Privacy policy

The short version

• There are no ads, analytics or tracking in the app, and we never sell your data.
• Your diary is kept on your iPhone and backed up to your account.
• Apple Health data stays on your iPhone. We read it only after you connect it, and we save only the weigh-ins you enter, once you allow it.
• Meal and recipe photos and text go to an AI service only after you agree, and we do not store them.
• You can export your data and delete your account from inside the app at any time.

Who this policy covers

CaloMatic ("we", "us") provides the CaloMatic iPhone app and this website. We decide how your personal data is used, which makes us the data controller where data protection law uses that term.

For any question or privacy request, email [email protected].

Information you give us

What is involved depends on the features you use.

• Account: your email address, or your Apple sign-in identifier if you use Sign in with Apple, and the session details that keep you signed in. Apple may give us a private relay address instead of your real email.
• Profile: your name, birthday, sex and height, and the goals you set.
• Diary and library: the foods you log, their amounts, nutrition and times, your time zone, and the foods you save.
• Preferences: your units, display choices and other app settings.
• Support: your email, your message and any device details you choose to include. Those details are the app version, iOS version and language.
• Waitlist: your email address and the time you joined.

Your food diary, weight and body details can reveal information about your health, so we treat them with extra care.

On your iPhone and in your account backup

CaloMatic is local first. The app reads and writes a store on your iPhone, and works offline.

Your diary, personal library, profile and preferences are backed up to your account on Supabase, our database provider, so you can restore them. Weigh-ins you enter stay on your iPhone and, if you allow it, in Apple Health.

Before you sign in, the app may open an anonymous session so that food lookups work. These sessions hold no diary data and are removed after 30 days.

Apple Health

If you connect Apple Health, CaloMatic reads your weight, your steps and, if you allow it, your food history. You choose which of these to share in the Health permission sheet.

These readings are used on your iPhone. They are not stored on our servers, are not part of account backup and are not sent to AI services. If you allow it, the weigh-ins you enter in CaloMatic are saved to Apple Health; we write nothing else there. We never use Health data for advertising or sell it.

You can turn access off at any time in Apple's Health or Settings app.

Camera, photos and LiDAR

The camera reads barcodes and nutrition labels on your iPhone. On Pro iPhones, LiDAR measures the depth of your meal for portion estimates. None of this leaves your iPhone unless you use AI analysis.

AI analysis

Photo scans, meal descriptions and recipe import use AI services that run outside your iPhone. The app asks for your permission before it sends anything for the first time, and you can turn this off any time under More → Privacy.

When you use these features, we send your photos, the words you type, the scan measurements such as depth and food regions, and your region setting. Recipe import sends the recipe text, words and photos you give it. Your name, email and diary are not part of these requests.

Requests pass through our server to OpenRouter, a service that routes them to the company hosting the AI model. Today those are hosts of DeepSeek and GLM models, including Morph, Inference.net and Z.AI, and a Google Gemini model that looks up the nutrition of the food names a scan finds, using Exa web search. The models and hosts can change. We tell OpenRouter to use only hosts whose policies say they do not keep or train on what they receive, but we do not control those companies.

We do not store your photos or the results of the analysis on our servers, and they are not written to our logs. We keep only counts for usage limits, and nutrition lookups for food names, which identify foods and not people.

Turning AI off stops new requests. It cannot recall a request that was already sent.

Food search and barcodes

The app searches your own foods and its built-in tables on your iPhone first. Other searches go to our food service, which can pass the search text or barcode to the USDA's FoodData Central and, where enabled, FatSecret. These requests do not include your name or diary.

Some barcode and food lookups go straight from your iPhone to Open Food Facts, which sees your IP address as any website would.

Purchases

Apple handles App Store payments, and we never see your card details. RevenueCat manages subscription status for us and receives your app user ID and your purchase history. We store your subscription status so we can give you access.

How we use information

• To run the features you ask for, such as logging, targets and coaching.
• To back up and restore your data, and to keep your account working.
• To apply usage limits, prevent abuse and keep the service secure.
• To answer you when you contact support.
• To tell waitlist members about the launch.

We do not show ads, build advertising profiles or sell personal data. Your calorie targets are calculated suggestions, and you decide whether to follow them.

Who receives information

We share data only with the services that make CaloMatic work, and only for that purpose.

• Supabase: database, sign-in and server functions, hosted in the EU (Paris).
• OpenRouter, AI model hosts and Exa: AI analysis and its nutrition lookups, only after you agree.
• USDA FoodData Central, FatSecret and Open Food Facts: food search and barcode lookups.
• RevenueCat and Apple: purchases, subscriptions and Sign in with Apple.
• Cloudflare: hosting this website and storing the waitlist.

We may also disclose information when the law requires it, or to protect the rights and safety of people and of the service.

Legal bases

Where the GDPR or a similar law applies, we rely on these grounds. Running your account and the features you request is necessary to perform our agreement with you. Health-related data, Apple Health access and AI analysis rely on your explicit consent. Security and abuse prevention rely on our legitimate interests. The waitlist relies on your consent when you join.

You can withdraw consent at any time. That does not affect what was done before you withdrew it, and some features may stop working.

International transfers

Your account backup is hosted in the EU. Some providers, including OpenRouter, the AI model hosts, RevenueCat and Cloudflare, can process data in the United States or other countries. Where the law requires it, these transfers rely on an adequacy decision, standard contractual clauses or another lawful safeguard. Email [email protected] to ask which apply.

How long we keep information

• Account backup stays until you delete it or delete your account.
• Photos and AI results are not stored on our servers.
• Anonymous sessions are removed after 30 days.
• Waitlist emails stay until you ask us to remove them or the waitlist ends.
• Support messages stay for as long as we need them to help you and to meet legal duties.
• Apple and RevenueCat keep transaction records for billing, fraud prevention and legal reasons.

After an account is deleted, we keep a small record that the deletion happened, without your diary, profile or contact details. Copies in backups and service logs expire on their normal schedule.

Security

Data travels over encrypted connections. On your iPhone it is protected by iOS file protection, and on the server each account's records can be reached only by that account. No system is perfectly secure, so please tell us straight away if you think your account has been misused.

Your rights

Depending on where you live, you can ask to access, correct, delete, restrict or object to the use of your data, and you can ask for a portable copy. You can also complain to your local data protection authority.

Most of this is built in. Use More → Export data for CSV files and More → Delete account and data to erase everything. For anything else, email [email protected] from the address on your account. We normally reply within a month, and we will never ask for your password.

This website

This site sets no cookies and runs no analytics, and its fonts are hosted here. Your browser briefly keeps your scroll position in its own session storage so the opening animation can be skipped on reload; this never leaves your device.

Cloudflare hosts the site and processes standard connection data, such as IP addresses, to deliver pages and protect the service.

If you join the waitlist, we use your email only to tell you about the launch. To be removed, email [email protected].

Children

CaloMatic is for adults aged 18 and over, and we do not knowingly collect data from children. If you believe a child has given us personal data, email [email protected] and we will delete it.

Changes to this policy

The date at the top shows the current version. If we make a significant change, we will tell you in the app or by email, and we will ask for your consent again where the law requires it.