Privacy Policy — Cal.AI for iOS

Cal.AI — AI calorie & food tracker · iPhone and Apple Watch app on the App Store · Last updated: October 3, 2026

This Privacy Policy applies to the Cal.AI app for iPhone and its Apple Watch companion app, published on the App Store by BYTEMEDIA PTE. LTD. ("Cal.AI", "we", "us"), and to the Cal.AI service at cal.moonga.me that the app talks to. It explains what information the app accesses, collects, uses, shares and retains, including health data from Apple Health, and the choices you have. If you have questions, contact us at kirbyyue@gmail.com.

The Cal.AI app for Android has its own policy at cal.moonga.me/privacy-android.html.

At a glance

Health data. Only if you turn on the Apple Health integration, Cal.AI reads your active energy, steps and weight from Apple Health. This data is used solely to show your activity and keep your weight history current. It is never written back, never sold, never used for advertising, and never shared with third parties. See Section 2.
Food photos are analyzed to estimate calories and are not stored on our servers. See Section 1.
Data retention. Account data is kept until you delete your account; active calories and steps from Apple Health stay on your device, and weight is also saved to your account if you are signed in; food photos are discarded by our servers after analysis; server logs are deleted within 90 days. See Section 6.
No ads, no tracking, no selling of data. Cal.AI shows no third-party ads, does not use the advertising identifier (IDFA) and does not sell personal information.

1. Information you give us

Account information. If you sign in with Apple or Google, we receive your email address, your name and profile picture (if provided), and the stable account identifier issued by Apple or Google. With Sign in with Apple you may choose to hide your email; we then receive a private relay address. Signing in with Apple or Google is required to finish setting up the app and save your plan; you can sign out afterwards and keep using the app with the data stored on your device.
Profile and onboarding answers. Sex, birth year / age, height, current and target weight, activity level, weight goal and pace, body type, eating habits and preferences, diet plan, and any health conditions or allergies you choose to select. We use these to calculate your daily calorie and macro targets. If you are signed in, this profile is saved to your Cal.AI account on our server so your plan can be restored on a new device.
Food photos and text. Photos you take or pick from your library are sent to our server and analyzed by AI to estimate calories and nutrients; they are processed to produce a result and are not stored on our servers. Food names you search or type are sent to our server to look up matching foods in our nutrition database.
Barcodes. When you scan a product barcode, the barcode number is sent to our server to look up the product. Barcode detection itself happens on your device.
Food diary and weight log. The meals and weights you record are stored on your device. If you are signed in, your weight is also saved to your account (see Section 2.2). A summary of your daily intake and targets is shared with the Cal.AI watch app on your paired Apple Watch; it does not pass through our servers.
Support messages. If you email us, we receive your email address and whatever you include in the message.

2. Health data (Apple Health / HealthKit)

Cal.AI integrates with Apple Health through HealthKit. This section describes exactly how we access, collect, use, store, share and retain that data.

2.1 What we access and why

Access is optional. The app asks for Apple Health permission only when you turn on the Health integration in the app, and only for the three data types below. Cal.AI is read-only: it never writes, edits or deletes anything in Apple Health.

Apple Health data type	Data read	Why we read it
Active Energy	Active energy burned today and on recent days	Show the calories you burned on the Home screen and, only if you turn on the "Add extra activity to my budget" option, add activity beyond what your plan already counts to that day's calorie budget.
Steps	Daily step count	Show your daily steps and estimate activity when active-energy data is not available.
Weight (Body Mass)	Weigh-ins (weight records)	Keep your weight history and current weight up to date without manual entry.

2.2 How health data is collected and stored

The app reads these values from Apple Health on your iPhone when you open the app or refresh the Home or Progress screens. The values are kept in the app's private storage on your device so they can be shown without re-reading them every time. They are not stored in iCloud by us.
Active energy and steps never leave your device. They are not uploaded to our servers.
Weight: if you are signed in, your current weight and weight history (including weigh-ins imported from Apple Health) are saved to your Cal.AI profile on our server so that your plan can be restored on a new device. If you are not signed in, weight stays on your device only.

2.3 How health data is used and shared

Health data is used only to provide the health and fitness features described above. We do not:

sell health data, or use it for advertising, marketing, credit, insurance, employment or any other eligibility decision;
share it with third parties, including advertisers, data brokers or information resellers;
send it to our analytics or crash-reporting providers, or to the AI provider that analyzes food photos;
use it for data mining, AI/ML model training, or any purpose other than providing the app's features to you.

Our use of data from HealthKit follows Apple's App Store Review Guidelines for health data. Health data is transferred only if required by law or to the extent necessary to provide the feature you requested.

2.4 How long health data is kept and how to delete it

Health data stored on your device is kept until you delete the app.
Weight history saved to your Cal.AI account is kept until you delete your account (see Section 8); it is then permanently deleted from our servers.
You can revoke Cal.AI's Apple Health access at any time in the Health app › Sharing › Apps and Services › Cal.AI, or in Settings › Health › Data Access & Devices › Cal.AI. After revocation the app stops reading Apple Health; previously read values remain in the app on your device until you delete the app.

3. Information collected automatically

Device and app information: an app-generated device identifier, platform (iOS), app version, language and time zone. These are sent with each request to secure the service and localize content.
IP address and approximate region, recorded in server logs and at sign-in for security, abuse prevention and rate limiting.
Push notification token (Apple Push Notification service) if you allow notifications, so we can deliver reminders you have asked for.
Usage analytics (Firebase Analytics): which screens you view and which features you use, such as completing onboarding steps or opening the subscription page, together with device model, OS version and country. We use the version of Firebase Analytics without advertising-identifier support: we do not collect the IDFA and we do not track you across other companies' apps or websites.
Crash and diagnostics data (Firebase Crashlytics): crash traces, device model and OS version.
Purchase information: when you subscribe through the App Store, Apple gives us the transaction identifier, product and dates so we can verify the purchase and unlock premium features. We never receive your payment card details.

Camera and photo library

The camera is used only to photograph food and scan barcodes. Photo-library access, where requested, is used only to let you pick a food photo. We do not access other photos.

4. How we use information

Analyze food photos, look up the foods you search or scan, and estimate calories and nutrients.
Calculate and update your calorie, protein, fat and carbohydrate targets.
Show your progress, including activity and weight from Apple Health if you enable it.
Create and secure your account, restore your profile on a new device, and verify subscriptions.
Send reminders and service notifications you have allowed.
Understand app usage, fix crashes and improve features.
Prevent fraud and abuse, and comply with legal obligations.

We do not sell your personal information, we do not show third-party ads in Cal.AI, and we do not use your data to train AI models.

5. How we share information

We share information only with service providers that help us run Cal.AI, and only as needed for the purposes above. Health data is not shared with any of them. Weight saved to your account (Section 2.2) is stored on our servers with our hosting provider and is not passed to any other provider.

Provider	What they receive	Purpose
OpenAI	Food photos you submit for analysis	AI food recognition and nutrition estimates. Not linked to your name or email by us.
Google (Firebase Analytics, Crashlytics)	Usage events, crash data, device info	Analytics, crash reporting
Apple (Sign in with Apple, Apple Push Notification service)	Sign-in requests, push token	Authentication, notifications
Google Sign-In	Sign-in requests	Authentication
Apple App Store	Purchase verification requests	Subscription billing and verification
Our cloud hosting provider	Data stored on our servers	Hosting the Cal.AI service

These providers may use the information only to provide their services to us and must protect it at least as well as this policy does. Their own privacy policies: OpenAI, Google, Apple.

We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.

6. Data retention and deletion

We keep personal information only as long as needed for the purposes described in this policy. The table below states our retention periods for each category of data.

Data	Where it is stored	How long we keep it
Account information (email, name, picture, Apple/Google account ID)	Our servers	Until you delete your account. Deleted from our servers when you delete your account in the app, or within 30 days of the email request described at cal.moonga.me/delete-account.html (Section 8).
Profile, plan and targets; weight history synced to your account	Our servers	Until you delete your account.
Apple Health data (active energy, steps, weight read by the app)	Your device only (weight also in your account if signed in)	Until you delete the app; synced weight until you delete your account.
Food photos	Not stored on our servers; the app keeps a copy on your device for your diary	On our servers: processed to produce a result and discarded immediately after analysis. On your device: until you delete the entry or delete the app.
Food diary, meals and weights you record; watch summary	Your iPhone and paired Apple Watch	Until you delete them in the app or delete the app.
Device identifier, app version, language, time zone, push token	Our servers	Until you ask us to delete it (Section 8). When you delete your account, the device record is unlinked from the account but is not deleted on its own.
Count of free AI scans used	Our servers	For as long as your account exists, to apply the free allowance. After account deletion it remains in an anonymised account record that no longer contains your email, name or sign-in identity.
Server logs (IP address, request path and time, app version)	Our servers	Up to 90 days, then deleted automatically.
Subscription and purchase records (transaction ID, product, dates)	Our servers	For the life of your subscription and afterwards for as long as required for tax, accounting and fraud-prevention purposes under applicable law.
Usage analytics and crash reports	Google Firebase	Retained by Google according to Firebase's retention settings: analytics data for up to 14 months, crash reports for 90 days.
Support emails	Our mailbox	Up to 2 years after your request is resolved.

When you delete your account, we permanently remove your account details (email address, name, picture and Apple or Google sign-in identifier), your profile and survey answers (including synced weight data), your plan and targets, and your sign-in sessions on all devices, and we unlink your devices from the account. Purchase records and the count of free scans used are kept as described above, attached to an anonymised account record that no longer contains your email, name or sign-in identity. Data that stays only on your device is removed when you delete the app.

7. Data storage and security

Data you sync is stored on our cloud servers and may be processed outside your country of residence. All traffic between the app and our servers is encrypted with HTTPS, and requests are signed to prevent tampering. Food photos are processed to produce a result and are not stored on our servers. No method of transmission or storage is 100% secure, but we work to protect your information.

8. Your choices and rights

Delete your account in the app: Me › Account › Delete Account. This permanently removes your account details, profile and plan from our servers and signs you out on all devices; what is kept is listed in Section 6.
Delete without the app: follow the steps at cal.moonga.me/delete-account.html.
Apple Health: revoke Cal.AI's access at any time in Settings › Health › Data Access & Devices › Cal.AI. Data already read stays on your device until you delete the app.
Withdraw consent: you can stop using any optional feature (Apple Health integration, notifications, camera), sign out or delete your account at any time; this does not affect processing that happened before.
Notifications, camera and photos: you can turn these off in Settings › Cal.AI.
Access, correction or deletion: depending on where you live (for example under the GDPR or the CCPA), you may have the right to access, correct, delete or export your personal information, or object to its processing. Email us at kirbyyue@gmail.com and we will respond within 30 days.

9. Health and medical disclaimer

Cal.AI provides general nutrition and wellness information. Calorie and nutrient values are estimates. Cal.AI is not a medical device and does not diagnose, treat or prevent any disease. Consult a healthcare professional before making significant changes to your diet, especially if you have a medical condition, are pregnant, or have a history of eating disorders.

10. Children

Cal.AI is intended for people aged 16 and over and is not directed to children. We do not knowingly collect personal information from anyone under 16 (or under a higher minimum age required in your country). If you believe a child has given us personal information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and change the "Last updated" date. If the changes are significant, we will notify you in the app.

12. Contact us

Developer: BYTEMEDIA PTE. LTD.
Email: kirbyyue@gmail.com