere else, such as Brazil, Canada or Australia, you may have similar rights under local law. The options in section 10 are available to everyone, and we will honour requests as your local law requires.

15. Changes to this policy

When we change this policy we update the date at the top and, for material changes, tell you in the App or by email before the change takes effect. Where a change would require new consent, for example a new use of health data, we ask for it. Earlier versions are available on request.

16. Contact us

Questions, requests and complaints about privacy go to the Calobook team. Write "Privacy" in the subject line and we will get back to you within 30 days, usually sooner.