CalNotes privacy policy.

Short version

• Your core food diary is stored locally on your device. CalNotes does not require an account to use the main logging experience.
• AI food estimates, photo scans, re-estimates, and calorie recommendations may send the content you submit to OpenRouter and model providers used through OpenRouter.
• Premium subscriptions and purchase status are handled through Apple, Google, and RevenueCat.
• If you enable health sync, CalNotes writes dietary calorie data to Apple Health or Google Health Connect. You control those permissions in device settings.
• CalNotes does not sell your personal information and does not use health data for advertising, creditworthiness, insurance, employment, or data-broker activity.

Scope

This Privacy Policy applies to CalNotes, the CalNotes website, and related support communications. It does not apply to third-party websites, app stores, operating systems, AI model providers, payment processors, Apple Health, Google Health Connect, or other services that have their own privacy policies.

Who is responsible

CalNotes is operated by the publisher identified for CalNotes in the applicable Apple App Store or Google Play listing for your region. In privacy laws that use terms such as "controller," "business," or "operator," that publisher is responsible for the personal information handled by CalNotes, except where a third-party service handles information under its own policy.

For subscription infrastructure, RevenueCat may process certain purchase and app usage information as our processor or service provider. Apple and Google process payments and app-store account data under their own terms.

Information CalNotes handles

How we use information

• Provide the calorie diary, saved meals, streaks, reminders, settings, and local app experience.
• Generate AI-assisted food, macro, and calorie estimates when you request them.
• Analyze food photos that you submit for recognition and calorie estimation.
• Provide AI calorie-target recommendations based on details you enter, such as age, height, weight, gender, activity level, goals, and optional notes.
• Validate Premium access, restore purchases, manage subscriptions, and prevent purchase fraud or abuse.
• Sync dietary calorie data to Apple Health or Google Health Connect when you enable health sync.
• Send local notifications and reminders that you configure.
• Respond to support, privacy, bug-report, and feature-request messages.
• Protect the app, troubleshoot errors, improve reliability, comply with law, enforce terms, and defend legal rights.

We do not use your food logs, photos, health data, HealthKit data, or Health Connect data for advertising or sale.

Legal bases

Where laws such as the GDPR, UK GDPR, Swiss FADP, LGPD, or similar frameworks require a legal basis, we rely on one or more of the following:

AI processing

AI estimates are approximate. When you use AI-powered food estimation, photo scanning, re-estimation, or calorie-target recommendations, CalNotes may send the content needed for that request to OpenRouter and model providers used through OpenRouter. This may include food text, notes, selected photos, profile details, goals, and context you type into the app.

You should not submit medical details, highly sensitive information, or anything you do not want processed by AI providers. You can use CalNotes without using AI features, but AI-powered estimates may be unavailable or less useful.

Health data

If you enable health sync, CalNotes requests permission to write dietary energy consumed or calorie data to Apple Health or Google Health Connect. You can grant, deny, or revoke those permissions in Apple Health, iOS Settings, Android Settings, or Google Health Connect settings.

CalNotes does not sell HealthKit, Apple Health, or Health Connect data; use it for advertising, creditworthiness, insurance, employment, or data-broker activity; transfer it to advertising platforms; or use it for a medical device purpose.

Third-party services

International transfers

CalNotes, service providers, app stores, AI providers, and support providers may process information in countries other than where you live. Those countries may have privacy laws different from your local law. Where required, we rely on appropriate safeguards such as contractual commitments, standard contractual clauses, adequacy decisions, consent, or other lawful transfer mechanisms.

Retention

• Local diary data remains on your device until you delete entries, clear app data where your operating system allows it, or uninstall the app.
• Support messages are kept for as long as reasonably needed to respond, maintain records, protect rights, and comply with legal obligations.
• Purchase and subscription records may be retained by Apple, Google, and RevenueCat as needed for subscriptions, fraud prevention, disputes, accounting, tax, legal obligations, and store requirements.
• AI prompts, images, and outputs sent to OpenRouter or model providers may be retained according to OpenRouter's policies and the selected model providers' policies. CalNotes does not control every downstream provider's retention practices.
• Data written to Apple Health or Google Health Connect remains subject to those platform settings. You can manage or delete that data in Apple Health, iOS Settings, Android Settings, or Health Connect.
• We may keep limited records where needed for security, abuse prevention, legal compliance, dispute resolution, and enforcing our rights.

Your choices

• Delete individual food entries in the app.
• Do not use AI, photo, voice, recommendation, or health-sync features if you do not want those inputs processed for those features.
• Revoke camera, photo, microphone, speech, notification, and health permissions in your device settings.
• Manage, cancel, or restore subscriptions through Apple, Google, or the CalNotes Premium screen.
• Uninstall the app to remove local app data from the device, subject to your operating system backups and platform behavior.
• Use the contact page to make privacy requests.

Your privacy rights

Depending on where you live, including the EEA, United Kingdom, Switzerland, Brazil, Canada, Australia, New Zealand, California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia, and other places with privacy laws, you may have some or all of these rights:

• Access, know, or receive information about personal information processed about you.
• Correct inaccurate information.
• Delete information, subject to legal, security, fraud-prevention, accounting, and technical limits.
• Object to or restrict certain processing where applicable.
• Withdraw consent for optional permissions or processing, without affecting processing that happened before withdrawal.
• Port certain information where applicable.
• Appeal or complain to a privacy regulator where your local law provides that right.
• Opt out of sale, sharing, or targeted advertising where applicable. CalNotes does not sell personal information or share it for cross-context behavioral advertising.

To exercise rights, contact us through the contact page. We may need to verify your request. Some data may be stored only on your device, which means we may not be able to access, export, correct, or delete it for you remotely.

California and U.S. state notice

This section supplements the policy for residents of California and other U.S. states with privacy laws. In the past 12 months, CalNotes may have collected the following categories, depending on how you used the app or website:

CalNotes does not sell personal information, does not share personal information for cross-context behavioral advertising, and does not knowingly sell or share personal information of children under 16. We use sensitive information only for the purposes described in this policy, including providing requested app features, health sync, security, compliance, and support.

Children

CalNotes is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through CalNotes or the website, contact us so we can take appropriate action. App-store age ratings and regional availability rules may impose additional requirements.

Security

We use reasonable administrative, technical, and organizational measures designed to protect information. No app, website, device, network, or provider can guarantee perfect security. Protect your device with a passcode or biometric lock, keep your operating system updated, and avoid submitting sensitive medical details to AI or support forms.

Health and AI disclaimer

CalNotes is a personal food and calorie tracking tool. It is not a medical device, not a diagnostic tool, and not medical, nutrition, fitness, or professional advice. AI estimates may be incomplete, inaccurate, or inappropriate for your situation. Talk with a qualified professional before making medical, nutrition, eating-disorder, pregnancy, pediatric, allergy, diabetes, or other health decisions.

Changes

We may update this policy from time to time. When we do, we will update the effective date above. If changes materially affect your rights or how we process personal information, we will provide additional notice where required.

Contact

For privacy questions or requests, use the CalNotes contact page. Do not include sensitive medical details in support messages.