Privacy Notice.

1. Scope

This Privacy Notice applies to personal information we process through the CaloLens mobile app and our website at calorietrack.ai (together, the “Services”). It explains what we collect, how we use and share it, and your rights. We process personal information in accordance with the GDPR, the California Consumer Privacy Act/California Privacy Rights Act (CCPA/CPRA), and other applicable laws.

2. Changes to This Notice

We may update this Notice from time to time. If we make material changes, we will notify you as required by law. By continuing to use the Services after the updated Notice takes effect, you accept it. Please review this Notice periodically.

3. Personal Information We Collect

Information you provide

• Account: your name, email address, and, if you use a third-party sign-in, basic profile information from Apple or Google.
• Profile & goals: age, height, weight, activity level, dietary goal and preferences, and similar information you enter to personalize the app.
• Meals: photos and/or text descriptions of meals you submit, plus the calories, macros, timestamps, and notes associated with them.
• Purchases: subscription and billing details. Payments are processed by our payment processors; we do not collect or store full card numbers, though we may receive related billing details.
• Communications & surveys: information you provide when you contact support, respond to a survey, or otherwise communicate with us.

Information collected automatically

When you use the Services we may automatically collect device and usage information such as IP address, device and browser identifiers, app settings, approximate location derived from IP, and information about how you interact with the Services (pages/screens viewed, features used, frequency and duration of use). We use analytics tools (including Amplitude and Google Analytics) to understand usage; the analytics data we rely on is generally aggregated and de-identified.

Information from other sources

If you sign in through Apple or Google, we receive the information you authorize them to share. We may also receive limited information from our advertising and analytics partners.

4. How We Use Your Information

To provide the Services

• Analyze your meals and provide calorie/macro estimates, coaching, insights, and personalized targets;
• create and manage your Account and let you access features;
• process payments and manage subscriptions;
• respond to support requests and communicate with you about your Account, updates, and policy changes.

Administrative & safety purposes

• Operate, secure, debug, and improve the Services and develop new features;
• detect and prevent fraud, abuse, and security incidents;
• measure engagement and conduct research using aggregated, de-identified data;
• enforce our Terms and comply with legal obligations.

Marketing & advertising

We may use your information to send you product and marketing communications and to deliver and measure advertising (for example, through Meta), including building custom or lookalike audiences. You can opt out of marketing emails via the unsubscribe link and limit ad tracking via your device settings (see Your Rights).

AI model improvement

We may use content you submit in a de-identified manner to evaluate and improve our models and the quality of estimates, as described in our Terms.

5. How We Share Your Information

We do not sell your personal information. We share it only as described here:

• Service providers (processors) who help us run the Services under contract, including: Google Firebase (authentication and database); our AI provider (OpenAI) to analyze the meal photos/descriptions you submit; Stripe (web payments); Resend (transactional email); and Amplitude and Google Analytics (product analytics). Meal photos sent for analysis are not retained on our servers.
• Advertising partners (e.g., Meta) for the advertising and measurement purposes described above. We share event and conversion data together with identifiers used to match your activity, including hashed contact information (such as your email address, phone number, and name), cookie and click identifiers, IP address, and device or browser information. We never share your meal content.
• App stores (Apple, Google) when you purchase or manage a subscription through them.
• Legal and safety: to comply with law, enforce our Terms, or protect rights, safety, and property.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Notice.
• With your consent, or in aggregated/de-identified form that cannot reasonably identify you.

6. Cookies & Tracking Technologies

On our website we and our partners use cookies and similar technologies for analytics (Amplitude, Google Analytics) and advertising (the Meta Pixel and Conversions API), including to measure conversions and build audiences. You can control cookies through your browser settings and limit interest-based ads through your device and platform settings.

7. Data Retention

We keep personal information for as long as your Account is active and as needed to provide the Services, then for the period required to meet legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or de-identify your personal information, except where retention is required by law; residual copies may persist briefly in backups.

8. Security

We use technical and organizational safeguards including encryption in transit (TLS) and at rest, access controls, and periodic reviews. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. calorietrack.ai is not a HIPAA-covered entity and is not a medical product (see our health disclaimer at /health-disclaimer).

9. International Data Transfers

We and our service providers may process your information in countries other than where you live, including the United States. Where required, we use appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) for cross-border transfers.

10. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to the processing of your personal information, and to withdraw consent. You can export your data as CSV and delete your account directly in the app (Settings → Privacy). To exercise any right, email hello@calorietrack.ai; we will respond as required by law and will not discriminate against you for exercising your rights.

EEA/UK (GDPR)

Our legal bases for processing are: performance of our contract with you (to provide the Services), your consent (e.g., certain marketing and optional features), our legitimate interests (e.g., securing and improving the Services), and compliance with legal obligations. You may also lodge a complaint with your local data protection authority.

California (CCPA/CPRA)

We do not “sell” personal information or share it for cross-context behavioral advertising in exchange for money. California residents may request access, deletion, and correction, and may limit the use of sensitive personal information, by emailing hello@calorietrack.ai.

11. Children

The Services are not intended for anyone under 16 (or a higher age where required locally). We do not knowingly collect personal information from children under that age; if you believe a child has provided us information, contact hello@calorietrack.ai and we will delete it.

12. Contact

For privacy questions or to exercise your rights, contact us at hello@calorietrack.ai or Seebit Interactive Agency SRL, Str. Infratirii nr. 6, Targu Mures, Romania.