Privacy Policy

The App handles the following types of information.

Health data

Calorithm integrates with Apple Health and Google Health Connect to access and display the following health-related data.

This data is used to provide insights about calorie balance, body composition, and weight trends. Raw data retrieved from Apple Health / Google Health Connect is processed locally on your device; when you use AI features, only the necessary summaries may be used for AI processing.

Steps, sleep, and water are read only if you allow it; Calorithm never writes them. Steps and sleep are used to show today’s steps and last night’s sleep on the dashboard, and to show day-to-day changes in trend charts and Reflection reports. Water is used to show how much you drank on the Water card when you add it to the dashboard or trends. When you use AI features, the only step, water, and sleep data that may be sent is summarized values: daily and period step and water totals, and each night’s sleep time, time in bed, bedtime, and nap time, plus their averages. Individual sleep and water records are not sent.

On Android, after you grant access, Calorithm may also read Health Connect data in the background — including while the app is not on screen — to keep calorie balance and body composition up to date. Reads are not limited to times when the app is in the foreground.

If health data carries over via iCloud, that is Apple Health’s own sync. Calorithm does not store health information in CloudKit.

User-provided information

You can manually enter calorie intake. This information is stored locally on your device. When you use AI features, your input, photos, or summaries derived from your records may be transmitted for AI processing.

Body measurements you provide (such as height, gender, age) are stored in an encrypted local database and are used solely for calorie balance estimation.

Camera & photo library

When you choose to estimate calories from a food photo, Calorithm may access your device's camera or photo library. Photos are sent to Google AI services (Vertex AI Gemini) solely for AI processing. The App itself does not store photos externally.

Purchase information

When you subscribe to Plus or buy additional AI points on iOS, the App's server verifies the App Store's signed transaction information and uses it to grant points and manage your balance. The server stores keyed hashes of the purchase and subscription identifiers, together with the state of point grants, balances, and refunds. The App does not receive your payment method or name.

When you subscribe to Plus on Android, the App's server sends the Google Play purchase token to Google Play to verify the state of the subscription when the purchase is confirmed, when you use AI features, and when your remaining points are shown, and uses it to confirm the purchase, grant points, and manage your balance. When you resume a subscription in Google Play without opening the App, for example, the server receives a notification from Google Play and verifies it in the same way. The server does not store the purchase token itself; it stores a keyed hash of it, together with the subscription number linked to it and the state of point grants and balances. The App does not receive your payment method, name, or Google Account. Additional AI points are not sold on Android.

In-app inquiries

When you contact us from within the App, the App sends the category you chose, your message, your reply-to email address, and diagnostic information (app and OS version, device model, Plus status, error type and time, and the screen the contact form was opened from). A reply-to address is required for the How to use, Purchases and billing, and Privacy and data categories, and optional for the others. You can choose not to send diagnostic information. This information reaches the developer's email through Resend, an email delivery service, and is used only to respond to your inquiry. The App's server does not store your message or reply-to address.

Usage data

In-app usage analytics and crash reporting are disabled by default. They are collected only after you separately opt in to each category in Settings, and you can withdraw either consent at any time. The website may collect minimal usage information such as page views.

• App feature usage statistics
• App performance data
• Crash reports
• Website page views and button clicks

The App does not send calories, meals, weight, body fat, activity, goals, or ranges or classifications derived from them to Analytics or Crashlytics. Crash reports do not include health or food data or user-entered content.

Where ad consent is required, the App presents Google's User Messaging Platform consent form and uses the resulting eligibility to decide whether ads may be requested. When required, you can review or change your choices from Ad privacy options in the App. When ads are displayed, Google Mobile Ads may collect approximate location, device and advertising identifiers, ad or in-app interactions, performance data, and other diagnostics. These may be used for ad delivery and measurement, analytics, fraud prevention, and app functionality. Health and food data are not used for advertising.

Collected information is used to:

• Provide, maintain, and improve the App's functionality
• Develop new features and services
• Understand how users interact with the App
• Detect, prevent, and address technical issues

Your personal information is not sold or traded. Third-party services may process data as needed for AI processing, analytics, diagnostics, and advertising delivery. Health data and meal records are not used for advertising.

Third-party services

Each service processes data under its own privacy policy, contract, and terms. Google processes estimation, suggestions, and reports, and photos are sent to Google for estimation. AI features may process the selected input and necessary summaries of meals, activity, steps, water, sleep, weight, body fat, goals, preferences, health considerations, allergies, and optional notes. The content of AI consultations (your message, the earlier conversation, and the record summaries the consultation needs) is sent to OpenAI and processed in the United States. Before the first transfer to Google's AI service or to OpenAI, the App displays the recipient, the data categories, and the purpose, and obtains explicit consent. If you decline, no data is sent. You can withdraw consent at any time in the App's Settings. OpenAI states that data sent to its API is not used to train its models unless the customer opts in.

Consultations include your message, the recent conversation, a summary of earlier messages, goals and wishes taken from the conversation, the profile you entered, and the names and calories of meals saved in Dietary Energy Presets. In a long conversation, older messages are sent to OpenAI to be summarized. Each consultation also includes today’s targets and records so far, each of the last 7 days, and daily averages over the last 4 weeks and 12 months. These records include calories eaten and burned, balance, protein, fat, carbohydrates, salt, steps, water, sleep time, and weight. If you chose a public reference, its recommended ranges are included too. In Plus, daily averages for the comparison baseline you chose (the 7-day moving average or a range you set) are also included. When you consult about a reflection, the report you confirmed for sending may also be included: the dates of the period, meal and exercise names, times, and calories, water per day and for the period, weight and body fat, summarized sleep information, and additional analysis shown in Plus. Raw sleep and water records are not sent. When you reopen a conversation and send another message, its saved report summary may be attached again.

Transfers to third parties in foreign countries

Google and OpenAI are companies headquartered in the United States. The App provides AI feature data to them based on your consent. Before asking for consent, the App informs you of the following.

Where data is processed: both in the United States. Google processes estimation, suggestions, and reports, and OpenAI processes AI consultations.

The personal information protection system of the United States: see the survey published by Japan's Personal Information Protection Commission (link below).

Safeguards taken by each company: Google states that it does not use data sent to Vertex AI to train models without the customer's permission, and that temporary caching for speed (up to 24 hours) stays within the region that processed the request. OpenAI states that it does not use data sent to its API to train models unless the customer opts in, and keeps it for up to 30 days by default for abuse monitoring. The App asks OpenAI not to store responses. Both companies offer contract terms that govern how they handle data (data processing addenda).

• Personal Information Protection Commission: survey of the personal information protection system in the United States (Japanese)

Google Search for meal estimation (Plus)

When search is enabled with Plus, text-based meal estimation may use Google Search when official nutrition information for a chain restaurant, brand, or product is needed. The AI is instructed not to search for generic dishes or ingredients. Search terms are generated from your input.

For this Google Search feature, Google may retain search terms and related context for up to 3 days for debugging the search infrastructure, without associating it with you. This describes search-related processing, not the retention period for all AI data.

Estimates that used search show the titles of the pages they referred to, and Google Search Suggestions right after the result is received. Tapping a page or a suggestion opens it in your external browser, where that site's terms apply (Google's Terms of Service for Google pages). The App does not record which pages you open.

• Google Service Specific Terms (Grounding with Google Search)
• OpenAI API data controls

Web search in consultations (Plus)

In Plus consultations, the AI may use OpenAI web search to check publicly available information when needed. Consultations on the free plan do not use search. The search terms are generated by the AI from your question. The AI is instructed not to include personal information, such as your meal or weight records or your health considerations, in search terms.

Search terms are sent to OpenAI and its search providers to perform the search, and are handled under their respective data retention policies.

Answers that used search show the title and domain of the pages they referred to. Tapping one opens that page in your external browser, where that site's terms apply. The App does not record which pages you open.

Records past their storage period are deleted automatically, but actual deletion can take about a day after the period ends.

Sensitive personal data — including body measurements, AI estimation history, and generated AI reports — is stored in an AES-256 encrypted database on your device. However, no method of transmission over the internet or electronic storage is 100% secure, and absolute security cannot be guaranteed.

You have the following rights regarding your personal data.

• Usage analytics: disabled by default; enable or withdraw consent in Settings > Privacy & Data > Usage Analytics.
• Ad choices: make your selection in Google's UMP consent form. Where required, review or change it in Settings > Privacy & Data > Ad privacy options. On iOS, ATT separately controls cross-app tracking.
• Crash reporting: disabled by default and controlled independently from usage analytics.
• AI data sharing: withdrawing consent in Settings stops new AI transfers and deletes the AI responses temporarily stored on the server and the record of your AI allowance. The balance of purchased points remains. Requests already processed cannot be undone.
• Consultation history: you can delete it from this device. Deleting a conversation does not delete logged meals or the original reflection, and does not mean that data already processed by external services is immediately erased.

Requests for disclosure, correction, or suspension

For personal data held on the App's server or by the operator, you can request notice of the purpose of use, disclosure, correction, addition or deletion, suspension of use or erasure, and suspension of provision to third parties. Send your request to the email address below. After confirming that you are the person concerned, we will respond without delay in accordance with applicable law.

Data stored only on your device is not received by the operator, so you can review and delete it in the App.

The operator's name and address are provided without delay upon request. Complaints and questions about how personal information is handled are accepted at the same email address.

This Privacy Policy may be updated from time to time. Any changes will be posted on this page with an updated “Last Updated” date at the top.

If you have any questions about this Privacy Policy, please contact us.