Privacy Policy

CaloriApp

Last updated: July 27, 2026

This Privacy Policy explains what data the CaloriApp application (the "App") collects, how it is used, with whom it is shared, and what rights you have. By using the App, you agree to the terms of this Policy.

1. Data We Collect

Account data (upon registration or sign-in):

• Email address and name;
• When signing in with Google — the Google account identifier, name, email, and profile picture URL provided by Google.

Profile data (optional, used to calculate your calorie target):

• Sex, age, height, weight;
• Goal (lose weight / maintain / gain weight) and daily calorie target.

Nutrition data:

• Food photos you upload for analysis;
• Text descriptions of meals you enter for analysis without a photo;
• Analysis results (calories, protein, fat, carbohydrates, composition);
• Food diary entries and favorite meals.

Technical data:

• IP address — used for rate limiting and abuse protection;
• Server logs (request metadata) — for diagnostics and security.

2. How We Use Data

• Food analysis: photos and text descriptions are processed using artificial intelligence to identify the dish and its nutritional value;
• Diary: storing your nutrition history and calculating daily statistics;
• Personalization: calculating your daily calorie target based on profile data;
• Security: abuse protection and rate limiting.

3. Sharing Data with Third Parties

OpenAI (USA). To analyze food, uploaded photos and text descriptions of meals are sent to the OpenAI service located in the USA. This constitutes a cross-border transfer of data outside the country where our server is hosted. Under OpenAI's API terms, the transferred data is not used to train models. Learn more in the OpenAI Privacy Policy.

Google (account sign-in). If you sign in with Google, authentication is performed by Google services, and we receive basic account data (identifier, email, name, profile picture). Learn more in the Google Privacy Policy.

We do not share your personal data with any other third parties, except as required by law.

4. Where Data Is Stored

Your account, profile, and diary data are stored on our server located in Kazakhstan. The connection to the server is encrypted (HTTPS/TLS). Photos and descriptions are additionally sent to OpenAI (USA) for the duration of the analysis, as described in Section 3.

5. Guest Mode

You can use the App without registration. In guest mode:

• Your diary, favorites, and settings are stored only on your device and are not linked to your identity;
• Only the food-analysis requests themselves are sent to our server (and then to OpenAI); they are not linked to an account, and the limit is applied by IP address;
• If you uninstall the App, local data will be lost.

6. Data Retention

Account data and related records are kept for as long as your account exists. When you delete your account, all related data is deleted (see Section 7). Guest-mode local data is stored on your device until you delete it or uninstall the App.

7. Your Rights and Data Deletion

You can delete your account and all related data at any time:

• In the app: Profile → "Delete account". This permanently deletes your account, analysis history, food diary, and favorite meals;
• By request: email us at the address in the "Contacts" section, and we will delete your data.

Step-by-step instructions, the full list of deleted data, and retention periods for technical copies are available on the Account and Data Deletion page.

8. How We Protect Data

• Passwords are stored only as a cryptographic hash (bcrypt) and are never stored in plain text;
• Access to account data is protected by authorization tokens (JWT);
• Data transfer between the app and the server is encrypted (HTTPS/TLS);
• Authorization tokens are stored on the device in encrypted form.

9. Children

The App is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us with their data, please contact us so we can delete it.

10. Changes to This Policy

We may update this Policy. For significant changes, we will update the date at the top of the document and, if necessary, notify you within the App. The current version is always available at this address.