Privacy Policy

Account information. Your email address and a unique account identifier. If you sign in with Apple or Google, we receive the identifier and email those services share with us (Apple may share a private relay email if you choose “Hide My Email”). Passwords for email accounts are handled by our authentication provider and are never visible to us.

Health and fitness information you provide. During onboarding and while using the app, you may provide: gender, birth date, height, weight, target weight, goal type and pace, workout frequency, diet type, and related preferences. This information is used to calculate your personalized calorie and macronutrient plan.

Meal and weight logs. The meals you log (meal name, calories, protein, carbs, fat, and date) and your weight entries over time.

Meal photos (processed, not stored). When you use AI photo logging, your photo is transmitted securely to our AI provider (OpenAI) to estimate the meal’s nutrition. We store only the resulting name, calorie, and macronutrient values in your meal log. The photo itself is not saved to our servers. Per OpenAI’s API policies, data submitted through the API is not used to train their models.

Purchase information. Subscription status and entitlement information from our subscription manager, RevenueCat, and the Apple App Store or Google Play. We never receive or store your credit card number.

Referral codes. If you enter a referral code, we store the code and whether free access was granted.

Usage and technical information. Basic technical data needed to operate and secure the Service, such as authentication tokens, request timestamps, rate-limit and daily AI-usage counters, and anti-bot verification results (Cloudflare Turnstile). We do not use third-party advertising or cross-app tracking SDKs.

• To create and secure your account;
• To calculate and maintain your personalized calorie plan;
• To provide core features: meal logging, AI photo analysis, food database search, weight tracking, and weekly progress;
• To verify your subscription and provide paid features;
• To send optional reminders and notifications, if you enable them;
• To prevent fraud, abuse, and unauthorized access;
• To respond to support requests and comply with legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

We share data only with the processors required to run the Service:

Each provider processes data only as needed to provide its service to us. We may also disclose information if required by law or to protect the rights, safety, or property of our users or ourselves.

We keep your data for as long as your account exists. You can permanently delete your account at any time in the app (Profile → Delete Account). This immediately and permanently deletes your account and all associated data — profile, onboarding information, calorie plans, meal logs, and weight logs — from our systems. You may also request deletion by emailing calbanksupport@gmail.com. Subscription billing records held by Apple, Google, or RevenueCat are retained by those providers per their own policies.

Your data is encrypted in transit (TLS). Database access is protected by row-level security so each account can only ever access its own records. Session credentials on your device are stored in the platform’s secure storage (iOS Keychain / Android equivalent). Server-side keys and AI credentials never ship inside the app.

Depending on where you live (including under GDPR and CCPA/CPRA), you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. Most of these you can do directly in the app (edit your profile; delete your account). For anything else, email calbanksupport@gmail.com and we will respond within the time required by applicable law. We do not discriminate against you for exercising your rights. We do not sell or “share” personal information as defined by the CCPA.

Your height, weight, goals, and nutrition logs are health-related information. We process this data solely to provide the Service to you, with your consent, and never for advertising. Where applicable state laws (such as Washington’s My Health My Data Act) grant additional rights over consumer health data, we honor those rights — contact us at the email above.

Calbank is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us and we will delete it.

Our servers are located in the United States. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S. Where required, we rely on appropriate safeguards for such transfers.

We may update this Privacy Policy from time to time. Material changes will be announced through reasonable means, such as an in-app notice. The “Last Updated” date above reflects the latest revision.

Questions about this Privacy Policy:

• Email: calbanksupport@gmail.com